nist-80053-rev5version Rev. 5

NIST SP 800-53 Rev. 5

1,196 controls.

Reference	Family	Title
AT-2(2)	Awareness and Training	Insider Threat
AT-2(3)	Awareness and Training	Social Engineering and Mining
AT-2(4)	Awareness and Training	Suspicious Communications and Anomalous System Behavior
AT-2(5)	Awareness and Training	Advanced Persistent Threat
AT-2(6)	Awareness and Training	Cyber Threat Environment
AT-3	Awareness and Training	Role-based Training
AT-3(1)	Awareness and Training	Environmental Controls
AT-3(2)	Awareness and Training	Physical Security Controls
AT-3(3)	Awareness and Training	Practical Exercises
AT-3(4)	Awareness and Training	Suspicious Communications and Anomalous System Behavior
AT-3(5)	Awareness and Training	Processing Personally Identifiable Information
AT-4	Awareness and Training	Training Records
AT-5	Awareness and Training	Contacts with Security Groups and Associations
AT-6	Awareness and Training	Training Feedback
AU-1	Audit and Accountability	Policy and Procedures
AU-10	Audit and Accountability	Non-repudiation
AU-10(1)	Audit and Accountability	Association of Identities
AU-10(2)	Audit and Accountability	Validate Binding of Information Producer Identity
AU-10(3)	Audit and Accountability	Chain of Custody
AU-10(4)	Audit and Accountability	Validate Binding of Information Reviewer Identity
AU-10(5)	Audit and Accountability	Digital Signatures
AU-11	Audit and Accountability	Audit Record Retention
AU-11(1)	Audit and Accountability	Long-term Retrieval Capability
AU-12	Audit and Accountability	Audit Record Generation
AU-12(1)	Audit and Accountability	System-wide and Time-correlated Audit Trail
AU-12(2)	Audit and Accountability	Standardized Formats
AU-12(3)	Audit and Accountability	Changes by Authorized Individuals
AU-12(4)	Audit and Accountability	Query Parameter Audits of Personally Identifiable Information
AU-13	Audit and Accountability	Monitoring for Information Disclosure
AU-13(1)	Audit and Accountability	Use of Automated Tools
AU-13(2)	Audit and Accountability	Review of Monitored Sites
AU-13(3)	Audit and Accountability	Unauthorized Replication of Information
AU-14	Audit and Accountability	Session Audit
AU-14(1)	Audit and Accountability	System Start-up
AU-14(2)	Audit and Accountability	Capture and Record Content
AU-14(3)	Audit and Accountability	Remote Viewing and Listening
AU-15	Audit and Accountability	Alternate Audit Logging Capability
AU-16	Audit and Accountability	Cross-organizational Audit Logging
AU-16(1)	Audit and Accountability	Identity Preservation
AU-16(2)	Audit and Accountability	Sharing of Audit Information
AU-16(3)	Audit and Accountability	Disassociability
AU-2	Audit and Accountability	Event Logging
AU-2(1)	Audit and Accountability	Compilation of Audit Records from Multiple Sources
AU-2(2)	Audit and Accountability	Selection of Audit Events by Component
AU-2(3)	Audit and Accountability	Reviews and Updates
AU-2(4)	Audit and Accountability	Privileged Functions
AU-3	Audit and Accountability	Content of Audit Records
AU-3(1)	Audit and Accountability	Additional Audit Information
AU-3(2)	Audit and Accountability	Centralized Management of Planned Audit Record Content
AU-3(3)	Audit and Accountability	Limit Personally Identifiable Information Elements

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.