STIGs RMF Controls Compare

STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago

Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.

NIST 800-53 Controls

Baselines:All Low Moderate High Privacy No Baseline

Browse 881 security and privacy controls across 20 families. (filtered to Moderate, No Baseline baselines)

Each control is linked to DISA CCI identifiers and STIG checks. Search for fast lookup by control ID or CCI.

Control Families

All Controls881

AC Access Control123 AT Awareness and Training14 AU Audit and Accountability46 CA Assessment, Authorization, and Monitoring21 CM Configuration Management48 CP Contingency Planning37 IA Identification and Authentication60 IR Incident Response33 MA Maintenance25 MP Media Protection17 PE Physical and Environmental Protection43 PL Planning10 PM Program Management13 PS Personnel Security16 PT PII Processing and Transparency8 RA Risk Assessment20 SA System and Services Acquisition103 SC System and Communications Protection133 SI System and Information Integrity86 SR Supply Chain Risk Management25

PM — Program Management

10 base controls

PM-1Information Security Program Plan

17 CCIs

PM-2Information Security Program Leadership Role

1 CCIs

PM-5System Inventory

4 CCIs

PM-12Insider Threat Program

1 CCIs

PM-15Security and Privacy Groups and Associations

6 CCIs

PM-16Threat Awareness Program

1 CCIs

PM-23Data Governance Body

3 CCIs

PM-29Risk Management Program Leadership Roles

4 CCIs

PM-30Supply Chain Risk Management Strategy

7 CCIs

2 CCIs