STIGs RMF Controls Compare

STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago

Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.

NIST 800-53 Controls

Browse 862 security and privacy controls across 26 families. (filtered to Privacy, No Baseline, High, Low, Moderate baselines)

Each control is linked to DISA CCI identifiers and STIG checks. Search for fast lookup by control ID or CCI. Switch to Rev 5 for the latest controls.

Control Families

All Controls862

AC Access Control112 AP Authority and Purpose2 AR Accountability, Audit, and Risk Management8 AT Awareness and Training10 AU Audit and Accountability58 CA Assessment, Authorization, and Monitoring22 CM Configuration Management50 CP Contingency Planning48 DI Data Quality and Integrity5 DM Data Minimization and Retention6 IA Identification and Authentication56 IP Individual Participation and Redress6 IR Incident Response34 MA Maintenance26 MP Media Protection22 PE Physical and Environmental Protection50 PL Planning10 PM Program Management16 PS Personnel Security15 RA Risk Assessment13 SA System and Services Acquisition86 SC System and Communications Protection116 SE Security2 SI System and Information Integrity82 TR Transparency5 UL Use Limitation2

Access Control

112 controls

Authority and Purpose

2 controls

Accountability, Audit, and Risk Management

8 controls

Awareness and Training

10 controls

Audit and Accountability

58 controls

Assessment, Authorization, and Monitoring

22 controls

Configuration Management

50 controls

Contingency Planning

48 controls

Data Quality and Integrity

5 controls

Data Minimization and Retention

6 controls

Identification and Authentication

56 controls

Individual Participation and Redress

6 controls

Incident Response

34 controls

Maintenance

26 controls

Media Protection

22 controls

Physical and Environmental Protection

50 controls

Planning

10 controls

Program Management

16 controls

Personnel Security

15 controls

Risk Assessment

13 controls

System and Services Acquisition

86 controls

System and Communications Protection

116 controls

Security

2 controls

System and Information Integrity

82 controls

Transparency

5 controls

Use Limitation

2 controls