NIST Special Publication 800-53 Revision 5.2.0

This page contains an overview of the controls provided by NIST to protect organization personnel and assets. NIST includes baselines for various security levels. The “Low” security level is applicable to all assets.

The additional OT baseline information is provided by NIST Special Publication 800-82.

NIST Special Publication 800-53 Revision 5.2.0
IDNameBaselinesThreats
LowModerateHighPrivacyOT Low (SP 800-82r3)OT Moderate (SP 800-82r3)OT High (SP 800-82r3)
AC-4(7)One-way Flow Mechanisms       STRIDE-LM
(21)Physical or Logical Separation of Information Flows       STRIDE-LM
AC-6(4)Separate Processing Domains       STRIDE-LM
AC-17(3)Managed Access Control Points ••  ••STRIDE-LM
AU-6(3)Correlate Audit Record Repositories ••  ••STRIDE-LM
CA-8(2)Red Team Exercises       STRIDE-LM
CA-9Internal System Connections••• •••STRIDE-LM
IA-5(7)No Embedded Unencrypted Static Authenticators       STRIDE-LM
IR-4(12)Malicious Code and Forensic Analysis       STRIDE-LM
(13)Behavior Analysis       STRIDE-LM
(14)Security Operations Center       STRIDE-LM
MA-4(7)Disconnect Verification       STRIDE-LM
PL-8Security and Privacy Architectures ••• ••STRIDE-LM
(1)Defense in Depth       STRIDE-LM
RA-3(4)Predictive Cyber Analytics       STRIDE-LM
RA-10Threat Hunting       STRIDE-LM
SC-5(1)Restrict Ability to Attack Other Systems       STRIDE-LM
SC-7Boundary Protection••• •••STRIDE-LM
(5)Deny by Default - Allow by Exception ••  ••STRIDE-LM
(15)Networked Privileged Accesses       STRIDE-LM
(20)Dynamic Isolation and Segregation       STRIDE-LM
(21)Isolation of System Components  •   •STRIDE-LM
(22)Separate Subnets for Connecting to Different Security Domains       STRIDE-LM
(26)Classified National Security System Connections       STRIDE-LM
(29)Separate Subnets to Isolate Functions    •••STRIDE-LM
SC-26Decoys       STRIDE-LM
SC-32System Partitioning       STRIDE-LM
(1)Separate Physical Domains for Privileged Functions       STRIDE-LM
SC-48(1)Dynamic Relocation of Sensors or Monitoring Capabilities       STRIDE-LM
SI-4(1)System-wide Intrusion Detection System       STRIDE-LM
(2)Automated Tools and Mechanisms for Real-time Analysis ••  ••STRIDE-LM
(13)Analyze Traffic and Event Patterns       STRIDE-LM
(16)Correlate Monitoring Information       STRIDE-LM
(24)Indicators of Compromise       STRIDE-LM
(25)Optimize Network Traffic Analysis       STRIDE-LM
SR-3(2)Limitation of Harm       STRIDE-LM