TheArtOfService
Back to Frameworks

NIST SP 800-53 Rev 5 HIGH

Self-Assess
United States (federal information systems; voluntary for other organizations)
vRev 5, release 5.2.0 (SP 800-53B release 5.2.0 of 27 August 2025; allocation unchanged since the December 2020 update)
18 domains
370 controls

The high-impact security control baseline of NIST SP 800-53B (release 5.2.0): the 370 SP 800-53 Rev 5 controls and control enhancements a federal system categorized high under FIPS 199 and FIPS 200 starts from before tailoring, each with its release 5.2.0 control statement, parameters organization-defined, and the SP 800-53A Rev 5 examine and test objects an assessor asks for.

Verified

NIST SP 800-53 Rev 5 HIGH is a compliance framework from United States (federal information systems; voluntary for other organizations) with 18 domains and 370 controls that map to 3 other frameworks. The largest domains are AC: Access Control – NIST SP 800-53 Revision 5.1 HIGH (46 controls), CP: Contingency Planning – NIST SP 800-53 Revision 5.1 HIGH (35 controls), CM: Configuration Management – NIST SP 800-53 Revision 5.1 HIGH (32 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykControl text last updated

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (18)

AC: Access Control – NIST SP 800-53 Revision 5.1 HIGH

46 controls
Controls in the AC: Access Control – NIST SP 800-53 Revision 5.1 HIGH domain of NIST SP 800-53 Rev 5 HIGH — 46 controls
CodeTitle
nist-sp-800-53-revision-5-1-high::AC-1AC-1 Policy and Procedures
nist-sp-800-53-revision-5-1-high::AC-10AC-10 Concurrent Session Control
nist-sp-800-53-revision-5-1-high::AC-11AC-11 Device Lock
nist-sp-800-53-revision-5-1-high::AC-11(1)AC-11(1) Device Lock | Pattern-hiding Displays
nist-sp-800-53-revision-5-1-high::AC-12AC-12 Session Termination
nist-sp-800-53-revision-5-1-high::AC-14AC-14 Permitted Actions Without Identification or Authentication
nist-sp-800-53-revision-5-1-high::AC-17AC-17 Remote Access
nist-sp-800-53-revision-5-1-high::AC-17(1)AC-17(1) Remote Access | Monitoring and Control
nist-sp-800-53-revision-5-1-high::AC-17(2)AC-17(2) Remote Access | Protection of Confidentiality and Integrity Using Encryption
nist-sp-800-53-revision-5-1-high::AC-17(3)AC-17(3) Remote Access | Managed Access Control Points
nist-sp-800-53-revision-5-1-high::AC-17(4)AC-17(4) Remote Access | Privileged Commands and Access
nist-sp-800-53-revision-5-1-high::AC-18AC-18 Wireless Access
nist-sp-800-53-revision-5-1-high::AC-18(1)AC-18(1) Wireless Access | Authentication and Encryption
nist-sp-800-53-revision-5-1-high::AC-18(3)AC-18(3) Wireless Access | Disable Wireless Networking
nist-sp-800-53-revision-5-1-high::AC-18(4)AC-18(4) Wireless Access | Restrict Configurations by Users
nist-sp-800-53-revision-5-1-high::AC-18(5)AC-18(5) Wireless Access | Antennas and Transmission Power Levels
nist-sp-800-53-revision-5-1-high::AC-19AC-19 Access Control for Mobile Devices
nist-sp-800-53-revision-5-1-high::AC-19(5)AC-19(5) Access Control for Mobile Devices | Full Device or Container-based Encryption
nist-sp-800-53-revision-5-1-high::AC-2AC-2 Account Management
nist-sp-800-53-revision-5-1-high::AC-2(1)AC-2(1) Account Management | Automated System Account Management
nist-sp-800-53-revision-5-1-high::AC-2(11)AC-2(11) Account Management | Usage Conditions
nist-sp-800-53-revision-5-1-high::AC-2(12)AC-2(12) Account Management | Account Monitoring for Atypical Usage
nist-sp-800-53-revision-5-1-high::AC-2(13)AC-2(13) Account Management | Disable Accounts for High-risk Individuals
nist-sp-800-53-revision-5-1-high::AC-2(2)AC-2(2) Account Management | Automated Temporary and Emergency Account Management
nist-sp-800-53-revision-5-1-high::AC-2(3)AC-2(3) Account Management | Disable Accounts
nist-sp-800-53-revision-5-1-high::AC-2(4)AC-2(4) Account Management | Automated Audit Actions
nist-sp-800-53-revision-5-1-high::AC-2(5)AC-2(5) Account Management | Inactivity Logout
nist-sp-800-53-revision-5-1-high::AC-20AC-20 Use of External Systems
nist-sp-800-53-revision-5-1-high::AC-20(1)AC-20(1) Use of External Systems | Limits on Authorized Use
nist-sp-800-53-revision-5-1-high::AC-20(2)AC-20(2) Use of External Systems | Portable Storage Devices: Restricted Use
nist-sp-800-53-revision-5-1-high::AC-21AC-21 Information Sharing
nist-sp-800-53-revision-5-1-high::AC-22AC-22 Publicly Accessible Content
nist-sp-800-53-revision-5-1-high::AC-3AC-3 Access Enforcement
nist-sp-800-53-revision-5-1-high::AC-4AC-4 Information Flow Enforcement
nist-sp-800-53-revision-5-1-high::AC-4(4)AC-4(4) Information Flow Enforcement | Flow Control of Encrypted Information
nist-sp-800-53-revision-5-1-high::AC-5AC-5 Separation of Duties
nist-sp-800-53-revision-5-1-high::AC-6AC-6 Least Privilege
nist-sp-800-53-revision-5-1-high::AC-6(1)AC-6(1) Least Privilege | Authorize Access to Security Functions
nist-sp-800-53-revision-5-1-high::AC-6(10)AC-6(10) Least Privilege | Prohibit Non-privileged Users from Executing Privileged Functions
nist-sp-800-53-revision-5-1-high::AC-6(2)AC-6(2) Least Privilege | Non-privileged Access for Nonsecurity Functions
nist-sp-800-53-revision-5-1-high::AC-6(3)AC-6(3) Least Privilege | Network Access to Privileged Commands
nist-sp-800-53-revision-5-1-high::AC-6(5)AC-6(5) Least Privilege | Privileged Accounts
nist-sp-800-53-revision-5-1-high::AC-6(7)AC-6(7) Least Privilege | Review of User Privileges
nist-sp-800-53-revision-5-1-high::AC-6(9)AC-6(9) Least Privilege | Log Use of Privileged Functions
nist-sp-800-53-revision-5-1-high::AC-7AC-7 Unsuccessful Logon Attempts
nist-sp-800-53-revision-5-1-high::AC-8AC-8 System Use Notification

