STIGhubSTIGhub
STIGsRMF ControlsCompare
STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago
Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.

NIST 800-53 Controls

Rev 5Rev 4

Browse 862 security and privacy controls across 26 families. (filtered to No Baseline, Privacy, Moderate, Low, High baselines)

Each control is linked to DISA CCI identifiers and STIG checks. Search for fast lookup by control ID or CCI. Switch to Rev 5 for the latest controls.

Control FamiliesAll Controls862
AC Access Control112AP Authority and Purpose2AR Accountability, Audit, and Risk Management8AT Awareness and Training10AU Audit and Accountability58CA Assessment, Authorization, and Monitoring22CM Configuration Management50CP Contingency Planning48DI Data Quality and Integrity5DM Data Minimization and Retention6IA Identification and Authentication56IP Individual Participation and Redress6IR Incident Response34MA Maintenance26MP Media Protection22PE Physical and Environmental Protection50PL Planning10PM Program Management16PS Personnel Security15RA Risk Assessment13SA System and Services Acquisition86SC System and Communications Protection116SE Security2SI System and Information Integrity82TR Transparency5UL Use Limitation2

IR — Incident Response

10 base controls

IR-1Incident Response Policy and Procedures
18 CCIs
IR-2Incident Response Training
10 CCIs
IR-3Incident Response Testing
4 CCIs
IR-4Incident Handling
11 CCIs
IR-5Incident Monitoring
1 CCIs
IR-6Incident Reporting
4 CCIs
IR-7Incident Response Assistance
1 CCIs
IR-8Incident Response Plan
22 CCIs
IR-9Information Spillage Response
10 CCIs
IR-10Integrated Information Security Analysis Team
1 CCIs