NIST 800-53 Controls

Family Class Name Family of Control
Parent Number
ACCESS CONTROL TECHNICAL ACCESS CONTROL POLICY AND 1
AC PROCEDURES
ACCESS CONTROL TECHNICAL ACCESS CONTROL POLICY AND 1.a.
AC 1 PROCEDURES

ACCESS CONTROL TECHNICAL ACCESS CONTROL POLICY AND 1.b.
AC 1 PROCEDURES
ACCESS CONTROL TECHNICAL ACCOUNT MANAGEMENT
AC 2
ACCESS CONTROL TECHNICAL ACCOUNT MANAGEMENT 2
AC 2.a.
AC 2.b.
AC 2.c.
AC 2.d.
AC 2.e.
AC 2.f.
AC 2.g.

AC 2.h.
AC 2.i.

AC 2 2.j.
AC 2 2.(1)
AC 2 2.(2)
AC 2 2.(3)
AC 2 2.(4)
AC 2 2.(5)
AC 2.(5) 2.(5).(a)
AC 2.(5) 2.(5).(b)
AC 2.(5) 2.(5).(c)
AC 2.(5) 2.(5).(d)
AC 2 2.(6)
AC 2 2.(7)
AC 2.(7) 2.(7).(a)

ACCESS CONTROL TECHNICAL ACCOUNT MANAGEMENT 2.(7)
AC 2.(7).(b)
ACCESS CONTROL TECHNICAL ACCESS ENFORCEMENT
AC 3
ACCESS CONTROL TECHNICAL ACCESS ENFORCEMENT 3
AC 3.(1)
AC 3.(2)

AC 3.(3)

ACCESS CONTROL TECHNICAL ACCESS ENFORCEMENT 3.(3)
AC 3.(3).(a)

ACCESS CONTROL TECHNICAL ACCESS ENFORCEMENT 3.(3)
AC 3.(3).(b)

AC 3.(4)
ACCESS CONTROL TECHNICAL ACCESS ENFORCEMENT 3.(4) 3.(4).(a)
AC
ACCESS CONTROL TECHNICAL ACCESS ENFORCEMENT 3.(4) 3.(4).(b)
AC
ACCESS CONTROL TECHNICAL ACCESS ENFORCEMENT 3.(4) 3.(4).(c)
AC
AC 3.(5)
AC 3.(6)
ACCESS CONTROL TECHNICAL INFORMATION FLOW ENFORCEMENT
AC 4

AC 4 4.(1)

AC 4 4.(2)
AC 4 4.(3)

AC 4 4.(4)

AC 4 4.(5)
AC 4 4.(6)
AC 4 4.(7)
AC 4 4.(8)
AC 4 4.(9)

AC 4 4.(10)
AC 4 4.(11)

AC 4 4.(12)
AC 4 4.(13)

AC 4 4.(14)

AC 4 4.(15)

AC 4 4.(16)
AC 4 4.(17)
AC 4.(17) 4.(17).(a)
AC 4.(17) 4.(17).(b)
AC 4.(17) 4.(17).(c)
ACCESS CONTROL TECHNICAL SEPARATION AC DUTIES
OF 5
ACCESS CONTROL TECHNICAL SEPARATION AC DUTIES 5
OF 5.a.
OF 5.b.
OF 5.c.
ACCESS CONTROL TECHNICAL LEAST PRIVILEGE
AC 6

AC 6 6.(1)

AC 6 6.(2)

AC 6 6.(3)

AC 6 6.(4)
AC 6 6.(5)
AC 6 6.(6)

ACCESS CONTROL TECHNICAL UNSUCCESSFUL LOGIN ATTEMPTS
AC 7
AC 7 7.a.

AC 7 7.b.

AC 7 7.(1)
AC 7 7.(2)

ACCESS CONTROL TECHNICAL SYSTEM USEAC
NOTIFICATION 8
NOTIFICATION
8 8.a.

NOTIFICATION
8 8.b.
NOTIFICATION
8 8.c.

ACCESS CONTROL TECHNICAL PREVIOUS LOGON (ACCESS) NOTIFICATION
AC 9
AC 9 9.(1)

AC 9 9.(2)

AC 9 9.(3)

ACCESS CONTROL TECHNICAL CONCURRENT SESSION CONTROL
AC 10
ACCESS CONTROL TECHNICAL SESSION LOCK
AC 11
AC 11 11.a.

AC 11 11.b.
AC 11 11.(1)

ACCESS CONTROL TECHNICAL SESSION TERMINATION
AC 12
ACCESS CONTROL TECHNICAL SUPERVISION AND REVIEW — ACCESS CONTROL
AC 13
ACCESS CONTROL TECHNICAL PERMITTED ACTIONS WITHOUT IDENTIFICATION OR AUTHENTICATION
AC 14
AC 14 14.a.
AC 14 14.b.
AC 14 14.(1)

ACCESS CONTROL TECHNICAL AUTOMATED AC
MARKING 15
ACCESS CONTROL TECHNICAL SECURITY ATTRIBUTES
AC 16

AC 16 16.(1)
AC 16 16.(2)
AC 16 16.(3)

AC 16 16.(4)
AC 16 16.(5)

