NIST Special Publication 800-53 Revision 5.2.0

This page contains an overview of the controls provided by NIST to protect organization personnel and assets. NIST includes baselines for various security levels. The “Low” security level is applicable to all assets.

The additional OT baseline information is provided by NIST Special Publication 800-82.

NIST Special Publication 800-53 Revision 5.2.0
IDNameBaselinesThreats
LowModerateHighPrivacyOT Low (SP 800-82r3)OT Moderate (SP 800-82r3)OT High (SP 800-82r3)
SI-7(3)Centrally Managed Integrity Tools       STRIDE-LM
(5)Automated Response to Integrity Violations  •   •STRIDE-LM
(6)Cryptographic Protection       STRIDE-LM
(7)Integration of Detection and Response ••  ••STRIDE-LM
(9)Verify Boot Process       STRIDE-LM
(10)Protection of Boot Firmware       STRIDE-LM
(12)Integrity Verification       STRIDE-LM
(15)Code Authentication  •   •STRIDE-LM
(17)Runtime Application Self-protection       STRIDE-LM
SI-10Information Input Validation ••  ••STRIDE-LM
(5)Restrict Inputs to Trusted Sources and Approved Formats       STRIDE-LM
(6)Injection Prevention       STRIDE-LM
SI-14(1)Refresh from Trusted Sources       STRIDE-LM
SI-20Tainting       STRIDE-LM
SR-3Supply Chain Controls and Processes••• •••STRIDE-LM
SR-4Provenance       STRIDE-LM
(3)Validate as Genuine and Not Altered       STRIDE-LM
(4)Supply Chain Integrity - Pedigree       STRIDE-LM
SR-7Supply Chain Operations Security       STRIDE-LM
SR-9Tamper Resistance and Detection  •   •STRIDE-LM
SR-10Inspection of Systems or Components••• •••STRIDE-LM
SR-11(2)Configuration Control for Component Service and Repair••• •••STRIDE-LM