nist-80053-rev5version Rev. 5

NIST SP 800-53 Rev. 5

1,196 controls.

Reference	Family	Title
CM-5(4)	Configuration Management	Dual Authorization
CM-5(5)	Configuration Management	Privilege Limitation for Production and Operation
CM-5(6)	Configuration Management	Limit Library Privileges
CM-5(7)	Configuration Management	Automatic Implementation of Security Safeguards
CM-6	Configuration Management	Configuration Settings
CM-6(1)	Configuration Management	Automated Management, Application, and Verification
CM-6(2)	Configuration Management	Respond to Unauthorized Changes
CM-6(3)	Configuration Management	Unauthorized Change Detection
CM-6(4)	Configuration Management	Conformance Demonstration
CM-7	Configuration Management	Least Functionality
CM-7(1)	Configuration Management	Periodic Review
CM-7(2)	Configuration Management	Prevent Program Execution
CM-7(3)	Configuration Management	Registration Compliance
CM-7(4)	Configuration Management	Unauthorized Software — Deny-by-exception
CM-7(5)	Configuration Management	Authorized Software — Allow-by-exception
CM-7(6)	Configuration Management	Confined Environments with Limited Privileges
CM-7(7)	Configuration Management	Code Execution in Protected Environments
CM-7(8)	Configuration Management	Binary or Machine Executable Code
CM-7(9)	Configuration Management	Prohibiting The Use of Unauthorized Hardware
CM-8	Configuration Management	System Component Inventory
CM-8(1)	Configuration Management	Updates During Installation and Removal
CM-8(2)	Configuration Management	Automated Maintenance
CM-8(3)	Configuration Management	Automated Unauthorized Component Detection
CM-8(4)	Configuration Management	Accountability Information
CM-8(5)	Configuration Management	No Duplicate Accounting of Components
CM-8(6)	Configuration Management	Assessed Configurations and Approved Deviations
CM-8(7)	Configuration Management	Centralized Repository
CM-8(8)	Configuration Management	Automated Location Tracking
CM-8(9)	Configuration Management	Assignment of Components to Systems
CM-9	Configuration Management	Configuration Management Plan
CM-9(1)	Configuration Management	Assignment of Responsibility
CP-1	Contingency Planning	Policy and Procedures
CP-10	Contingency Planning	System Recovery and Reconstitution
CP-10(1)	Contingency Planning	Contingency Plan Testing
CP-10(2)	Contingency Planning	Transaction Recovery
CP-10(3)	Contingency Planning	Compensating Security Controls
CP-10(4)	Contingency Planning	Restore Within Time Period
CP-10(5)	Contingency Planning	Failover Capability
CP-10(6)	Contingency Planning	Component Protection
CP-11	Contingency Planning	Alternate Communications Protocols
CP-12	Contingency Planning	Safe Mode
CP-13	Contingency Planning	Alternative Security Mechanisms
CP-2	Contingency Planning	Contingency Plan
CP-2(1)	Contingency Planning	Coordinate with Related Plans
CP-2(2)	Contingency Planning	Capacity Planning
CP-2(3)	Contingency Planning	Resume Mission and Business Functions
CP-2(4)	Contingency Planning	Resume All Mission and Business Functions
CP-2(5)	Contingency Planning	Continue Mission and Business Functions
CP-2(6)	Contingency Planning	Alternate Processing and Storage Sites
CP-2(7)	Contingency Planning	Coordinate with External Service Providers

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.