AT: Awareness and Training – NIST SP 800-53 Revision 5.1 HIGH

6 controls
Controls in the AT: Awareness and Training – NIST SP 800-53 Revision 5.1 HIGH domain of NIST SP 800-53 Rev 5 HIGH — 6 controls
CodeTitle
nist-sp-800-53-revision-5-1-high::AT-1AT-1 Policy and Procedures
nist-sp-800-53-revision-5-1-high::AT-2AT-2 Literacy Training and Awareness
nist-sp-800-53-revision-5-1-high::AT-2(2)AT-2(2) Literacy Training and Awareness | Insider Threat
nist-sp-800-53-revision-5-1-high::AT-2(3)AT-2(3) Literacy Training and Awareness | Social Engineering and Mining
nist-sp-800-53-revision-5-1-high::AT-3AT-3 Role-based Training
nist-sp-800-53-revision-5-1-high::AT-4AT-4 Training Records

AU: Audit and Accountability – NIST SP 800-53 Revision 5.1 HIGH

25 controls
Controls in the AU: Audit and Accountability – NIST SP 800-53 Revision 5.1 HIGH domain of NIST SP 800-53 Rev 5 HIGH — 25 controls
CodeTitle
nist-sp-800-53-revision-5-1-high::AU-1AU-1 Policy and Procedures
nist-sp-800-53-revision-5-1-high::AU-10AU-10 Non-repudiation
nist-sp-800-53-revision-5-1-high::AU-11AU-11 Audit Record Retention
nist-sp-800-53-revision-5-1-high::AU-12AU-12 Audit Record Generation
nist-sp-800-53-revision-5-1-high::AU-12(1)AU-12(1) Audit Record Generation | System-wide and Time-correlated Audit Trail
nist-sp-800-53-revision-5-1-high::AU-12(3)AU-12(3) Audit Record Generation | Changes by Authorized Individuals
nist-sp-800-53-revision-5-1-high::AU-2AU-2 Event Logging
nist-sp-800-53-revision-5-1-high::AU-3AU-3 Content of Audit Records
nist-sp-800-53-revision-5-1-high::AU-3(1)AU-3(1) Content of Audit Records | Additional Audit Information
nist-sp-800-53-revision-5-1-high::AU-4AU-4 Audit Log Storage Capacity
nist-sp-800-53-revision-5-1-high::AU-5AU-5 Response to Audit Logging Process Failures
nist-sp-800-53-revision-5-1-high::AU-5(1)AU-5(1) Response to Audit Logging Process Failures | Storage Capacity Warning
nist-sp-800-53-revision-5-1-high::AU-5(2)AU-5(2) Response to Audit Logging Process Failures | Real-time Alerts
nist-sp-800-53-revision-5-1-high::AU-6AU-6 Audit Record Review, Analysis, and Reporting
nist-sp-800-53-revision-5-1-high::AU-6(1)AU-6(1) Audit Record Review, Analysis, and Reporting | Automated Process Integration
nist-sp-800-53-revision-5-1-high::AU-6(3)AU-6(3) Audit Record Review, Analysis, and Reporting | Correlate Audit Record Repositories
nist-sp-800-53-revision-5-1-high::AU-6(5)AU-6(5) Audit Record Review, Analysis, and Reporting | Integrated Analysis of Audit Records
nist-sp-800-53-revision-5-1-high::AU-6(6)AU-6(6) Audit Record Review, Analysis, and Reporting | Correlation with Physical Monitoring
nist-sp-800-53-revision-5-1-high::AU-7AU-7 Audit Record Reduction and Report Generation
nist-sp-800-53-revision-5-1-high::AU-7(1)AU-7(1) Audit Record Reduction and Report Generation | Automatic Processing
nist-sp-800-53-revision-5-1-high::AU-8AU-8 Time Stamps
nist-sp-800-53-revision-5-1-high::AU-9AU-9 Protection of Audit Information
nist-sp-800-53-revision-5-1-high::AU-9(2)AU-9(2) Protection of Audit Information | Store on Separate Physical Systems or Components
nist-sp-800-53-revision-5-1-high::AU-9(3)AU-9(3) Protection of Audit Information | Cryptographic Protection
nist-sp-800-53-revision-5-1-high::AU-9(4)AU-9(4) Protection of Audit Information | Access by Subset of Privileged Users

CA: Assessment, Authorization, and Monitoring – NIST SP 800-53 Revision 5.1 HIGH

14 controls
Controls in the CA: Assessment, Authorization, and Monitoring – NIST SP 800-53 Revision 5.1 HIGH domain of NIST SP 800-53 Rev 5 HIGH — 14 controls
CodeTitle
nist-sp-800-53-revision-5-1-high::CA-1CA-1 Policy and Procedures
nist-sp-800-53-revision-5-1-high::CA-2CA-2 Control Assessments
nist-sp-800-53-revision-5-1-high::CA-2(1)CA-2(1) Control Assessments | Independent Assessors
nist-sp-800-53-revision-5-1-high::CA-2(2)CA-2(2) Control Assessments | Specialized Assessments
nist-sp-800-53-revision-5-1-high::CA-3CA-3 Information Exchange
nist-sp-800-53-revision-5-1-high::CA-3(6)CA-3(6) Information Exchange | Transfer Authorizations
nist-sp-800-53-revision-5-1-high::CA-5CA-5 Plan of Action and Milestones
nist-sp-800-53-revision-5-1-high::CA-6CA-6 Authorization
nist-sp-800-53-revision-5-1-high::CA-7CA-7 Continuous Monitoring
nist-sp-800-53-revision-5-1-high::CA-7(1)CA-7(1) Continuous Monitoring | Independent Assessment
nist-sp-800-53-revision-5-1-high::CA-7(4)CA-7(4) Continuous Monitoring | Risk Monitoring
nist-sp-800-53-revision-5-1-high::CA-8CA-8 Penetration Testing
nist-sp-800-53-revision-5-1-high::CA-8(1)CA-8(1) Penetration Testing | Independent Penetration Testing Agent or Team
nist-sp-800-53-revision-5-1-high::CA-9CA-9 Internal System Connections

