NIST Special Publication 800-53 Revision 5.2.0

This page contains an overview of the controls provided by NIST to protect organization personnel and assets. NIST includes baselines for various security levels. The “Low” security level is applicable to all assets.

The additional OT baseline information is provided by NIST Special Publication 800-82.

NIST Special Publication 800-53 Revision 5.2.0
IDNameBaselinesThreats
LowModerateHighPrivacyOT Low (SP 800-82r3)OT Moderate (SP 800-82r3)OT High (SP 800-82r3)
AC-3(2)Dual Authorization       STRIDE-LM
(15)Discretionary and Mandatory Access Control       STRIDE-LM
AC-4(19)Validation of Metadata       STRIDE-LM
AC-16(2)Attribute Value Changes by Authorized Individuals       STRIDE-LM
(10)Attribute Configuration by Authorized Individuals       STRIDE-LM
AC-17(2)Protection of Confidentiality and Integrity Using Encryption ••  ••STRIDE-LM
AC-18(4)Restrict Configurations by Users  •   •STRIDE-LM
AC-25Reference Monitor       STRIDE-LM
AU-9Protection of Audit Information••• •••STRIDE-LM
(1)Hardware Write-once Media       STRIDE-LM
(2)Store on Separate Physical Systems or Components  •   •STRIDE-LM
(3)Cryptographic Protection  •   •STRIDE-LM
(5)Dual Authorization       STRIDE-LM
(6)Read-only Access       STRIDE-LM
AU-10(3)Chain of Custody       STRIDE-LM
CM-2(3)Retention of Previous Configurations ••  ••STRIDE-LM
CM-3Configuration Change Control ••  ••STRIDE-LM
(1)Automated Documentation, Notification, and Prohibition of Changes  •   •STRIDE-LM
(6)Cryptography Management  •   •STRIDE-LM
(7)Review System Changes       STRIDE-LM
(8)Prevent or Restrict Configuration Changes       STRIDE-LM
CM-5Access Restrictions for Change••• •••STRIDE-LM
(4)Dual Authorization       STRIDE-LM
(5)Privilege Limitation for Production and Operation       STRIDE-LM
CM-6(1)Automated Management, Application, and Verification  •   •STRIDE-LM
(2)Respond to Unauthorized Changes  •   •STRIDE-LM
CM-7(7)Code Execution in Protected Environments       STRIDE-LM
(8)Binary or Machine Executable Code       STRIDE-LM
CM-9Configuration Management Plan ••  ••STRIDE-LM
CM-11(3)Automated Enforcement and Monitoring       STRIDE-LM
CM-14Signed Components       STRIDE-LM
CP-9System Backup••• •••STRIDE-LM
(1)Testing for Reliability and Integrity ••  ••STRIDE-LM
(7)Dual Authorization for Deletion or Destruction       STRIDE-LM
(8)Cryptographic Protection ••  ••STRIDE-LM
CP-10System Recovery and Reconstitution••• •••STRIDE-LM
(6)Component Protection     ••STRIDE-LM
IR-4(6)Insider Threats       STRIDE-LM
MA-2Controlled Maintenance••• •••STRIDE-LM
MA-3(1)Inspect Tools ••  ••STRIDE-LM
(2)Inspect Media ••  ••STRIDE-LM
MA-4(6)Cryptographic Protection       STRIDE-LM
MA-5Maintenance Personnel••• •••STRIDE-LM
(5)Non-system Maintenance       STRIDE-LM
PE-2Physical Access Authorizations••• •••STRIDE-LM
(3)Restrict Unescorted Access       STRIDE-LM
PE-3Physical Access Control••• •••STRIDE-LM
(3)Continuous Guards       STRIDE-LM
(4)Lockable Casings       STRIDE-LM
(5)Tamper Protection       STRIDE-LM