Premise: To provide a common understanding of what is needed and expected in information technology security programs, NIST developed and published Generally Accepted Principles and Practices for Securing Information Technology Systems (Special Pub 800-14) in September 1996.
Hypothesis: Prior to the principles and practices being published in 1996, there were many lawsuits. 
Label: neutral