STIGhubSTIGhub
STIGsRMF ControlsCompare
STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago
Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.

NIST 800-53 Controls

Rev 5Rev 4
Baselines:AllLowModerateHighPrivacyNo Baseline

Browse 964 security and privacy controls across 20 families. (filtered to High, No Baseline, Moderate baselines)

Each control is linked to DISA CCI identifiers and STIG checks. Search for fast lookup by control ID or CCI.

Control FamiliesAll Controls964
AC Access Control130AT Awareness and Training14AU Audit and Accountability55CA Assessment, Authorization, and Monitoring25CM Configuration Management56CP Contingency Planning49IA Identification and Authentication62IR Incident Response38MA Maintenance28MP Media Protection20PE Physical and Environmental Protection50PL Planning10PM Program Management13PS Personnel Security17PT PII Processing and Transparency8RA Risk Assessment21SA System and Services Acquisition107SC System and Communications Protection138SI System and Information Integrity96SR Supply Chain Risk Management27

AU — Audit and Accountability

15 base controls

AU-1Policy and Procedures
33 CCIs
AU-2Event Logging
10 CCIs
AU-3Content of Audit Records
6 CCIs
AU-4Audit Log Storage Capacity
4 CCIs
AU-5Response to Audit Logging Process Failures
5 CCIs
AU-6Audit Record Review, Analysis, and Reporting
9 CCIs
AU-7Audit Record Reduction and Report Generation
18 CCIs
AU-8Time Stamps
4 CCIs
AU-9Protection of Audit Information
8 CCIs
AU-10Non-Repudiation
2 CCIs
AU-11Audit Record Retention
2 CCIs
AU-12Audit Record Generation
5 CCIs
AU-13Monitoring for Information Disclosure
7 CCIs
AU-14Session Audit
6 CCIs
AU-16Cross-Organizational Audit Logging
3 CCIs