CM: Configuration Management – NIST SP 800-53 Revision 5.1 HIGH

32 controls
Controls in the CM: Configuration Management – NIST SP 800-53 Revision 5.1 HIGH domain of NIST SP 800-53 Rev 5 HIGH — 32 controls
CodeTitle
nist-sp-800-53-revision-5-1-high::CM-1CM-1 Policy and Procedures
nist-sp-800-53-revision-5-1-high::CM-10CM-10 Software Usage Restrictions
nist-sp-800-53-revision-5-1-high::CM-11CM-11 User-installed Software
nist-sp-800-53-revision-5-1-high::CM-12CM-12 Information Location
nist-sp-800-53-revision-5-1-high::CM-12(1)CM-12(1) Information Location | Automated Tools to Support Information Location
nist-sp-800-53-revision-5-1-high::CM-2CM-2 Baseline Configuration
nist-sp-800-53-revision-5-1-high::CM-2(2)CM-2(2) Baseline Configuration | Automation Support for Accuracy and Currency
nist-sp-800-53-revision-5-1-high::CM-2(3)CM-2(3) Baseline Configuration | Retention of Previous Configurations
nist-sp-800-53-revision-5-1-high::CM-2(7)CM-2(7) Baseline Configuration | Configure Systems and Components for High-risk Areas
nist-sp-800-53-revision-5-1-high::CM-3CM-3 Configuration Change Control
nist-sp-800-53-revision-5-1-high::CM-3(1)CM-3(1) Configuration Change Control | Automated Documentation, Notification, and Prohibition of Changes
nist-sp-800-53-revision-5-1-high::CM-3(2)CM-3(2) Configuration Change Control | Testing, Validation, and Documentation of Changes
nist-sp-800-53-revision-5-1-high::CM-3(4)CM-3(4) Configuration Change Control | Security and Privacy Representatives
nist-sp-800-53-revision-5-1-high::CM-3(6)CM-3(6) Configuration Change Control | Cryptography Management
nist-sp-800-53-revision-5-1-high::CM-4CM-4 Impact Analyses
nist-sp-800-53-revision-5-1-high::CM-4(1)CM-4(1) Impact Analyses | Separate Test Environments
nist-sp-800-53-revision-5-1-high::CM-4(2)CM-4(2) Impact Analyses | Verification of Controls
nist-sp-800-53-revision-5-1-high::CM-5CM-5 Access Restrictions for Change
nist-sp-800-53-revision-5-1-high::CM-5(1)CM-5(1) Access Restrictions for Change | Automated Access Enforcement and Audit Records
nist-sp-800-53-revision-5-1-high::CM-6CM-6 Configuration Settings
nist-sp-800-53-revision-5-1-high::CM-6(1)CM-6(1) Configuration Settings | Automated Management, Application, and Verification
nist-sp-800-53-revision-5-1-high::CM-6(2)CM-6(2) Configuration Settings | Respond to Unauthorized Changes
nist-sp-800-53-revision-5-1-high::CM-7CM-7 Least Functionality
nist-sp-800-53-revision-5-1-high::CM-7(1)CM-7(1) Least Functionality | Periodic Review
nist-sp-800-53-revision-5-1-high::CM-7(2)CM-7(2) Least Functionality | Prevent Program Execution
nist-sp-800-53-revision-5-1-high::CM-7(5)CM-7(5) Least Functionality | Authorized Software: Allow-by-exception
nist-sp-800-53-revision-5-1-high::CM-8CM-8 System Component Inventory
nist-sp-800-53-revision-5-1-high::CM-8(1)CM-8(1) System Component Inventory | Updates During Installation and Removal
nist-sp-800-53-revision-5-1-high::CM-8(2)CM-8(2) System Component Inventory | Automated Maintenance
nist-sp-800-53-revision-5-1-high::CM-8(3)CM-8(3) System Component Inventory | Automated Unauthorized Component Detection
nist-sp-800-53-revision-5-1-high::CM-8(4)CM-8(4) System Component Inventory | Accountability Information
nist-sp-800-53-revision-5-1-high::CM-9CM-9 Configuration Management Plan

CP: Contingency Planning – NIST SP 800-53 Revision 5.1 HIGH

35 controls
Controls in the CP: Contingency Planning – NIST SP 800-53 Revision 5.1 HIGH domain of NIST SP 800-53 Rev 5 HIGH — 35 controls
CodeTitle
nist-sp-800-53-revision-5-1-high::CP-1CP-1 Policy and Procedures
nist-sp-800-53-revision-5-1-high::CP-10CP-10 System Recovery and Reconstitution
nist-sp-800-53-revision-5-1-high::CP-10(2)CP-10(2) System Recovery and Reconstitution | Transaction Recovery
nist-sp-800-53-revision-5-1-high::CP-10(4)CP-10(4) System Recovery and Reconstitution | Restore Within Time Period
nist-sp-800-53-revision-5-1-high::CP-2CP-2 Contingency Plan
nist-sp-800-53-revision-5-1-high::CP-2(1)CP-2(1) Contingency Plan | Coordinate with Related Plans
nist-sp-800-53-revision-5-1-high::CP-2(2)CP-2(2) Contingency Plan | Capacity Planning
nist-sp-800-53-revision-5-1-high::CP-2(3)CP-2(3) Contingency Plan | Resume Mission and Business Functions
nist-sp-800-53-revision-5-1-high::CP-2(5)CP-2(5) Contingency Plan | Continue Mission and Business Functions
nist-sp-800-53-revision-5-1-high::CP-2(8)CP-2(8) Contingency Plan | Identify Critical Assets
nist-sp-800-53-revision-5-1-high::CP-3CP-3 Contingency Training
nist-sp-800-53-revision-5-1-high::CP-3(1)CP-3(1) Contingency Training | Simulated Events
nist-sp-800-53-revision-5-1-high::CP-4CP-4 Contingency Plan Testing
nist-sp-800-53-revision-5-1-high::CP-4(1)CP-4(1) Contingency Plan Testing | Coordinate with Related Plans
nist-sp-800-53-revision-5-1-high::CP-4(2)CP-4(2) Contingency Plan Testing | Alternate Processing Site
nist-sp-800-53-revision-5-1-high::CP-6CP-6 Alternate Storage Site
nist-sp-800-53-revision-5-1-high::CP-6(1)CP-6(1) Alternate Storage Site | Separation from Primary Site
nist-sp-800-53-revision-5-1-high::CP-6(2)CP-6(2) Alternate Storage Site | Recovery Time and Recovery Point Objectives
nist-sp-800-53-revision-5-1-high::CP-6(3)CP-6(3) Alternate Storage Site | Accessibility
nist-sp-800-53-revision-5-1-high::CP-7CP-7 Alternate Processing Site
nist-sp-800-53-revision-5-1-high::CP-7(1)CP-7(1) Alternate Processing Site | Separation from Primary Site
nist-sp-800-53-revision-5-1-high::CP-7(2)CP-7(2) Alternate Processing Site | Accessibility
nist-sp-800-53-revision-5-1-high::CP-7(3)CP-7(3) Alternate Processing Site | Priority of Service
nist-sp-800-53-revision-5-1-high::CP-7(4)CP-7(4) Alternate Processing Site | Preparation for Use
nist-sp-800-53-revision-5-1-high::CP-8CP-8 Telecommunications Services
nist-sp-800-53-revision-5-1-high::CP-8(1)CP-8(1) Telecommunications Services | Priority of Service Provisions
nist-sp-800-53-revision-5-1-high::CP-8(2)CP-8(2) Telecommunications Services | Single Points of Failure
nist-sp-800-53-revision-5-1-high::CP-8(3)CP-8(3) Telecommunications Services | Separation of Primary and Alternate Providers
nist-sp-800-53-revision-5-1-high::CP-8(4)CP-8(4) Telecommunications Services | Provider Contingency Plan
nist-sp-800-53-revision-5-1-high::CP-9CP-9 System Backup
nist-sp-800-53-revision-5-1-high::CP-9(1)CP-9(1) System Backup | Testing for Reliability and Integrity
nist-sp-800-53-revision-5-1-high::CP-9(2)CP-9(2) System Backup | Test Restoration Using Sampling
nist-sp-800-53-revision-5-1-high::CP-9(3)CP-9(3) System Backup | Separate Storage for Critical Information
nist-sp-800-53-revision-5-1-high::CP-9(5)CP-9(5) System Backup | Transfer to Alternate Storage Site
nist-sp-800-53-revision-5-1-high::CP-9(8)CP-9(8) System Backup | Cryptographic Protection

