STIGhubSTIGhub
STIGsRMF ControlsCompare
STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago
Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.

NIST 800-53 Controls

Rev 5Rev 4
Baselines:AllLowModerateHighPrivacyNo Baseline

Browse 372 security and privacy controls across 18 families. (filtered to High, Low, Moderate baselines)

Each control is linked to DISA CCI identifiers and STIG checks. Search for fast lookup by control ID or CCI.

Control FamiliesAll Controls372
AC Access Control46AT Awareness and Training6AU Audit and Accountability25CA Assessment, Authorization, and Monitoring14CM Configuration Management32CP Contingency Planning35IA Identification and Authentication26IR Incident Response18MA Maintenance12MP Media Protection10PE Physical and Environmental Protection25PL Planning7PS Personnel Security10RA Risk Assessment11SA System and Services Acquisition21SC System and Communications Protection32SI System and Information Integrity28SR Supply Chain Risk Management14

SC — System and Communications Protection

20 base controls

SC-1Policy and Procedures
25 CCIs
SC-2Separation of System and User Functionality
1 CCIs
SC-3Security Function Isolation
2 CCIs
SC-4Information in Shared System Resources
1 CCIs
SC-5Denial-of-service Protection
6 CCIs
SC-7Boundary Protection
6 CCIs
SC-8Transmission Confidentiality and Integrity
2 CCIs
SC-10Network Disconnect
2 CCIs
SC-12Cryptographic Key Establishment and Management
17 CCIs
SC-13Cryptographic Protection
4 CCIs
SC-15Collaborative Computing Devices and Applications
3 CCIs
SC-17Public Key Infrastructure Certificates
3 CCIs
SC-18Mobile Code
6 CCIs
SC-20Secure Name/Address Resolution Service (Authoritative Source)
4 CCIs
SC-21Secure Name/Address Resolution Service (Recursive or Caching Resolver)
5 CCIs
SC-22Architecture and Provisioning for Name/Address Resolution Service
2 CCIs
SC-23Session Authenticity
1 CCIs
SC-24Fail in Known State
5 CCIs
SC-28Protection of Information at Rest
2 CCIs
SC-39Process Isolation
1 CCIs