STIGhubSTIGhub
STIGsRMF ControlsCompare
STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago
Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.

NIST 800-53 Controls

Rev 5Rev 4
Baselines:AllLowModerateHighPrivacyNo Baseline

Browse 688 security and privacy controls across 20 families. (filtered to Privacy, No Baseline baselines)

Each control is linked to DISA CCI identifiers and STIG checks. Search for fast lookup by control ID or CCI.

Control FamiliesAll Controls688
AC Access Control86AT Awareness and Training13AU Audit and Accountability34CA Assessment, Authorization, and Monitoring17CM Configuration Management26CP Contingency Planning14IA Identification and Authentication36IR Incident Response30MA Maintenance16MP Media Protection12PE Physical and Environmental Protection26PL Planning9PM Program Management37PS Personnel Security8PT PII Processing and Transparency21RA Risk Assessment14SA System and Services Acquisition93SC System and Communications Protection107SI System and Information Integrity76SR Supply Chain Risk Management13

SA — System and Services Acquisition

9 base controls

SA-1Policy and Procedures
21 CCIs
SA-2Allocation of Resources
11 CCIs
SA-3System Development Life Cycle
16 CCIs
SA-4Acquisition Process
21 CCIs
SA-9External System Services
15 CCIs
SA-11Developer Testing and Evaluation
21 CCIs
SA-20Customized Development of Critical Components
2 CCIs
SA-23Specialization
2 CCIs
SA-24Design For Cyber Resiliency