ACCESS CONTROL TECHNICAL REMOTE ACCESS
AC 17
AC 17 17.a.
AC 17 17.b.
AC 17 17.c.
AC 17 17.d.
AC 17 17.e.
AC 17 17.(1)
AC 17 17.(2)
AC 17 17.(3)
AC 17 17.(4)

AC 17 17.(5)

AC 17 17.(6)
AC 17 17.(7)

AC 17 17.(8)

ACCESS CONTROL TECHNICAL WIRELESS ACCESS
AC 18
AC 18 18.a.
AC 18 18.b.
AC 18 18.c.
AC 18 18.d.
AC 18 18.(1)
AC 18 18.(2)

AC 18 18.(3)

AC 18 18.(4)
AC 18 18.(5)
ACCESS CONTROL TECHNICAL ACCESS CONTROL FOR MOBILE 19
AC DEVICES

ACCESS CONTROL TECHNICAL ACCESS CONTROL FOR MOBILE 19.a.
AC 19 DEVICES

ACCESS CONTROL TECHNICAL ACCESS CONTROL FOR MOBILE 19.b.
AC 19 DEVICES

ACCESS CONTROL TECHNICAL ACCESS CONTROL FOR MOBILE 19.c.
AC 19 DEVICES

ACCESS CONTROL TECHNICAL ACCESS CONTROL FOR MOBILE 19.d.
AC 19 DEVICES

ACCESS CONTROL TECHNICAL ACCESS CONTROL FOR MOBILE 19.e.
AC 19 DEVICES

ACCESS CONTROL TECHNICAL ACCESS CONTROL FOR MOBILE 19.g.
AC 19 DEVICES

ACCESS CONTROL TECHNICAL ACCESS CONTROL FOR MOBILE 19.(1)
AC 19 DEVICES
AC 19 DEVICES
AC 19 DEVICES
ACCESS CONTROL TECHNICAL ACCESS CONTROL FOR MOBILE 19.(4).(a)
AC 19.(4) DEVICES

ACCESS CONTROL TECHNICAL ACCESS CONTROL FOR MOBILE 19.(4).(b)
AC 19.(4) DEVICES

ACCESS CONTROL TECHNICAL USE OF EXTERNAL INFORMATION SYSTEMS
AC 20

AC 20 20.a.

AC 20 20.b.

AC 20 20.(1)

AC 20.(1) 20.(1).(a)
AC 20.(1) 20.(1).(b)
AC 20 20.(2)
ACCESS CONTROL TECHNICAL USER-BASEDACCOLLABORATION AND INFORMATION SHARING
21
ACCESS CONTROL TECHNICAL USER-BASEDACCOLLABORATION AND INFORMATION SHARING
21 21.a.

ACCESS CONTROL TECHNICAL USER-BASEDAC
COLLABORATION AND INFORMATION SHARING
21 21.b.

ACCESS CONTROL TECHNICAL USER-BASEDAC
COLLABORATION AND INFORMATION SHARING
21 21.(1)

ACCESS CONTROL TECHNICAL PUBLICLY ACCESSIBLE CONTENT
AC 22
AC 22 22.a.
AC 22 22.b.
AC 22 22.c.

AC 22 22.d.
AC 22 22.e.
AWARENESS AND TRAINING
OPERATIONALECURITY AWARENESS AND TRAINING POLICY AND PROCEDURES
S AT 1
S AT 1 1.a.

S AT 1 1.b.

OPERATIONALECURITY AWARENESS
S AT 2

OPERATIONALECURITY AWARENESS
S AT 2 2.(1)
OPERATIONALECURITY TRAINING
S AT 3

S AT 3 3.(1)

S AT 3 3.(2)

OPERATIONALECURITY TRAINING RECORDS 4
S AT
OPERATIONALECURITY TRAINING RECORDS 4.a.
S AT 4

OPERATIONALECURITY TRAINING RECORDS 4.b.
S AT 4
OPERATIONAL ONTACTS WITH SECURITY GROUPS AND ASSOCIATIONS
C AT 5

AUDIT AND ACCOUNTABILITY
TECHNICAL AUDIT AND ACCOUNTABILITY POLICY AND PROCEDURES
AU 1
AU 1 1.a.

AU 1 1.b.
TECHNICAL AUDITABLE EVENTS
AU 2
AU 2 2.a.

AU 2 2.b.

AU 2 2.c.
AU 2 2.d.

AU 2 2.(1)
AU 2 2.(2)
AU 2 2.(3)
AU 2 2.(4)
TECHNICAL CONTENT OFAU
AUDIT RECORDS 3

AUDIT RECORDS 3.(1)
3

AUDIT RECORDS 3.(2)
3
TECHNICAL AUDIT STORAGE CAPACITY
AU 4
TECHNICAL RESPONSE TO AUDIT PROCESSING FAILURES
AU 5
AU 5 5.a.
AU 5 5.b.

AU 5 5.(1)

AU 5 5.(2)

AU 5 5.(3)

AU 5 5.(4)
TECHNICAL AUDIT REVIEW, ANALYSIS, AND REPORTING
AU 6
TECHNICAL AUDIT REVIEW, ANALYSIS,6
AU AND REPORTING
6.a.

