> The question for today's security specialists is, what still makes sense from the 1985 guidelines?

Indeed. Today every webapp developer is a security specialist.

> Certain audit reports (e.g., date and time of last login) should be provided by the system directly to the user.

In 2013, this still makes sense, but is not often implemented.