Control frameworkInternational

NIST SP 800-53 (SP 800-53)

A catalogue of security and privacy controls for information systems and organisations.

Request an Assessment

Classification

Control framework

Issuing authority

US National Institute of Standards and Technology (NIST)

Jurisdiction

International · Sector: Government / all

Status / edition

Revision 5 (with ongoing release updates)

Key dates

Rev. 5 published September 2020

Mandatory or voluntary

Mandatory (sector-specific)

Who it applies to

US federal information systems; widely adopted as a control catalogue by others.

Purpose

A catalogue of security and privacy controls for information systems and organisations.

Major requirements / obligations

  • Select and tailor control baselines
  • Implement and assess controls
  • Support authorisation to operate

Control domains

Access controlAudit evidenceIncident responseSupplier management

Official reference

https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final ↗

Last reviewed

2026-10-18 (source verification date)

This library provides general information for orientation only. It is not legal advice, a determination of applicability, or a substitute for formal certification or professional counsel. Verify current legal status, editions and dates against the official source before relying on any entry. Inclusion of a jurisdiction or instrument here is informational and does not imply that Srida IT provides regulated services, holds local authorisation, or has a presence in that jurisdiction.