AU AND REPORTING
6.b.

AU AND REPORTING
6.(1)

AU AND REPORTING
6.(2)
AU AND REPORTING
6.(3)
AU AND REPORTING
6.(4)
AU AND REPORTING
6.(5)

AU AND REPORTING
6.(6)

AU AND REPORTING
6.(7)

AU AND REPORTING
6.(8)

AU AND REPORTING
6.(9)
TECHNICAL AUDIT REDUCTION AND REPORT7
AU GENERATION
TECHNICAL AUDIT REDUCTION AND REPORT7.(1)
AU 7 GENERATION
TECHNICAL TIME STAMPSAU 8
TECHNICAL TIME STAMPSAU 8 8.(1)

TECHNICAL PROTECTIONAU AUDIT INFORMATION
OF 9
OF 9 9.(1)
OF 9 9.(2)
OF 9 9.(3)
OF 9 9.(4)
OF 9.(4) 9.(4).(a)
OF 9.(4) 9.(4).(b)
TECHNICAL NON-REPUDIATION
AU 10
AU 10 10.(1)
AU 10 10.(2)
AU 10 10.(3)
AU 10 10.(4)

AU 10 10.(5)
TECHNICAL AUDIT RECORD RETENTION
AU 11

TECHNICAL AUDIT GENERATION
AU 12
AU 12 12.a.
AU 12 12.b.
AU 12 12.c.
AU 12 12.(1)

AU 12 12.(2)
TECHNICAL MONITORINGAU INFORMATION DISCLOSURE
FOR 13

TECHNICAL SESSION AUDIT
AU 14
AU 14 14.a.
AU 14 14.b.

AU 14 14.(1)
SECURITY ASSESSMENT AND AUTHORIZATIONASSESSMENT AND AUTHORIZATION POLICIES AND PROCEDURES
MANAGEMENTSECURITY CA 1
MANAGEMENTSECURITY CA 1 1.a.

MANAGEMENTSECURITY CA 1 1.b.

SECURITY ASSESSMENT AND AUTHORIZATIONASSESSMENTS

SECURITY ASSESSMENT AND AUTHORIZATIONASSESSMENTS 2
MANAGEMENTSECURITY CA 2.a.

MANAGEMENTSECURITY CA 2.b.

MANAGEMENTSECURITY CA 2.c.

MANAGEMENTSECURITY CA 2.d.

MANAGEMENTSECURITY CA 2.(1)
MANAGEMENTSECURITY CA 2.(2)

SECURITY ASSESSMENT AND AUTHORIZATION CA
MANAGEMENTINFORMATION SYSTEM CONNECTIONS
3
3 3.a.

3 3.b.
3 3.c.
3 3.(1)
3 3.(2)
SECURITY ASSESSMENT AND AUTHORIZATIONCERTIFICATION
SECURITY ASSESSMENT AND AUTHORIZATION CA AND MILESTONES
MANAGEMENTPLAN OF ACTION 5
MANAGEMENTPLAN OF ACTION 5 5.a.

MANAGEMENTPLAN OF ACTION 5 5.b.

MANAGEMENTPLAN OF ACTION 5 5.(1)

SECURITY ASSESSMENT AND AUTHORIZATIONAUTHORIZATION
MANAGEMENTSECURITY CA 6 6.a.
MANAGEMENTSECURITY CA 6 6.b.
MANAGEMENTSECURITY CA 6 6.c.
MANAGEMENTCONTINUOUS MONITORING 7
MANAGEMENTCONTINUOUS MONITORING7 7.a.
MANAGEMENTCONTINUOUS MONITORING7 7.b.
MANAGEMENTCONTINUOUS MONITORING7 7.c.
MANAGEMENTCONTINUOUS MONITORING7 7.d.
MANAGEMENTCONTINUOUS MONITORING7 7.(1)
MANAGEMENTCONTINUOUS MONITORING7 7.(2)

CONFIGURATION MANAGEMENT
OPERATIONAL ONFIGURATION MANAGEMENT 1
C CM POLICY AND PROCEDURES
OPERATIONAL ONFIGURATION MANAGEMENT 1.a.
C CM 1 POLICY AND PROCEDURES

OPERATIONAL ONFIGURATION MANAGEMENT 1.b.
C CM 1 POLICY AND PROCEDURES
OPERATIONAL ASELINE CONFIGURATION
B CM 2
B CM 2 2.(1)
B CM 2.(1) 2.(1).(a)
B CM 2.(1) 2.(1).(b)
B CM 2.(1) 2.(1).(c)
B CM 2 2.(2)

B CM 2 2.(3)
B CM 2 2.(4)
B CM 2.(4) 2.(4).(a)
B CM 2.(4) 2.(4).(b)
B CM 2 2.(5)
B CM 2.(5) 2.(5).(a)
B CM 2.(5) 2.(5).(b)
B CM 2 2.(6)
OPERATIONAL ONFIGURATION CHANGE CONTROL
C CM 3
OPERATIONAL ONFIGURATION CHANGE3CONTROL
C CM 3.a.

C CM 3.b.
C CM 3.c.
C CM 3.d.
C CM 3.e.
C CM 3.f.

