NIST Special Publication 800-53 Revision 5.2.0

This page contains an overview of the controls provided by NIST to protect organization personnel and assets. NIST includes baselines for various security levels. The “Low” security level is applicable to all assets.

The additional OT baseline information is provided by NIST Special Publication 800-82.

NIST Special Publication 800-53 Revision 5.2.0
IDNameBaselinesThreats
LowModerateHighPrivacyOT Low (SP 800-82r3)OT Moderate (SP 800-82r3)OT High (SP 800-82r3)
AU-5(3)Configurable Traffic Volume Thresholds       STRIDE-LM
CP-2(3)Resume Mission and Business Functions ••  ••STRIDE-LM
(5)Continue Mission and Business Functions  •   •STRIDE-LM
(6)Alternate Processing and Storage Sites       STRIDE-LM
CP-4(2)Alternate Processing Site  •   •STRIDE-LM
CP-6Alternate Storage Site ••  ••STRIDE-LM
(1)Separation from Primary Site ••  ••STRIDE-LM
(2)Recovery Time and Recovery Point Objectives  •   •STRIDE-LM
CP-7Alternate Processing Site ••  ••STRIDE-LM
(1)Separation from Primary Site ••  ••STRIDE-LM
(3)Priority of Service ••  ••STRIDE-LM
(6)Inability to Return to Primary Site       STRIDE-LM
CP-8Telecommunications Services ••  ••STRIDE-LM
(1)Priority of Service Provisions ••  ••STRIDE-LM
(2)Single Points of Failure ••  ••STRIDE-LM
(3)Separation of Primary and Alternate Providers  •   •STRIDE-LM
(4)Provider Contingency Plan  •   •STRIDE-LM
(5)Alternate Telecommunication Service Testing       STRIDE-LM
CP-9(5)Transfer to Alternate Storage Site  •   •STRIDE-LM
(6)Redundant Secondary System       STRIDE-LM
CP-10System Recovery and Reconstitution••• •••STRIDE-LM
(4)Restore Within Time Period  •   •STRIDE-LM
IR-4(2)Dynamic Reconfiguration       STRIDE-LM
(3)Continuity of Operations       STRIDE-LM
MA-6(1)Preventive Maintenance       STRIDE-LM
PE-9Power Equipment and Cabling ••  ••STRIDE-LM
PE-11Emergency Power ••  ••STRIDE-LM
(1)Alternate Power Supply - Minimal Operational Capability  •   •STRIDE-LM
(2)Alternate Power Supply - Self-contained       STRIDE-LM
PE-12(1)Essential Mission and Business Functions       STRIDE-LM
PE-13(2)Suppression Systems - Automatic Activation and Notification  •   •STRIDE-LM
PE-15Water Damage Protection••• •••STRIDE-LM
PE-21Electromagnetic Pulse Protection       STRIDE-LM
PM-8Critical Infrastructure Plan   •   STRIDE-LM
SA-24Design For Cyber Resiliency       STRIDE-LM
SC-5Denial-of-service Protection••• •••STRIDE-LM
(1)Restrict Ability to Attack Other Systems       STRIDE-LM
(2)Capacity, Bandwidth, and Redundancy       STRIDE-LM
SC-6Resource Availability       STRIDE-LM
SC-12(1)Availability  •   •STRIDE-LM
SC-31(2)Maximum Bandwidth       STRIDE-LM
SC-36Distributed Processing and Storage       STRIDE-LM
SC-47Alternate Communications Paths      •STRIDE-LM
SI-4(11)Analyze Communications Traffic Anomalies       STRIDE-LM
(13)Analyze Traffic and Event Patterns       STRIDE-LM
(14)Wireless Intrusion Detection  •   •STRIDE-LM
(25)Optimize Network Traffic Analysis       STRIDE-LM
SI-13(4)Standby Component Installation and Notification       STRIDE-LM
(5)Failover Capability       STRIDE-LM