NIST Special Publication 800-53 Revision 4
IDNameBaselinesPriorityThreats
LowModerateHigh
AC-2Account Management•••
  • P1
STRIDE-LM
(6)Dynamic Privilege Management   
  • P1
STRIDE-LM
AC-3Access Enforcement•••
  • P1
STRIDE-LM
(7)Role-Based Access Control   
  • P1
STRIDE-LM
AC-5Separation Of Duties ••
  • P1
STRIDE-LM
AC-6Least Privilege ••
  • P1
STRIDE-LM
(1)Authorize Access To Security Functions ••
  • P1
STRIDE-LM
(2)Non-Privileged Access For Nonsecurity Functions ••
  • P1
STRIDE-LM
(3)Network Access To Privileged Commands  •
  • P1
STRIDE-LM
(5)Privileged Accounts ••
  • P1
STRIDE-LM
(6)Privileged Access By Non-Organizational Users   
  • P1
STRIDE-LM
(7)Review Of User Privileges   
  • P1
STRIDE-LM
(8)Privilege Levels For Code Execution   
  • P1
STRIDE-LM
(10)Prohibit Non-Privileged Users From Executing Privileged Functions ••
  • P1
STRIDE-LM
AC-16(1)Dynamic Attribute Association   
  • P0
STRIDE-LM
(3)Maintenance Of Attribute Associations By Information System   
  • P0
STRIDE-LM
(4)Association Of Attributes By Authorized Individuals   
  • P0
STRIDE-LM
(6)Maintenance Of Attribute Association By Organization   
  • P0
STRIDE-LM
(9)Attribute Reassignment   
  • P0
STRIDE-LM
(10)Attribute Configuration By Authorized Individuals   
  • P0
STRIDE-LM
AC-17(4)Privileged Commands / Access ••
  • P1
STRIDE-LM
AC-18(4)Restrict Configurations By Users  •
  • P1
STRIDE-LM
AC-24Access Control Decisions   
  • P0
STRIDE-LM
AC-25Reference Monitor   
  • P0
STRIDE-LM
CA-8Penetration Testing  •
  • P2
STRIDE-LM
(1)Independent Penetration Agent Or Team   
  • P2
STRIDE-LM
(2)Red Team Exercises   
  • P2
STRIDE-LM
CM-5Access Restrictions For Change ••
  • P1
STRIDE-LM
(4)Dual Authorization   
  • P1
STRIDE-LM
(5)Limit Production / Operational Privileges   
  • P1
STRIDE-LM
(6)Limit Library Privileges   
  • P1
STRIDE-LM
CM-11(2)Prohibit Installation Without Privileged Status   
  • P1
STRIDE-LM
IA-2(3)Local Access To Privileged Accounts ••
  • P1
STRIDE-LM
IA-5(6)Protection Of Authenticators   
  • P1
STRIDE-LM
RA-5Vulnerability Scanning•••
  • P1
STRIDE-LM
(5)Privileged Access ••
  • P1
STRIDE-LM
SA-4(5)System / Component / Service Configurations   
  • P1
STRIDE-LM
SA-8Security Engineering Principles ••
  • P1
STRIDE-LM
SA-11(2)Threat And Vulnerability Analyses   
  • P1
STRIDE-LM
(5)Penetration Testing   
  • P1
STRIDE-LM
SA-12(11)Penetration Testing / Analysis Of Elements, Processes, And Actors   
  • P1
STRIDE-LM
SA-17Developer Security Architecture And Design  •
  • P1
STRIDE-LM
(1)Formal Policy Model   
  • P1
STRIDE-LM
(7)Structure For Least Privilege   
  • P1
STRIDE-LM
SA-22Unsupported System Components   
  • P0
STRIDE-LM
SC-3Security Function Isolation  •
  • P1
STRIDE-LM
SC-18(1)Identify Unacceptable Code / Take Corrective Actions   
  • P2
STRIDE-LM
SI-2Flaw Remediation•••
  • P1
STRIDE-LM
(3)Time To Remediate Flaws / Benchmarks For Corrective Actions   
  • P1
STRIDE-LM
(5)Automatic Software / Firmware Updates   
  • P1
STRIDE-LM