C CM 3.(1)
OPERATIONAL ONFIGURATION CHANGE3.(1) 3.(1).(a)
C CM CONTROL
OPERATIONAL ONFIGURATION CHANGE3.(1) 3.(1).(b)
C CM CONTROL
OPERATIONAL ONFIGURATION CHANGE3.(1) 3.(1).(c)
C CM CONTROL
OPERATIONAL ONFIGURATION CHANGE3.(1) 3.(1).(d)
C CM CONTROL
OPERATIONAL ONFIGURATION CHANGE3.(1) 3.(1).(e)
C CM CONTROL
C CM 3.(2)
C CM 3.(3)

C CM 3.(4)

OPERATIONALECURITY IMPACT ANALYSIS
S CM 4
S CM 4 4.(1)

S CM 4 4.(2)

OPERATIONALCCESS RESTRICTIONS FOR CHANGE
A CM 5
A CM 5 5.(1)
A CM 5 5.(2)

A CM 5 5.(3)

A CM 5 5.(4)
A CM 5 5.(5)
A CM 5.(5) 5.(5).(a)

A CM 5.(5) 5.(5).(b)
A CM 5 5.(6)
A CM 5 5.(7)

OPERATIONAL ONFIGURATION SETTINGS
C CM 6
C CM 6 6.a.

C CM 6 6.b.
C CM 6 6.c.

C CM 6 6.d.
C CM 6 6.(1)
C CM 6 6.(2)
C CM 6 6.(3)

C CM 6 6.(4)

OPERATIONALEAST FUNCTIONALITY
L CM 7

L CM 7 7.(1)

L CM 7 7.(2)

OPERATIONALEAST FUNCTIONALITY 7
L CM 7.(3)
OPERATIONAL
INFORMATION SYSTEM COMPONENT INVENTORY
CM 8
OPERATIONAL
CM 8 8.a.
OPERATIONAL
CM 8 8.b.
OPERATIONAL
CM 8 8.c.
OPERATIONAL
CM 8 8.d.
OPERATIONAL
CM 8 8.e.
OPERATIONAL
CM 8 8.(1)
OPERATIONAL
CM 8 8.(2)

OPERATIONAL
CM 8 8.(3)
OPERATIONAL
CM 8.(3) 8.(3).(a)

OPERATIONAL
CM 8.(3) 8.(3).(b)
OPERATIONAL
CM 8 8.(4)

OPERATIONAL
CM 8 8.(5)

OPERATIONAL
CM 8 8.(6)

OPERATIONAL ONFIGURATION MANAGEMENT 9
C CM PLAN
OPERATIONAL ONFIGURATION MANAGEMENT 9.a.
C CM 9 PLAN
OPERATIONAL ONFIGURATION MANAGEMENT 9.b.
C CM 9 PLAN

OPERATIONAL ONFIGURATION MANAGEMENT 9.c.
C CM 9 PLAN

OPERATIONAL ONFIGURATION MANAGEMENT 9.(1)
C CM 9 PLAN

CONTINGENCY PLANNING
OPERATIONAL ONTINGENCY PLANNING POLICY AND PROCEDURES
C CP 1
OPERATIONAL ONTINGENCY PLANNING1
C CP POLICY AND PROCEDURES
1.a.

OPERATIONAL ONTINGENCY PLANNING1
C CP POLICY AND PROCEDURES
1.b.
OPERATIONAL ONTINGENCY PLAN
C CP 2 2.a.

C CP 2 2.b.

C CP 2 2.c.
C CP 2 2.d.
C CP 2 2.e.

C CP 2 2.f.

C CP 2 2.(1)
C CP 2 2.(2)

C CP 2 2.(3)

C CP 2 2.(4)

C CP 2 2.(5)

C CP 2 2.(6)

OPERATIONAL ONTINGENCY TRAINING
C CP 3

OPERATIONAL ONTINGENCY TRAINING 3
C CP 3.(1)
OPERATIONAL ONTINGENCY TRAINING 3
C CP 3.(2)
OPERATIONAL ONTINGENCY PLAN TESTING AND EXERCISES
C CP 4
C CP 4 4.a.

C CP 4 4.b.
C CP 4 4.(1)
C CP 4 4.(2)

C CP 4 4.(3)

C CP 4 4.(4)
OPERATIONAL ONTINGENCY PLAN UPDATE 5
C CP
OPERATIONALLTERNATE STORAGE SITE
A CP 6
A CP 6 6.(1)
A CP 6 6.(2)
A CP 6 6.(3)

OPERATIONALLTERNATE PROCESSING SITE 7
A CP
OPERATIONALLTERNATE PROCESSING 7
A CP SITE 7.a.

A CP SITE 7.b.

