NIST Special Publication 800-53 Revision 5.2.0

This page contains an overview of the controls provided by NIST to protect organization personnel and assets. NIST includes baselines for various security levels. The “Low” security level is applicable to all assets.

The additional OT baseline information is provided by NIST Special Publication 800-82.

NIST Special Publication 800-53 Revision 5.2.0
IDNameBaselinesThreats
LowModerateHighPrivacyOT Low (SP 800-82r3)OT Moderate (SP 800-82r3)OT High (SP 800-82r3)
AC-1Policy and Procedures•••••••STRIDE-LM
AC-2Account Management••• •••STRIDE-LM
(1)Automated System Account Management ••  ••STRIDE-LM
(2)Automated Temporary and Emergency Account Management ••  ••STRIDE-LM
(3)Disable Accounts ••  ••STRIDE-LM
(4)Automated Audit Actions ••  ••STRIDE-LM
(5)Inactivity Logout ••  ••STRIDE-LM
(11)Usage Conditions  •   •STRIDE-LM
(12)Account Monitoring for Atypical Usage  •   •STRIDE-LM
(13)Disable Accounts for High-risk Individuals ••  ••STRIDE-LM
AC-3Access Enforcement••• •••STRIDE-LM
(11)Restrict Access to Specific Information Types      •STRIDE-LM
AC-4Information Flow Enforcement ••  ••STRIDE-LM
(4)Flow Control of Encrypted Information  •   •STRIDE-LM
AC-5Separation of Duties ••  ••STRIDE-LM
AC-6Least Privilege ••  ••STRIDE-LM
(1)Authorize Access to Security Functions ••  ••STRIDE-LM
(2)Non-privileged Access for Nonsecurity Functions ••  ••STRIDE-LM
(3)Network Access to Privileged Commands  •   •STRIDE-LM
(5)Privileged Accounts ••  ••STRIDE-LM
(7)Review of User Privileges ••  ••STRIDE-LM
(9)Log Use of Privileged Functions ••  ••STRIDE-LM
(10)Prohibit Non-privileged Users from Executing Privileged Functions ••  ••STRIDE-LM
AC-7Unsuccessful Logon Attempts••• •••STRIDE-LM
AC-8System Use Notification••• •••STRIDE-LM
AC-10Concurrent Session Control  •   •STRIDE-LM
AC-11Device Lock ••  ••STRIDE-LM
(1)Pattern-hiding Displays ••  ••STRIDE-LM
AC-12Session Termination ••  ••STRIDE-LM
AC-14Permitted Actions Without Identification or Authentication••• •••STRIDE-LM
AC-17Remote Access••• •••STRIDE-LM
(1)Monitoring and Control ••  ••STRIDE-LM
(2)Protection of Confidentiality and Integrity Using Encryption ••  ••STRIDE-LM
(3)Managed Access Control Points ••  ••STRIDE-LM
(4)Privileged Commands and Access ••  ••STRIDE-LM
(9)Disconnect or Disable Access    •••STRIDE-LM
(10)Authenticate Remote Commands     ••STRIDE-LM
AC-18Wireless Access••• •••STRIDE-LM
(1)Authentication and Encryption ••  ••STRIDE-LM
(3)Disable Wireless Networking ••  ••STRIDE-LM
(4)Restrict Configurations by Users  •   •STRIDE-LM
(5)Antennas and Transmission Power Levels  •   •STRIDE-LM
AC-19Access Control for Mobile Devices••• •••STRIDE-LM
(5)Full Device or Container-based Encryption ••  ••STRIDE-LM
AC-20Use of External Systems••• •••STRIDE-LM
(1)Limits on Authorized Use ••  ••STRIDE-LM
(2)Portable Storage Devices - Restricted Use ••  ••STRIDE-LM
AC-21Information Sharing ••  ••STRIDE-LM
AC-22Publicly Accessible Content••• •••STRIDE-LM
AT-1Policy and Procedures•••••••STRIDE-LM