The principles of security have not changed in thousands of years(Least Privilege, fix vulnerabilities/gaps, understand methods of attack...) as those principles apply to the world of IT they have not changed since IT happened. Specific events and vulnerabilities may have come and gone but the principles of design, and all such like things, have not changed at all. What has changed about trying to maintain Confidentiality, Integrity, Availability, Accountability, etc.?