A CP SITE 7.(1)
A CP SITE 7.(2)

A CP SITE 7.(3)

A CP SITE 7.(4)
A CP SITE 7.(5)
OPERATIONALELECOMMUNICATIONS SERVICES
T CP 8

T CP 8 8.(1)
T CP 8.(1) 8.(1).(a)

T CP 8.(1) 8.(1).(b)

T CP 8 8.(2)

T CP 8 8.(3)

T CP 8 8.(4)
OPERATIONAL
INFORMATION SYSTEM BACKUP 9
CP
OPERATIONAL
INFORMATION SYSTEM BACKUP 9.a.
CP 9

OPERATIONAL
INFORMATION SYSTEM BACKUP 9.b.
CP 9

OPERATIONAL
INFORMATION SYSTEM BACKUP 9.c.
CP 9

OPERATIONAL
INFORMATION SYSTEM BACKUP 9.d.
CP 9
OPERATIONAL
INFORMATION SYSTEM BACKUP 9.(1)
CP 9
OPERATIONAL
CP 9
OPERATIONAL
CP 9

OPERATIONAL
CP 9
OPERATIONAL
CP 9

OPERATIONAL
CP 9

OPERATIONAL
INFORMATION SYSTEM RECOVERY AND RECONSTITUTION
CP 10
OPERATIONAL
CP 10 10.(1)
OPERATIONAL
CP 10 10.(2)
OPERATIONAL
CP 10 10.(3)

OPERATIONAL
CP 10 10.(4)

CONTINGENCY PLANNINGOPERATIONALINFORMATION SYSTEM RECOVERY AND RECONSTITUTION
CP 10 10.(5)
CONTINGENCY PLANNINGOPERATIONALINFORMATION SYSTEM RECOVERY AND RECONSTITUTION
CP 10 10.(6)
IDENTIFICATION AND AUTHENTICATION
TECHNICAL IDENTIFICATION AND AUTHENTICATION POLICY AND PROCEDURES
IA 1

IA 1 1.a.

IA 1 1.b.

TECHNICAL IDENTIFICATION AND AUTHENTICATION (ORGANIZATIONAL USERS)
IA 2

IA 2 2.(1)
IA 2 2.(2)
IA 2 2.(3)
IA 2 2.(4)
IA 2 2.(5)
IA 2.(5) 2.(5).(a)
IA 2.(5) 2.(5).(b)
IA 2 2.(6)

IA 2 2.(7)

IA 2 2.(8)
IA 2 2.(9)
TECHNICAL DEVICE IDENTIFICATION AND AUTHENTICATION
IA 3

IA 3 3.(1)

IA 3 3.(2)

IA 3 3.(3)

TECHNICAL IDENTIFIER MANAGEMENT
IA 4
TECHNICAL IDENTIFIER MANAGEMENT4
IA 4.a.
IA 4.b.
IA 4.c.

IA 4.d.
IA 4.e.
IA 4.(1)

IA 4.(2)

IA 4.(3)

IA 4.(4)
IA 4.(5)
TECHNICAL AUTHENTICATOR MANAGEMENT5
IA
TECHNICAL AUTHENTICATOR MANAGEMENT5.a.
IA 5
TECHNICAL AUTHENTICATOR MANAGEMENT5.b.
IA 5
TECHNICAL AUTHENTICATOR MANAGEMENT5.c.
IA 5
TECHNICAL AUTHENTICATOR MANAGEMENT5.d.
IA 5

TECHNICAL AUTHENTICATOR MANAGEMENT5.e.
IA 5
TECHNICAL AUTHENTICATOR MANAGEMENT5.f.
IA 5
TECHNICAL AUTHENTICATOR MANAGEMENT5.g.
IA 5
TECHNICAL AUTHENTICATOR MANAGEMENT5.h.
IA 5
TECHNICAL AUTHENTICATOR MANAGEMENT5.i.
IA 5
TECHNICAL AUTHENTICATOR MANAGEMENT5.(1)
IA 5
TECHNICAL AUTHENTICATOR MANAGEMENT5.(1).(a)
IA 5.(1)

TECHNICAL AUTHENTICATOR MANAGEMENT5.(1).(b)
IA 5.(1)
TECHNICAL AUTHENTICATOR MANAGEMENT5.(1).(c)
IA 5.(1)
TECHNICAL AUTHENTICATOR MANAGEMENT5.(1).(d)
IA 5.(1)
TECHNICAL AUTHENTICATOR MANAGEMENT5.(1).(e)
IA 5.(1)
IA 5
TECHNICAL AUTHENTICATOR MANAGEMENT5.(2).(a)
IA 5.(2)
TECHNICAL AUTHENTICATOR MANAGEMENT5.(2).(b)
IA 5.(2)
TECHNICAL AUTHENTICATOR MANAGEMENT5.(2).(c)
IA 5.(2)
IA 5

IA 5

IA 5

IA 5
IA 5
IA 5

TECHNICAL AUTHENTICATOR FEEDBACK
IA 6

TECHNICAL CRYPTOGRAPHIC MODULE AUTHENTICATION
IA 7

TECHNICAL IDENTIFICATION AND AUTHENTICATION (NON-ORGANIZATIONAL USERS)
IA 8
INCIDENT RESPONSE OPERATIONAL INCIDENT RESPONSE POLICY AND PROCEDURES
IR 1
INCIDENT RESPONSE OPERATIONAL INCIDENT RESPONSE POLICY AND PROCEDURES
IR 1 1.a.

