Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Generally Accepted Principles and Practices for Securing Information Technology Systems

Published

Author(s)

Marianne M. Swanson, Barbara Guttman

Abstract

As more organizations share information electronically, a common understanding of what is needed and expected in securing information technology (IT) resources is required. This document provides a baseline that organizations can use to establish and review their IT security programs. The document gives a foundation that organizations can reference when conducting multi-organizational business as well as internal business. Management, internal auditors, users, system developers, and security practioners can use the guideline to gain an understanding of the basic security requirements most IT systems should contain. The foundation begins with generally accepted system security principles and continues with common practices that are used in securing IT systems.
Citation
Special Publication (NIST SP) - 800-14
Report Number
800-14

Keywords

IT security, security baseline, security practices, security principles

Citation

Swanson, M. and Guttman, B. (1996), Generally Accepted Principles and Practices for Securing Information Technology Systems, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=890092 (Accessed October 20, 2021)
Created September 3, 1996, Updated February 19, 2017