Generally Accepted System Security Principles