STIGs RMF Controls Compare

STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago

Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.

NIST 800-53 Controls

Baselines:All Low Moderate High Privacy No Baseline

Browse 289 security and privacy controls across 18 families. (filtered to Moderate, Low baselines)

Each control is linked to DISA CCI identifiers and STIG checks. Search for fast lookup by control ID or CCI.

Control Families

All Controls289

AC Access Control39 AT Awareness and Training6 AU Audit and Accountability16 CA Assessment, Authorization, and Monitoring10 CM Configuration Management24 CP Contingency Planning23 IA Identification and Authentication24 IR Incident Response13 MA Maintenance9 MP Media Protection7 PE Physical and Environmental Protection18 PL Planning7 PS Personnel Security9 RA Risk Assessment10 SA System and Services Acquisition17 SC System and Communications Protection27 SI System and Information Integrity18 SR Supply Chain Risk Management12

SR — Supply Chain Risk Management

9 base controls

SR-1Policy and Procedures

16 CCIs

SR-2Supply Chain Risk Management Plan

5 CCIs

SR-3Supply Chain Controls and Processes

11 CCIs

SR-5Acquisition Strategies, Tools, and Methods

2 CCIs

SR-6Supplier Assessments and Reviews

2 CCIs

SR-8Notification Agreements

2 CCIs

SR-10Inspection of Systems or Components

4 CCIs

SR-11Component Authenticity

5 CCIs

SR-12Component Disposal

3 CCIs