IA: Identification and Authentication – NIST SP 800-53 Revision 5.1 HIGH

26 controls
Controls in the IA: Identification and Authentication – NIST SP 800-53 Revision 5.1 HIGH domain of NIST SP 800-53 Rev 5 HIGH — 26 controls
CodeTitle
nist-sp-800-53-revision-5-1-high::IA-1IA-1 Policy and Procedures
nist-sp-800-53-revision-5-1-high::IA-11IA-11 Re-authentication
nist-sp-800-53-revision-5-1-high::IA-12IA-12 Identity Proofing
nist-sp-800-53-revision-5-1-high::IA-12(2)IA-12(2) Identity Proofing | Identity Evidence
nist-sp-800-53-revision-5-1-high::IA-12(3)IA-12(3) Identity Proofing | Identity Evidence Validation and Verification
nist-sp-800-53-revision-5-1-high::IA-12(4)IA-12(4) Identity Proofing | In-person Validation and Verification
nist-sp-800-53-revision-5-1-high::IA-12(5)IA-12(5) Identity Proofing | Address Confirmation
nist-sp-800-53-revision-5-1-high::IA-2IA-2 Identification and Authentication (Organizational Users)
nist-sp-800-53-revision-5-1-high::IA-2(1)IA-2(1) Identification and Authentication (Organizational Users) | Multi-factor Authentication to Privileged Accounts
nist-sp-800-53-revision-5-1-high::IA-2(12)IA-2(12) Identification and Authentication (Organizational Users) | Acceptance of PIV Credentials
nist-sp-800-53-revision-5-1-high::IA-2(2)IA-2(2) Identification and Authentication (Organizational Users) | Multi-factor Authentication to Non-privileged Accounts
nist-sp-800-53-revision-5-1-high::IA-2(5)IA-2(5) Identification and Authentication (Organizational Users) | Individual Authentication with Group Authentication
nist-sp-800-53-revision-5-1-high::IA-2(8)IA-2(8) Identification and Authentication (Organizational Users) | Access to Accounts: Replay Resistant
nist-sp-800-53-revision-5-1-high::IA-3IA-3 Device Identification and Authentication
nist-sp-800-53-revision-5-1-high::IA-4IA-4 Identifier Management
nist-sp-800-53-revision-5-1-high::IA-4(4)IA-4(4) Identifier Management | Identify User Status
nist-sp-800-53-revision-5-1-high::IA-5IA-5 Authenticator Management
nist-sp-800-53-revision-5-1-high::IA-5(1)IA-5(1) Authenticator Management | Password-based Authentication
nist-sp-800-53-revision-5-1-high::IA-5(2)IA-5(2) Authenticator Management | Public Key-based Authentication
nist-sp-800-53-revision-5-1-high::IA-5(6)IA-5(6) Authenticator Management | Protection of Authenticators
nist-sp-800-53-revision-5-1-high::IA-6IA-6 Authentication Feedback
nist-sp-800-53-revision-5-1-high::IA-7IA-7 Cryptographic Module Authentication
nist-sp-800-53-revision-5-1-high::IA-8IA-8 Identification and Authentication (Non-organizational Users)
nist-sp-800-53-revision-5-1-high::IA-8(1)IA-8(1) Identification and Authentication (Non-organizational Users) | Acceptance of PIV Credentials from Other Agencies
nist-sp-800-53-revision-5-1-high::IA-8(2)IA-8(2) Identification and Authentication (Non-organizational Users) | Acceptance of External Authenticators
nist-sp-800-53-revision-5-1-high::IA-8(4)IA-8(4) Identification and Authentication (Non-organizational Users) | Use of Defined Profiles

