STIGhubSTIGhub
STIGsRMF ControlsCompare
STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago
Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.

NIST 800-53 Controls

Rev 5Rev 4
Baselines:AllLowModerateHighPrivacyNo Baseline

Browse 152 security and privacy controls across 18 families. (filtered to Low baseline)

Each control is linked to DISA CCI identifiers and STIG checks. Search for fast lookup by control ID or CCI.

Control FamiliesAll Controls152
AC Access Control12AT Awareness and Training5AU Audit and Accountability10CA Assessment, Authorization, and Monitoring8CM Configuration Management9CP Contingency Planning6IA Identification and Authentication16IR Incident Response7MA Maintenance4MP Media Protection4PE Physical and Environmental Protection10PL Planning6PS Personnel Security9RA Risk Assessment8SA System and Services Acquisition9SC System and Communications Protection12SI System and Information Integrity6SR Supply Chain Risk Management11

SA — System and Services Acquisition

8 base controls

SA-1Policy and Procedures
21 CCIs
SA-2Allocation of Resources
11 CCIs
SA-3System Development Life Cycle
16 CCIs
SA-4Acquisition Process
21 CCIs
SA-5System Documentation
24 CCIs
SA-8Security and Privacy Engineering Principles
10 CCIs
SA-9External System Services
15 CCIs
SA-22Unsupported System Components
5 CCIs