INCIDENT RESPONSE OPERATIONAL
INCIDENT RESPONSE POLICY AND PROCEDURES
IR 1 1.b.
INCIDENT RESPONSE TRAINING 2
IR
INCIDENT RESPONSE TRAINING 2.a.
IR 2
INCIDENT RESPONSE TRAINING 2.b.
IR 2
INCIDENT RESPONSE TRAINING 2.(1)
IR 2
INCIDENT RESPONSE TRAINING 2.(2)
IR 2
INCIDENT RESPONSE TESTING AND EXERCISES
IR 3

INCIDENT RESPONSE TESTING AND EXERCISES
IR 3 3.(1)
INCIDENT HANDLING
IR 4
INCIDENT HANDLING
IR 4 4.a.
INCIDENT HANDLING
IR 4 4.b.
INCIDENT HANDLING
IR 4 4.c.

INCIDENT HANDLING
IR 4 4.(1)
INCIDENT HANDLING
IR 4 4.(2)
INCIDENT HANDLING
IR 4 4.(3)

INCIDENT HANDLING
IR 4 4.(4)
INCIDENT HANDLING
IR 4 4.(5)

INCIDENT MONITORING
IR 5
INCIDENT MONITORING
IR 5 5.(1)

INCIDENT REPORTING
IR 6
INCIDENT REPORTING
IR 6 6.a.

INCIDENT REPORTING
IR 6 6.b.
INCIDENT REPORTING
IR 6 6.(1)
INCIDENT REPORTING
IR 6 6.(2)

INCIDENT RESPONSE ASSISTANCE
IR 7

IR 7 7.(1)
IR 7 7.(2)
IR 7.(2) 7.(2).(a)
IR 7.(2) 7.(2).(b)
INCIDENT RESPONSE PLAN
IR 8
IR 8 8.a.

IR 8 8.b.

IR 8 8.c.
IR 8 8.d.
IR 8 8.e.

MAINTENANCE OPERATIONALYSTEM MAINTENANCE POLICY 1
S MA AND PROCEDURES
MAINTENANCE OPERATIONALYSTEM MAINTENANCE POLICY 1.a. PROCEDURES
S MA 1 AND

MAINTENANCE OPERATIONALYSTEM MAINTENANCE POLICY 1.b. PROCEDURES
S MA 1 AND
MAINTENANCE OPERATIONAL ONTROLLED MAINTENANCE
C MA 2
C MA 2 2.a.

C MA 2 2.b.

C MA 2 2.c.

C MA 2 2.d.
C MA 2 2.e.
C MA 2 2.(1)
C MA 2.(1) 2.(1).(a)
C MA 2.(1) 2.(1).(b)
C MA 2.(1) 2.(1).(c)
C MA 2.(1) 2.(1).(d)
C MA 2.(1) 2.(1).(e)
C MA 2 2.(2)

MAINTENANCE OPERATIONAL AINTENANCE TOOLS
M MA 3

M MA 3 3.(1)
M MA 3 3.(2)
M MA 3 3.(3)

M MA 3 3.(4)
MAINTENANCE OPERATIONAL ON-LOCAL MAINTENANCE
N MA 4
N MA 4 4.a.
N MA 4 4.b.

N MA 4 4.c.
N MA 4 4.d.
N MA 4 4.e.
N MA 4 4.(1)
N MA 4 4.(2)
N MA 4 4.(3)

N MA 4.(3) 4.(3).(a)

N MA 4.(3) 4.(3).(b)

N MA 4 4.(4)

N MA 4.(4) 4.(4).(a)
N MA 4.(4) 4.(4).(b)
N MA 4 4.(5)
N MA 4.(5) 4.(5).(a)
N MA 4.(5) 4.(5).(b)
N MA 4 4.(6)
N MA 4 4.(7)
MAINTENANCE OPERATIONAL AINTENANCE PERSONNEL
M MA 5
M MA 5 5.a.
M MA 5 5.b.

M MA 5 5.(1)

M MA 5.(1) 5.(1).(a)

M MA 5.(1) 5.(1).(b)

M MA 5.(1) 5.(1).(c)
M MA 5 5.(2)

M MA 5 5.(3)

M MA 5 5.(4)
M MA 5.(4) 5.(4).(a)

M MA 5.(4) 5.(4).(b)

MAINTENANCE OPERATIONALIMELY MAINTENANCE
T MA 6

MEDIA PROTECTION OPERATIONAL EDIA PROTECTION POLICY AND PROCEDURES
M MP 1
M MP 1 1.a.

M MP 1 1.b.
MEDIA PROTECTION OPERATIONAL EDIA ACCESS
M MP 2

M MP 2 2.(1)
M MP 2 2.(2)
MEDIA PROTECTION OPERATIONAL EDIA MARKING
M MP 3
M MP 3 3.a.

M MP 3 3.b.

MEDIA PROTECTION OPERATIONAL EDIA STORAGE
M MP 4

M MP 4 4.a.

M MP 4 4.b.

M MP 4 4.(1)
MEDIA PROTECTION OPERATIONAL EDIA TRANSPORT
M MP 5

M MP 5 5.a.

M MP 5 5.b.

M MP 5 5.c.