IR: Incident Response – NIST SP 800-53 Revision 5.1 HIGH

18 controls
Controls in the IR: Incident Response – NIST SP 800-53 Revision 5.1 HIGH domain of NIST SP 800-53 Rev 5 HIGH — 18 controls
CodeTitle
nist-sp-800-53-revision-5-1-high::IR-1IR-1 Policy and Procedures
nist-sp-800-53-revision-5-1-high::IR-2IR-2 Incident Response Training
nist-sp-800-53-revision-5-1-high::IR-2(1)IR-2(1) Incident Response Training | Simulated Events
nist-sp-800-53-revision-5-1-high::IR-2(2)IR-2(2) Incident Response Training | Automated Training Environments
nist-sp-800-53-revision-5-1-high::IR-3IR-3 Incident Response Testing
nist-sp-800-53-revision-5-1-high::IR-3(2)IR-3(2) Incident Response Testing | Coordination with Related Plans
nist-sp-800-53-revision-5-1-high::IR-4IR-4 Incident Handling
nist-sp-800-53-revision-5-1-high::IR-4(1)IR-4(1) Incident Handling | Automated Incident Handling Processes
nist-sp-800-53-revision-5-1-high::IR-4(11)IR-4(11) Incident Handling | Integrated Incident Response Team
nist-sp-800-53-revision-5-1-high::IR-4(4)IR-4(4) Incident Handling | Information Correlation
nist-sp-800-53-revision-5-1-high::IR-5IR-5 Incident Monitoring
nist-sp-800-53-revision-5-1-high::IR-5(1)IR-5(1) Incident Monitoring | Automated Tracking, Data Collection, and Analysis
nist-sp-800-53-revision-5-1-high::IR-6IR-6 Incident Reporting
nist-sp-800-53-revision-5-1-high::IR-6(1)IR-6(1) Incident Reporting | Automated Reporting
nist-sp-800-53-revision-5-1-high::IR-6(3)IR-6(3) Incident Reporting | Supply Chain Coordination
nist-sp-800-53-revision-5-1-high::IR-7IR-7 Incident Response Assistance
nist-sp-800-53-revision-5-1-high::IR-7(1)IR-7(1) Incident Response Assistance | Automation Support for Availability of Information and Support
nist-sp-800-53-revision-5-1-high::IR-8IR-8 Incident Response Plan

MA: Maintenance – NIST SP 800-53 Revision 5.1 HIGH

12 controls
Controls in the MA: Maintenance – NIST SP 800-53 Revision 5.1 HIGH domain of NIST SP 800-53 Rev 5 HIGH — 12 controls
CodeTitle
nist-sp-800-53-revision-5-1-high::MA-1MA-1 Policy and Procedures
nist-sp-800-53-revision-5-1-high::MA-2MA-2 Controlled Maintenance
nist-sp-800-53-revision-5-1-high::MA-2(2)MA-2(2) Controlled Maintenance | Automated Maintenance Activities
nist-sp-800-53-revision-5-1-high::MA-3MA-3 Maintenance Tools
nist-sp-800-53-revision-5-1-high::MA-3(1)MA-3(1) Maintenance Tools | Inspect Tools
nist-sp-800-53-revision-5-1-high::MA-3(2)MA-3(2) Maintenance Tools | Inspect Media
nist-sp-800-53-revision-5-1-high::MA-3(3)MA-3(3) Maintenance Tools | Prevent Unauthorized Removal
nist-sp-800-53-revision-5-1-high::MA-4MA-4 Nonlocal Maintenance
nist-sp-800-53-revision-5-1-high::MA-4(3)MA-4(3) Nonlocal Maintenance | Comparable Security and Sanitization
nist-sp-800-53-revision-5-1-high::MA-5MA-5 Maintenance Personnel
nist-sp-800-53-revision-5-1-high::MA-5(1)MA-5(1) Maintenance Personnel | Individuals Without Appropriate Access
nist-sp-800-53-revision-5-1-high::MA-6MA-6 Timely Maintenance

MP: Media Protection – NIST SP 800-53 Revision 5.1 HIGH

10 controls
Controls in the MP: Media Protection – NIST SP 800-53 Revision 5.1 HIGH domain of NIST SP 800-53 Rev 5 HIGH — 10 controls
CodeTitle
nist-sp-800-53-revision-5-1-high::MP-1MP-1 Policy and Procedures
nist-sp-800-53-revision-5-1-high::MP-2MP-2 Media Access
nist-sp-800-53-revision-5-1-high::MP-3MP-3 Media Marking
nist-sp-800-53-revision-5-1-high::MP-4MP-4 Media Storage
nist-sp-800-53-revision-5-1-high::MP-5MP-5 Media Transport
nist-sp-800-53-revision-5-1-high::MP-6MP-6 Media Sanitization
nist-sp-800-53-revision-5-1-high::MP-6(1)MP-6(1) Media Sanitization | Review, Approve, Track, Document, and Verify
nist-sp-800-53-revision-5-1-high::MP-6(2)MP-6(2) Media Sanitization | Equipment Testing
nist-sp-800-53-revision-5-1-high::MP-6(3)MP-6(3) Media Sanitization | Nondestructive Techniques
nist-sp-800-53-revision-5-1-high::MP-7MP-7 Media Use

PE: Physical and Environmental Protection – NIST SP 800-53 Revision 5.1 HIGH

25 controls
Controls in the PE: Physical and Environmental Protection – NIST SP 800-53 Revision 5.1 HIGH domain of NIST SP 800-53 Rev 5 HIGH — 25 controls
CodeTitle
nist-sp-800-53-revision-5-1-high::PE-1PE-1 Policy and Procedures
nist-sp-800-53-revision-5-1-high::PE-10PE-10 Emergency Shutoff
nist-sp-800-53-revision-5-1-high::PE-11PE-11 Emergency Power
nist-sp-800-53-revision-5-1-high::PE-11(1)PE-11(1) Emergency Power | Alternate Power Supply: Minimal Operational Capability
nist-sp-800-53-revision-5-1-high::PE-12PE-12 Emergency Lighting
nist-sp-800-53-revision-5-1-high::PE-13PE-13 Fire Protection
nist-sp-800-53-revision-5-1-high::PE-13(1)PE-13(1) Fire Protection | Detection Systems: Automatic Activation and Notification
nist-sp-800-53-revision-5-1-high::PE-13(2)PE-13(2) Fire Protection | Suppression Systems: Automatic Activation and Notification
nist-sp-800-53-revision-5-1-high::PE-14PE-14 Environmental Controls
nist-sp-800-53-revision-5-1-high::PE-15PE-15 Water Damage Protection
nist-sp-800-53-revision-5-1-high::PE-15(1)PE-15(1) Water Damage Protection | Automation Support
nist-sp-800-53-revision-5-1-high::PE-16PE-16 Delivery and Removal
nist-sp-800-53-revision-5-1-high::PE-17PE-17 Alternate Work Site
nist-sp-800-53-revision-5-1-high::PE-18PE-18 Location of System Components
nist-sp-800-53-revision-5-1-high::PE-2PE-2 Physical Access Authorizations
nist-sp-800-53-revision-5-1-high::PE-3PE-3 Physical Access Control
nist-sp-800-53-revision-5-1-high::PE-3(1)PE-3(1) Physical Access Control | System Access
nist-sp-800-53-revision-5-1-high::PE-4PE-4 Access Control for Transmission
nist-sp-800-53-revision-5-1-high::PE-5PE-5 Access Control for Output Devices
nist-sp-800-53-revision-5-1-high::PE-6PE-6 Monitoring Physical Access
nist-sp-800-53-revision-5-1-high::PE-6(1)PE-6(1) Monitoring Physical Access | Intrusion Alarms and Surveillance Equipment
nist-sp-800-53-revision-5-1-high::PE-6(4)PE-6(4) Monitoring Physical Access | Monitoring Physical Access to Systems
nist-sp-800-53-revision-5-1-high::PE-8PE-8 Visitor Access Records
nist-sp-800-53-revision-5-1-high::PE-8(1)PE-8(1) Visitor Access Records | Automated Records Maintenance and Review
nist-sp-800-53-revision-5-1-high::PE-9PE-9 Power Equipment and Cabling

