nist-80053-rev5version Rev. 5

NIST SP 800-53 Rev. 5

1,196 controls.

Reference	Family	Title
IA-7	Identification and Authentication	Cryptographic Module Authentication
IA-8	Identification and Authentication	Identification and Authentication (Non-organizational Users)
IA-8(1)	Identification and Authentication	Acceptance of PIV Credentials from Other Agencies
IA-8(2)	Identification and Authentication	Acceptance of External Authenticators
IA-8(3)	Identification and Authentication	Use of FICAM-approved Products
IA-8(4)	Identification and Authentication	Use of Defined Profiles
IA-8(5)	Identification and Authentication	Acceptance of PIV-I Credentials
IA-8(6)	Identification and Authentication	Disassociability
IA-9	Identification and Authentication	Service Identification and Authentication
IA-9(1)	Identification and Authentication	Information Exchange
IA-9(2)	Identification and Authentication	Transmission of Decisions
IR-1	Incident Response	Policy and Procedures
IR-10	Incident Response	Integrated Information Security Analysis Team
IR-2	Incident Response	Incident Response Training
IR-2(1)	Incident Response	Simulated Events
IR-2(2)	Incident Response	Automated Training Environments
IR-2(3)	Incident Response	Breach
IR-3	Incident Response	Incident Response Testing
IR-3(1)	Incident Response	Automated Testing
IR-3(2)	Incident Response	Coordination with Related Plans
IR-3(3)	Incident Response	Continuous Improvement
IR-4	Incident Response	Incident Handling
IR-4(1)	Incident Response	Automated Incident Handling Processes
IR-4(10)	Incident Response	Supply Chain Coordination
IR-4(11)	Incident Response	Integrated Incident Response Team
IR-4(12)	Incident Response	Malicious Code and Forensic Analysis
IR-4(13)	Incident Response	Behavior Analysis
IR-4(14)	Incident Response	Security Operations Center
IR-4(15)	Incident Response	Public Relations and Reputation Repair
IR-4(2)	Incident Response	Dynamic Reconfiguration
IR-4(3)	Incident Response	Continuity of Operations
IR-4(4)	Incident Response	Information Correlation
IR-4(5)	Incident Response	Automatic Disabling of System
IR-4(6)	Incident Response	Insider Threats
IR-4(7)	Incident Response	Insider Threats — Intra-organization Coordination
IR-4(8)	Incident Response	Correlation with External Organizations
IR-4(9)	Incident Response	Dynamic Response Capability
IR-5	Incident Response	Incident Monitoring
IR-5(1)	Incident Response	Automated Tracking, Data Collection, and Analysis
IR-6	Incident Response	Incident Reporting
IR-6(1)	Incident Response	Automated Reporting
IR-6(2)	Incident Response	Vulnerabilities Related to Incidents
IR-6(3)	Incident Response	Supply Chain Coordination
IR-7	Incident Response	Incident Response Assistance
IR-7(1)	Incident Response	Automation Support for Availability of Information and Support
IR-7(2)	Incident Response	Coordination with External Providers
IR-8	Incident Response	Incident Response Plan
IR-8(1)	Incident Response	Breaches
IR-9	Incident Response	Information Spillage Response
IR-9(1)	Incident Response	Responsible Personnel

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.