STIGhubSTIGhub
STIGsRMF ControlsCompare
STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago
Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.

NIST 800-53 Controls

Rev 5Rev 4
Baselines:AllLowModerateHighPrivacyNo Baseline

Browse 744 security and privacy controls across 20 families. (filtered to Low, No Baseline baselines)

Each control is linked to DISA CCI identifiers and STIG checks. Search for fast lookup by control ID or CCI.

Control FamiliesAll Controls744
AC Access Control96AT Awareness and Training13AU Audit and Accountability40CA Assessment, Authorization, and Monitoring19CM Configuration Management33CP Contingency Planning20IA Identification and Authentication52IR Incident Response27MA Maintenance20MP Media Protection14PE Physical and Environmental Protection35PL Planning9PM Program Management13PS Personnel Security16PT PII Processing and Transparency8RA Risk Assessment18SA System and Services Acquisition95SC System and Communications Protection118SI System and Information Integrity74SR Supply Chain Risk Management24

SA — System and Services Acquisition

11 base controls

SA-1Policy and Procedures
21 CCIs
SA-2Allocation of Resources
11 CCIs
SA-3System Development Life Cycle
16 CCIs
SA-4Acquisition Process
21 CCIs
SA-5System Documentation
24 CCIs
SA-8Security and Privacy Engineering Principles
10 CCIs
SA-9External System Services
15 CCIs
SA-20Customized Development of Critical Components
2 CCIs
SA-22Unsupported System Components
5 CCIs
SA-23Specialization
2 CCIs
SA-24Design For Cyber Resiliency