PL: Planning – NIST SP 800-53 Revision 5.1 HIGH

7 controls
Controls in the PL: Planning – NIST SP 800-53 Revision 5.1 HIGH domain of NIST SP 800-53 Rev 5 HIGH — 7 controls
CodeTitle
nist-sp-800-53-revision-5-1-high::PL-1PL-1 Policy and Procedures
nist-sp-800-53-revision-5-1-high::PL-10PL-10 Baseline Selection
nist-sp-800-53-revision-5-1-high::PL-11PL-11 Baseline Tailoring
nist-sp-800-53-revision-5-1-high::PL-2PL-2 System Security and Privacy Plans
nist-sp-800-53-revision-5-1-high::PL-4PL-4 Rules of Behavior
nist-sp-800-53-revision-5-1-high::PL-4(1)PL-4(1) Rules of Behavior | Social Media and External Site/Application Usage Restrictions
nist-sp-800-53-revision-5-1-high::PL-8PL-8 Security and Privacy Architectures

PS: Personnel Security – NIST SP 800-53 Revision 5.1 HIGH

10 controls
Controls in the PS: Personnel Security – NIST SP 800-53 Revision 5.1 HIGH domain of NIST SP 800-53 Rev 5 HIGH — 10 controls
CodeTitle
nist-sp-800-53-revision-5-1-high::PS-1PS-1 Policy and Procedures
nist-sp-800-53-revision-5-1-high::PS-2PS-2 Position Risk Designation
nist-sp-800-53-revision-5-1-high::PS-3PS-3 Personnel Screening
nist-sp-800-53-revision-5-1-high::PS-4PS-4 Personnel Termination
nist-sp-800-53-revision-5-1-high::PS-4(2)PS-4(2) Personnel Termination | Automated Actions
nist-sp-800-53-revision-5-1-high::PS-5PS-5 Personnel Transfer
nist-sp-800-53-revision-5-1-high::PS-6PS-6 Access Agreements
nist-sp-800-53-revision-5-1-high::PS-7PS-7 External Personnel Security
nist-sp-800-53-revision-5-1-high::PS-8PS-8 Personnel Sanctions
nist-sp-800-53-revision-5-1-high::PS-9PS-9 Position Descriptions

RA: Risk Assessment – NIST SP 800-53 Revision 5.1 HIGH

11 controls
Controls in the RA: Risk Assessment – NIST SP 800-53 Revision 5.1 HIGH domain of NIST SP 800-53 Rev 5 HIGH — 11 controls
CodeTitle
nist-sp-800-53-revision-5-1-high::RA-1RA-1 Policy and Procedures
nist-sp-800-53-revision-5-1-high::RA-2RA-2 Security Categorization
nist-sp-800-53-revision-5-1-high::RA-3RA-3 Risk Assessment
nist-sp-800-53-revision-5-1-high::RA-3(1)RA-3(1) Risk Assessment | Supply Chain Risk Assessment
nist-sp-800-53-revision-5-1-high::RA-5RA-5 Vulnerability Monitoring and Scanning
nist-sp-800-53-revision-5-1-high::RA-5(11)RA-5(11) Vulnerability Monitoring and Scanning | Public Disclosure Program
nist-sp-800-53-revision-5-1-high::RA-5(2)RA-5(2) Vulnerability Monitoring and Scanning | Update Vulnerabilities to Be Scanned
nist-sp-800-53-revision-5-1-high::RA-5(4)RA-5(4) Vulnerability Monitoring and Scanning | Discoverable Information
nist-sp-800-53-revision-5-1-high::RA-5(5)RA-5(5) Vulnerability Monitoring and Scanning | Privileged Access
nist-sp-800-53-revision-5-1-high::RA-7RA-7 Risk Response
nist-sp-800-53-revision-5-1-high::RA-9RA-9 Criticality Analysis

SA: System and Services Acquisition – NIST SP 800-53 Revision 5.1 HIGH

21 controls
Controls in the SA: System and Services Acquisition – NIST SP 800-53 Revision 5.1 HIGH domain of NIST SP 800-53 Rev 5 HIGH — 21 controls
CodeTitle
nist-sp-800-53-revision-5-1-high::SA-1SA-1 Policy and Procedures
nist-sp-800-53-revision-5-1-high::SA-10SA-10 Developer Configuration Management
nist-sp-800-53-revision-5-1-high::SA-11SA-11 Developer Testing and Evaluation
nist-sp-800-53-revision-5-1-high::SA-15SA-15 Development Process, Standards, and Tools
nist-sp-800-53-revision-5-1-high::SA-15(3)SA-15(3) Development Process, Standards, and Tools | Criticality Analysis
nist-sp-800-53-revision-5-1-high::SA-16SA-16 Developer-provided Training
nist-sp-800-53-revision-5-1-high::SA-17SA-17 Developer Security and Privacy Architecture and Design
nist-sp-800-53-revision-5-1-high::SA-2SA-2 Allocation of Resources
nist-sp-800-53-revision-5-1-high::SA-21SA-21 Developer Screening
nist-sp-800-53-revision-5-1-high::SA-22SA-22 Unsupported System Components
nist-sp-800-53-revision-5-1-high::SA-3SA-3 System Development Life Cycle
nist-sp-800-53-revision-5-1-high::SA-4SA-4 Acquisition Process
nist-sp-800-53-revision-5-1-high::SA-4(1)SA-4(1) Acquisition Process | Functional Properties of Controls
nist-sp-800-53-revision-5-1-high::SA-4(10)SA-4(10) Acquisition Process | Use of Approved PIV Products
nist-sp-800-53-revision-5-1-high::SA-4(2)SA-4(2) Acquisition Process | Design and Implementation Information for Controls
nist-sp-800-53-revision-5-1-high::SA-4(5)SA-4(5) Acquisition Process | System, Component, and Service Configurations
nist-sp-800-53-revision-5-1-high::SA-4(9)SA-4(9) Acquisition Process | Functions, Ports, Protocols, and Services in Use
nist-sp-800-53-revision-5-1-high::SA-5SA-5 System Documentation
nist-sp-800-53-revision-5-1-high::SA-8SA-8 Security and Privacy Engineering Principles
nist-sp-800-53-revision-5-1-high::SA-9SA-9 External System Services
nist-sp-800-53-revision-5-1-high::SA-9(2)SA-9(2) External System Services | Identification of Functions, Ports, Protocols, and Services

