STIGs RMF Controls Compare

STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago

Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.

NIST 800-53 Controls

Baselines:All Low Moderate High Privacy No Baseline

Browse 372 security and privacy controls across 18 families. (filtered to High baseline)

Each control is linked to DISA CCI identifiers and STIG checks. Search for fast lookup by control ID or CCI.

Control Families

All Controls372

AC Access Control46 AT Awareness and Training6 AU Audit and Accountability25 CA Assessment, Authorization, and Monitoring14 CM Configuration Management32 CP Contingency Planning35 IA Identification and Authentication26 IR Incident Response18 MA Maintenance12 MP Media Protection10 PE Physical and Environmental Protection25 PL Planning7 PS Personnel Security10 RA Risk Assessment11 SA System and Services Acquisition21 SC System and Communications Protection32 SI System and Information Integrity28 SR Supply Chain Risk Management14

SR — Supply Chain Risk Management

10 base controls

SR-1Policy and Procedures

16 CCIs

SR-2Supply Chain Risk Management Plan

5 CCIs

SR-3Supply Chain Controls and Processes

11 CCIs

SR-5Acquisition Strategies, Tools, and Methods

2 CCIs

SR-6Supplier Assessments and Reviews

2 CCIs

SR-8Notification Agreements

2 CCIs

SR-9Tamper Resistance and Detection

1 CCIs

SR-10Inspection of Systems or Components

4 CCIs

SR-11Component Authenticity

5 CCIs

SR-12Component Disposal

3 CCIs