STIGs RMF Controls Compare

STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago

Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.

NIST 800-53 Controls

Baselines:All Low Moderate High Privacy No Baseline

Browse 425 security and privacy controls across 20 families. (filtered to Privacy, High, Moderate baselines)

Each control is linked to DISA CCI identifiers and STIG checks. Search for fast lookup by control ID or CCI.

Control Families

All Controls425

AC Access Control47 AT Awareness and Training7 AU Audit and Accountability26 CA Assessment, Authorization, and Monitoring14 CM Configuration Management32 CP Contingency Planning35 IA Identification and Authentication26 IR Incident Response20 MA Maintenance12 MP Media Protection10 PE Physical and Environmental Protection26 PL Planning8 PM Program Management24 PS Personnel Security10 PT PII Processing and Transparency13 RA Risk Assessment12 SA System and Services Acquisition22 SC System and Communications Protection33 SI System and Information Integrity34 SR Supply Chain Risk Management14

SR — Supply Chain Risk Management

10 base controls

SR-1Policy and Procedures

16 CCIs

SR-2Supply Chain Risk Management Plan

5 CCIs

SR-3Supply Chain Controls and Processes

11 CCIs

SR-5Acquisition Strategies, Tools, and Methods

2 CCIs

SR-6Supplier Assessments and Reviews

2 CCIs

SR-8Notification Agreements

2 CCIs

SR-9Tamper Resistance and Detection

1 CCIs

SR-10Inspection of Systems or Components

4 CCIs

SR-11Component Authenticity

5 CCIs

SR-12Component Disposal

3 CCIs