SC: System and Communications Protection – NIST SP 800-53 Revision 5.1 HIGH

30 controls
Controls in the SC: System and Communications Protection – NIST SP 800-53 Revision 5.1 HIGH domain of NIST SP 800-53 Rev 5 HIGH — 30 controls
CodeTitle
nist-sp-800-53-revision-5-1-high::SC-1SC-1 Policy and Procedures
nist-sp-800-53-revision-5-1-high::SC-10SC-10 Network Disconnect
nist-sp-800-53-revision-5-1-high::SC-12SC-12 Cryptographic Key Establishment and Management
nist-sp-800-53-revision-5-1-high::SC-12(1)SC-12(1) Cryptographic Key Establishment and Management | Availability
nist-sp-800-53-revision-5-1-high::SC-13SC-13 Cryptographic Protection
nist-sp-800-53-revision-5-1-high::SC-15SC-15 Collaborative Computing Devices and Applications
nist-sp-800-53-revision-5-1-high::SC-17SC-17 Public Key Infrastructure Certificates
nist-sp-800-53-revision-5-1-high::SC-18SC-18 Mobile Code
nist-sp-800-53-revision-5-1-high::SC-2SC-2 Separation of System and User Functionality
nist-sp-800-53-revision-5-1-high::SC-20SC-20 Secure Name/Address Resolution Service (Authoritative Source)
nist-sp-800-53-revision-5-1-high::SC-21SC-21 Secure Name/Address Resolution Service (Recursive or Caching Resolver)
nist-sp-800-53-revision-5-1-high::SC-22SC-22 Architecture and Provisioning for Name/Address Resolution Service
nist-sp-800-53-revision-5-1-high::SC-23SC-23 Session Authenticity
nist-sp-800-53-revision-5-1-high::SC-24SC-24 Fail in Known State
nist-sp-800-53-revision-5-1-high::SC-28SC-28 Protection of Information at Rest
nist-sp-800-53-revision-5-1-high::SC-28(1)SC-28(1) Protection of Information at Rest | Cryptographic Protection
nist-sp-800-53-revision-5-1-high::SC-3SC-3 Security Function Isolation
nist-sp-800-53-revision-5-1-high::SC-39SC-39 Process Isolation
nist-sp-800-53-revision-5-1-high::SC-4SC-4 Information in Shared System Resources
nist-sp-800-53-revision-5-1-high::SC-5SC-5 Denial-of-service Protection
nist-sp-800-53-revision-5-1-high::SC-7SC-7 Boundary Protection
nist-sp-800-53-revision-5-1-high::SC-7(18)SC-7(18) Boundary Protection | Fail Secure
nist-sp-800-53-revision-5-1-high::SC-7(21)SC-7(21) Boundary Protection | Isolation of System Components
nist-sp-800-53-revision-5-1-high::SC-7(3)SC-7(3) Boundary Protection | Access Points
nist-sp-800-53-revision-5-1-high::SC-7(4)SC-7(4) Boundary Protection | External Telecommunications Services
nist-sp-800-53-revision-5-1-high::SC-7(5)SC-7(5) Boundary Protection | Deny by Default: Allow by Exception
nist-sp-800-53-revision-5-1-high::SC-7(7)SC-7(7) Boundary Protection | Split Tunneling for Remote Devices
nist-sp-800-53-revision-5-1-high::SC-7(8)SC-7(8) Boundary Protection | Route Traffic to Authenticated Proxy Servers
nist-sp-800-53-revision-5-1-high::SC-8SC-8 Transmission Confidentiality and Integrity
nist-sp-800-53-revision-5-1-high::SC-8(1)SC-8(1) Transmission Confidentiality and Integrity | Cryptographic Protection

