STIGhubSTIGhub
STIGsRMF ControlsCompare
STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago
Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.

NIST 800-53 Controls

Rev 5Rev 4
Baselines:AllLowModerateHighPrivacyNo Baseline

Browse 964 security and privacy controls across 20 families. (filtered to Moderate, Low, High, No Baseline baselines)

Each control is linked to DISA CCI identifiers and STIG checks. Search for fast lookup by control ID or CCI.

Control FamiliesAll Controls964
AC Access Control130AT Awareness and Training14AU Audit and Accountability55CA Assessment, Authorization, and Monitoring25CM Configuration Management56CP Contingency Planning49IA Identification and Authentication62IR Incident Response38MA Maintenance28MP Media Protection20PE Physical and Environmental Protection50PL Planning10PM Program Management13PS Personnel Security17PT PII Processing and Transparency8RA Risk Assessment21SA System and Services Acquisition107SC System and Communications Protection138SI System and Information Integrity96SR Supply Chain Risk Management27

SR — Supply Chain Risk Management

12 base controls

SR-1Policy and Procedures
16 CCIs
SR-2Supply Chain Risk Management Plan
5 CCIs
SR-3Supply Chain Controls and Processes
11 CCIs
SR-4Provenance
4 CCIs
SR-5Acquisition Strategies, Tools, and Methods
2 CCIs
SR-6Supplier Assessments and Reviews
2 CCIs
SR-7Supply Chain Operations Security
2 CCIs
SR-8Notification Agreements
2 CCIs
SR-9Tamper Resistance and Detection
1 CCIs
SR-10Inspection of Systems or Components
4 CCIs
SR-11Component Authenticity
5 CCIs
SR-12Component Disposal
3 CCIs