STIGs RMF Controls Compare

STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago

Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.

NIST 800-53 Controls

Baselines:All Low Moderate High Privacy No Baseline

Browse 1017 security and privacy controls across 20 families. (filtered to Privacy, Moderate, High, No Baseline, Low baselines)

Each control is linked to DISA CCI identifiers and STIG checks. Search for fast lookup by control ID or CCI.

Control Families

All Controls1017

AC Access Control131 AT Awareness and Training15 AU Audit and Accountability56 CA Assessment, Authorization, and Monitoring25 CM Configuration Management56 CP Contingency Planning49 IA Identification and Authentication62 IR Incident Response40 MA Maintenance28 MP Media Protection20 PE Physical and Environmental Protection51 PL Planning11 PM Program Management37 PS Personnel Security17 PT PII Processing and Transparency21 RA Risk Assessment22 SA System and Services Acquisition108 SC System and Communications Protection139 SI System and Information Integrity102 SR Supply Chain Risk Management27

SR — Supply Chain Risk Management

12 base controls

SR-1Policy and Procedures

16 CCIs

SR-2Supply Chain Risk Management Plan

5 CCIs

SR-3Supply Chain Controls and Processes

11 CCIs

4 CCIs

SR-5Acquisition Strategies, Tools, and Methods

2 CCIs

SR-6Supplier Assessments and Reviews

2 CCIs

SR-7Supply Chain Operations Security

2 CCIs

SR-8Notification Agreements

2 CCIs

SR-9Tamper Resistance and Detection

1 CCIs

SR-10Inspection of Systems or Components

4 CCIs

SR-11Component Authenticity

5 CCIs

SR-12Component Disposal

3 CCIs