SI: System and Information Integrity – NIST SP 800-53 Revision 5.1 HIGH

28 controls
Controls in the SI: System and Information Integrity – NIST SP 800-53 Revision 5.1 HIGH domain of NIST SP 800-53 Rev 5 HIGH — 28 controls
CodeTitle
nist-sp-800-53-revision-5-1-high::SI-1SI-1 Policy and Procedures
nist-sp-800-53-revision-5-1-high::SI-10SI-10 Information Input Validation
nist-sp-800-53-revision-5-1-high::SI-11SI-11 Error Handling
nist-sp-800-53-revision-5-1-high::SI-12SI-12 Information Management and Retention
nist-sp-800-53-revision-5-1-high::SI-16SI-16 Memory Protection
nist-sp-800-53-revision-5-1-high::SI-2SI-2 Flaw Remediation
nist-sp-800-53-revision-5-1-high::SI-2(2)SI-2(2) Flaw Remediation | Automated Flaw Remediation Status
nist-sp-800-53-revision-5-1-high::SI-3SI-3 Malicious Code Protection
nist-sp-800-53-revision-5-1-high::SI-4SI-4 System Monitoring
nist-sp-800-53-revision-5-1-high::SI-4(10)SI-4(10) System Monitoring | Visibility of Encrypted Communications
nist-sp-800-53-revision-5-1-high::SI-4(12)SI-4(12) System Monitoring | Automated Organization-generated Alerts
nist-sp-800-53-revision-5-1-high::SI-4(14)SI-4(14) System Monitoring | Wireless Intrusion Detection
nist-sp-800-53-revision-5-1-high::SI-4(2)SI-4(2) System Monitoring | Automated Tools and Mechanisms for Real-time Analysis
nist-sp-800-53-revision-5-1-high::SI-4(20)SI-4(20) System Monitoring | Privileged Users
nist-sp-800-53-revision-5-1-high::SI-4(22)SI-4(22) System Monitoring | Unauthorized Network Services
nist-sp-800-53-revision-5-1-high::SI-4(4)SI-4(4) System Monitoring | Inbound and Outbound Communications Traffic
nist-sp-800-53-revision-5-1-high::SI-4(5)SI-4(5) System Monitoring | System-generated Alerts
nist-sp-800-53-revision-5-1-high::SI-5SI-5 Security Alerts, Advisories, and Directives
nist-sp-800-53-revision-5-1-high::SI-5(1)SI-5(1) Security Alerts, Advisories, and Directives | Automated Alerts and Advisories
nist-sp-800-53-revision-5-1-high::SI-6SI-6 Security and Privacy Function Verification
nist-sp-800-53-revision-5-1-high::SI-7SI-7 Software, Firmware, and Information Integrity
nist-sp-800-53-revision-5-1-high::SI-7(1)SI-7(1) Software, Firmware, and Information Integrity | Integrity Checks
nist-sp-800-53-revision-5-1-high::SI-7(15)SI-7(15) Software, Firmware, and Information Integrity | Code Authentication
nist-sp-800-53-revision-5-1-high::SI-7(2)SI-7(2) Software, Firmware, and Information Integrity | Automated Notifications of Integrity Violations
nist-sp-800-53-revision-5-1-high::SI-7(5)SI-7(5) Software, Firmware, and Information Integrity | Automated Response to Integrity Violations
nist-sp-800-53-revision-5-1-high::SI-7(7)SI-7(7) Software, Firmware, and Information Integrity | Integration of Detection and Response
nist-sp-800-53-revision-5-1-high::SI-8SI-8 Spam Protection
nist-sp-800-53-revision-5-1-high::SI-8(2)SI-8(2) Spam Protection | Automatic Updates

SR: Supply Chain Risk Management – NIST SP 800-53 Revision 5.1 HIGH

14 controls
Controls in the SR: Supply Chain Risk Management – NIST SP 800-53 Revision 5.1 HIGH domain of NIST SP 800-53 Rev 5 HIGH — 14 controls
CodeTitle
nist-sp-800-53-revision-5-1-high::SR-1SR-1 Policy and Procedures
nist-sp-800-53-revision-5-1-high::SR-10SR-10 Inspection of Systems or Components
nist-sp-800-53-revision-5-1-high::SR-11SR-11 Component Authenticity
nist-sp-800-53-revision-5-1-high::SR-11(1)SR-11(1) Component Authenticity | Anti-counterfeit Training
nist-sp-800-53-revision-5-1-high::SR-11(2)SR-11(2) Component Authenticity | Configuration Control for Component Service and Repair
nist-sp-800-53-revision-5-1-high::SR-12SR-12 Component Disposal
nist-sp-800-53-revision-5-1-high::SR-2SR-2 Supply Chain Risk Management Plan
nist-sp-800-53-revision-5-1-high::SR-2(1)SR-2(1) Supply Chain Risk Management Plan | Establish SCRM Team
nist-sp-800-53-revision-5-1-high::SR-3SR-3 Supply Chain Controls and Processes
nist-sp-800-53-revision-5-1-high::SR-5SR-5 Acquisition Strategies, Tools, and Methods
nist-sp-800-53-revision-5-1-high::SR-6SR-6 Supplier Assessments and Reviews
nist-sp-800-53-revision-5-1-high::SR-8SR-8 Notification Agreements
nist-sp-800-53-revision-5-1-high::SR-9SR-9 Tamper Resistance and Detection
nist-sp-800-53-revision-5-1-high::SR-9(1)SR-9(1) Tamper Resistance and Detection | Multiple Stages of System Development Life Cycle

Your Compliance Coverage

If you comply with NIST SP 800-53 Rev 5 HIGH, you already cover:

NIST SP 800-53 Rev 5

89%

370 controls mapped

Compare →

FedRAMP High

89%

370 controls mapped

Compare →

FedRAMP Moderate

71%

296 controls mapped

Compare →
See all 3 mapped frameworks ↓

Maps to 3 other frameworks

414 total controls
NIST SP 800-53 Rev 5
370 source controls mapped|370 target controls covered
89%
FedRAMP High
370 source controls mapped|370 target controls covered
89%
FedRAMP Moderate
296 source controls mapped|296 target controls covered
71%
Compare NIST SP 800-53 Rev 5 HIGH with NIST SP 800-53 Rev 5

Coverage is not the same as your position

This page shows what NIST SP 800-53 Rev 5 HIGH overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.

The Compliance Position Diagnostic, $5,000 fixed, ten business days

What is NIST SP 800-53 Rev 5 HIGH and who does it apply to?

NIST SP 800-53 Rev 5 HIGH is a compliance framework from United States (federal information systems; voluntary for other organizations) with 18 domains and 370 controls. The high-impact security control baseline of NIST SP 800-53B (release 5.2.0): the 370 SP 800-53 Rev 5 controls and control enhancements a federal system categorized high under FIPS 199 and FIPS 200 starts from before tailoring, each with its release 5.2.0 control statement, parameters organization-defined, and the SP 800-53A Rev 5 examine and test objects an assessor asks for. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does NIST SP 800-53 Rev 5 HIGH actually require?

NIST SP 800-53 Rev 5 HIGH has 370 controls organised across 18 domains. The largest domains are AC: Access Control – NIST SP 800-53 Revision 5.1 HIGH (46 controls), CP: Contingency Planning – NIST SP 800-53 Revision 5.1 HIGH (35 controls), CM: Configuration Management – NIST SP 800-53 Revision 5.1 HIGH (32 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of NIST SP 800-53 Rev 5 HIGH do I already cover?

NIST SP 800-53 Rev 5 HIGH maps to 3 other compliance frameworks. The top mapping partners are NIST SP 800-53 Rev 5 (89% coverage), FedRAMP High (89% coverage), FedRAMP Moderate (71% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I implement NIST SP 800-53 Rev 5 HIGH?

Start your NIST SP 800-53 Rev 5 HIGH compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about NIST SP 800-53 Rev 5 HIGH requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 370 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 705 frameworks.

Get Started Free →

Free forever — no credit card required