I 1992 og revideret i 2002 foreslog OECD's Guidelines for the Security of Information Systems and Networks  de ni generelt accepterede principper: bevidsthed, ansvarlighed, reaktionssvar, etik, demokrati, risikovurdering, sikkerheds design og implementation, sikkerhedsadministration, and fornyet sikkerhedsvurdering.