Security Controls
NIST SP 800-53
Security and Privacy Controls for Information Systems
A catalogue of over a thousand security and privacy controls across twenty families, with baselines for low, moderate and high impact systems, published free of charge and machine-readable via OSCAL.
Even outside US federal scope it is the reference people map to when two frameworks disagree: 800-53 usually has the finer-grained control that both can point at.
At a glance
- Category
- Security Controls
- Jurisdiction
- US / Global
- Governance
- NIST
- Status
- Revision 5 (2020); patch release 5.2.0 in 2025
- First released
- 2005
Links
Related frameworks
Other entries under Security Controls.
- ISO/IEC 27002: Information Security Controls
- CIS Controls: CIS Critical Security Controls
See NIST SP 800-53 in context
Open the interactive Data Landscape for Regulation to compare NIST SP 800-53 against every other framework, or grab the raw JSON. Certification schemes and editions move — follow the source links before relying on this page.