M MP 5 5.(1)
M MP 5 5.(2)
M MP 5 5.(3)
M MP 5 5.(4)

MEDIA PROTECTION OPERATIONAL EDIA SANITIZATION
M MP 6
M MP 6 6.(1)
M MP 6 6.(2)
M MP 6 6.(3)

M MP 6 6.(4)

M MP 6 6.(5)
M MP 6 6.(6)
PHYSICAL AND ENVIRONMENTAL PROTECTIONAND ENVIRONMENTAL PROTECTION POLICY AND PROCEDURES
OPERATIONALHYSICAL PE
P 1
P 1 1.a.

P 1 1.b.

PHYSICAL AND ENVIRONMENTAL PROTECTIONACCESS AUTHORIZATIONS
P 2
P 2 2.a.

P 2 2.b.
P 2 2.c.

P 2 2.(1)
P 2 2.(2)
P 2 2.(3)

PHYSICAL AND ENVIRONMENTAL PROTECTIONACCESS CONTROL
P 3
P 3 3.a.

P 3 3.b.
P 3 3.c.
P 3 3.d.
P 3 3.e.
P 3 3.f.
P 3 3.g.

P 3 3.(1)
P 3 3.(2)

P 3 3.(3)
P 3 3.(4)
P 3 3.(5)
P 3 3.(6)

PHYSICAL AND ENVIRONMENTAL PROTECTION PE
OPERATIONALCCESS CONTROL FOR TRANSMISSION MEDIUM
A 4
OPERATIONALCCESS CONTROL FOR OUTPUT5DEVICES
A
OPERATIONAL ONITORING PHYSICAL ACCESS
M 6
M 6 6.a.
M 6 6.b.
M 6 6.c.
M 6 6.(1)
M 6 6.(2)
OPERATIONALISITOR CONTROL
V 7

V 7 7.(1)
V 7 7.(2)
OPERATIONALCCESS RECORDS
A 8
A 8 8.a.

A 8 8.b.
A 8 8.(1)
A 8 8.(2)
OPERATIONALOWER EQUIPMENT AND POWER CABLING
P 9

P 9 9.(1)
P 9 9.(2)
OPERATIONALMERGENCY SHUTOFF
E 10
OPERATIONALMERGENCY SHUTOFF 10
E 10.a.
OPERATIONALMERGENCY SHUTOFF 10
E 10.b.

E 10 10.c.
E 10 10.(1)
OPERATIONALMERGENCY POWER
E 11

E 11 11.(1)

E 11 11.(2)
OPERATIONALMERGENCY LIGHTING
E 12

OPERATIONALMERGENCY LIGHTING
E 12 12.(1)
OPERATIONALIRE PROTECTION
F 13

F 13 13.(1)

F 13 13.(2)

F 13 13.(3)
F 13 13.(4)

PHYSICAL AND ENVIRONMENTAL PROTECTION PEAND HUMIDITY CONTROLS
OPERATIONALEMPERATURE
T 14
T 14 14.a.
T 14 14.b.
T 14 14.(1)
T 14 14.(2)
PHYSICAL AND ENVIRONMENTAL PROTECTION PE PROTECTION 15
OPERATIONAL ATER DAMAGE
W

PHYSICAL AND ENVIRONMENTAL PROTECTION PE PROTECTION 15.(1)
OPERATIONAL ATER DAMAGE
W 15

PHYSICAL AND ENVIRONMENTAL PROTECTION PEREMOVAL
OPERATIONAL ELIVERY AND
D 16

PHYSICAL AND ENVIRONMENTAL PROTECTION WORK SITE
OPERATIONALLTERNATE PE
A 17
PHYSICAL AND ENVIRONMENTAL PROTECTION WORK SITE
A 17 17.a.

PHYSICAL AND ENVIRONMENTAL PROTECTION WORK SITE 17
A 17.b.
PHYSICAL AND ENVIRONMENTAL PROTECTION WORK SITE 17
A 17.c.
PHYSICAL AND ENVIRONMENTAL PROTECTION OF INFORMATION SYSTEM COMPONENTS
OPERATIONALOCATION PE
L 18

PHYSICAL AND ENVIRONMENTAL PROTECTION OF INFORMATION SYSTEM COMPONENTS
OPERATIONALOCATION PE
L 18 18.(1)

OPERATIONAL
INFORMATION LEAKAGE 19
OPERATIONAL
INFORMATION LEAKAGE 19 19.(1)

PLANNING MANAGEMENT
SECURITY PLANNING POLICY AND PROCEDURES
PL 1
PLANNING MANAGEMENT
PL 1 1.a.

PLANNING MANAGEMENT
PL 1 1.b.
PLANNING MANAGEMENT
SYSTEM SECURITY PLAN
PL 2
PLANNING MANAGEMENT
SYSTEM SECURITY PLAN 2
PL 2.a.

PLANNING MANAGEMENT
PL 2.b.
PLANNING MANAGEMENT
PL 2.c.

