STIGhubSTIGhub
STIGsRMF ControlsCompare
STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago
Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.

NIST 800-53 Controls

Rev 5Rev 4

Browse 862 security and privacy controls across 26 families. (filtered to No Baseline, Moderate, High baselines)

Each control is linked to DISA CCI identifiers and STIG checks. Search for fast lookup by control ID or CCI. Switch to Rev 5 for the latest controls.

Control FamiliesAll Controls862
AC Access Control112AP Authority and Purpose2AR Accountability, Audit, and Risk Management8AT Awareness and Training10AU Audit and Accountability58CA Assessment, Authorization, and Monitoring22CM Configuration Management50CP Contingency Planning48DI Data Quality and Integrity5DM Data Minimization and Retention6IA Identification and Authentication56IP Individual Participation and Redress6IR Incident Response34MA Maintenance26MP Media Protection22PE Physical and Environmental Protection50PL Planning10PM Program Management16PS Personnel Security15RA Risk Assessment13SA System and Services Acquisition86SC System and Communications Protection116SE Security2SI System and Information Integrity82TR Transparency5UL Use Limitation2

AC — Access Control

23 base controls

AC-1Policy and Procedures
23 CCIs
AC-2Account Management
47 CCIs
AC-3Access Enforcement
1 CCIs
AC-4Information Flow Enforcement
6 CCIs
AC-5Separation of Duties
6 CCIs
AC-6Least Privilege
1 CCIs
AC-7Unsuccessful Logon Attempts
10 CCIs
AC-8System Use Notification
15 CCIs
AC-9Previous Logon (access) Notification
1 CCIs
AC-10Concurrent Session Control
4 CCIs
AC-11Session Lock
4 CCIs
AC-12Session Termination
3 CCIs
AC-14Permitted Actions Without Identification or Authentication
4 CCIs
AC-16Security Attributes
38 CCIs
AC-17Remote Access
8 CCIs
AC-18Wireless Access
6 CCIs
AC-19Access Control for Mobile Devices
12 CCIs
AC-20Use of External Information Systems
11 CCIs
AC-21Information Sharing
4 CCIs
AC-22Publicly Accessible Content
6 CCIs
AC-23Data Mining Protection
5 CCIs
AC-24Access Control Decisions
2 CCIs
AC-25Reference Monitor
4 CCIs