Appendix II lists the principles identified in NIST's Generally Accepted Principles and Practices for Securing Information Technology Systems, September 1996.
Appendix II contains other information that is not from NIST.