PLANNING MANAGEMENT
PL 2.(1)
PLANNING MANAGEMENT
SYSTEM SECURITY PLAN 2.(1)
PL 2.(1).(a)

PLANNING MANAGEMENT
PL 2.(1) 2.(1).(b)
PLANNING MANAGEMENT
PL 2 2.(2)
PLANNING MANAGEMENT
PL 2.(2) 2.(2).(a)
PLANNING MANAGEMENT
PL 2.(2) 2.(2).(b)
PLANNING MANAGEMENT
PL 2.(2) 2.(2).(c)
PLANNING MANAGEMENT
PL 2.(2) 2.(2).(d)

PLANNING MANAGEMENT
SYSTEM SECURITY PLAN 2.(2)
PL 2.(2).(e)

PLANNING MANAGEMENT
SYSTEM SECURITY PLAN UPDATE
PL 3
PLANNING MANAGEMENT
RULES OF BEHAVIOR
PL 4
PLANNING MANAGEMENT
RULES OF BEHAVIOR
PL 4 4.a.

PLANNING MANAGEMENT
RULES OF BEHAVIOR
PL 4 4.b.

PLANNING MANAGEMENT
RULES OF BEHAVIOR
PL 4 4.(1)

PLANNING MANAGEMENT
PRIVACY IMPACT ASSESSMENT 5
PL
PLANNING MANAGEMENT
SECURITY-RELATED ACTIVITY PLANNING
PL 6

PROGRAM MANAGEMENT
MANAGEMENT
INFORMATION SECURITY PROGRAM PLAN
PM 1

PROGRAM MANAGEMENT
MANAGEMENT
PM 1 1.a.

PROGRAM MANAGEMENT
MANAGEMENT
PM 1 1.b.

PROGRAM MANAGEMENT
MANAGEMENT
PM 1 1.c.

PROGRAM MANAGEMENT
MANAGEMENT
SENIOR INFORMATION SECURITY OFFICER
PM 2

PROGRAM MANAGEMENT
MANAGEMENT
INFORMATION SECURITY RESOURCES
PM 3
PROGRAM MANAGEMENT
MANAGEMENT
PM 3 3.a.

PROGRAM MANAGEMENT
MANAGEMENT
PM 3 3.b.
PROGRAM MANAGEMENT
MANAGEMENT
PM 3 3.c.
PROGRAM MANAGEMENT
MANAGEMENT
PLAN OF ACTION AND MILESTONES PROCESS
PM 4

PROGRAM MANAGEMENT
MANAGEMENT
INFORMATION SYSTEM INVENTORY
PM 5
PROGRAM MANAGEMENT
MANAGEMENT
INFORMATION SECURITY MEASURES OF PERFORMANCE
PM 6
PROGRAM MANAGEMENT
MANAGEMENT
ENTERPRISE PM
ARCHITECTURE 7

PROGRAM MANAGEMENT
MANAGEMENT
CRITICAL INFRASTRUCTURE PLAN
PM 8

PROGRAM MANAGEMENT
MANAGEMENT
RISK MANAGEMENT STRATEGY 9
PM
PROGRAM MANAGEMENT
MANAGEMENT
RISK MANAGEMENT STRATEGY 9.a.
PM 9

PROGRAM MANAGEMENT
MANAGEMENT
RISK MANAGEMENT STRATEGY 9.b.
PM 9
PROGRAM MANAGEMENT
MANAGEMENT
SECURITY AUTHORIZATION PROCESS
PM 10
PROGRAM MANAGEMENT
MANAGEMENT
PM 10 10.a.
PROGRAM MANAGEMENT
MANAGEMENT
PM 10 10.b.
PROGRAM MANAGEMENT
MANAGEMENT
PM 10 10.c.
PROGRAM MANAGEMENT
MANAGEMENT
MISSION/BUSINESS PROCESS DEFINITION
PM 11
PROGRAM MANAGEMENT
MANAGEMENT
PM 11 11.a.

PROGRAM MANAGEMENT
MANAGEMENT
PM 11 11.b.

PERSONNEL SECURITYOPERATIONALERSONNEL PS
P SECURITY POLICY AND PROCEDURES
1

1 1.a.

1 1.b.
PERSONNEL SECURITYOPERATIONALOSITION CATEGORIZATION
P PS 2
P PS 2 2.a.
P PS 2 2.b.
P PS 2 2.c.
P SCREENING 3
P SCREENING 3 3.a.
P SCREENING 3 3.b.

P SCREENING 3 3.(1)

P SCREENING 3 3.(2)

P TERMINATION 4
P TERMINATION
4 4.a.
P TERMINATION
4 4.b.
P TERMINATION
4 4.c.
P TERMINATION
4 4.d.
P TRANSFER 5

PERSONNEL SECURITYOPERATIONALCCESS AGREEMENTS
A PS 6
A PS 6 6.a.

A PS 6 6.b.
A PS 6 6.(1)
A PS 6.(1) 6.(1).(a)
A PS 6.(1) 6.(1).(b)
A PS 6 6.(2)
A PS 6.(2) 6.(2).(a)
A PS 6.(2) 6.(2).(b)

PERSONNEL SECURITYOPERATIONALCCESS AGREEMENTS 6.(2) 6.(2).(c)
A PS
PERSONNEL SECURITYOPERATIONALHIRD-PARTY PERSONNEL SECURITY
T PS 7
PERSONNEL SECURITYOPERATIONALHIRD-PARTY PERSONNEL SECURITY
T PS 7 7.a.

NIST 800-53 Controls

Recommandé

Recommandé

Contenu connexe

Dernier

Dernier (20)

En vedette

En vedette (20)

NIST 800-53 Controls