ThepurposeoftheEngineeringPrinciplesfor InformationTechnology(IT)Security(EP-ITS) istopresentalistofsystem-levelsecurity principlestobeconsideredinthedesign, development,andoperationofaninformationsystem. Ideally,theprinciplespresentedherewouldbeusedfromthe