premise: To provide a common understanding of what is needed and expected in information technology security programs , NIST developed and published Generally Accepted Principles and Practices for Securing Information Technology Systems ( Special Pub 800-14 ) in September 1996 .
hypothesis: Prior to the principles amd practices being published in 1996 , there were many lawsuits .