ControlsOne rule at a time. A standard is the rulebook, a baseline picks its rules for a kind of system, and a control is one of those rules — what must be true, not how to make it true on a particular machine.

Open a standard's controls 50 current version(s)

Standards and their current versions
Standard	Version	Controls	Published
Ad canaries (EasyList)	202610271405	12	2026-10-27
AdFection / Candiru DNS blocklist (Zero Breach)	2026-10-18 (7253316)	291	2026-10-18
AdFection / Candiru ad blocklist (Zero Breach)	2026-10-18 (7253316)	291	2026-10-18
AdFection / Candiru indicators (Zero Breach)	2026-10-18 (7253316)	405	2026-10-18
DISA Control Correlation Identifiers (CCI)	2026-07-14	5149	2026-07-15
DISA STIG GPO package checklists	October 2026	3465	2026-10-16
DISA STIG Intune policy package	October 2026	1019	2026-10-16
FedRAMP Consolidated Rules (2026)	2026.10.13.01	430	2026-10-13
Malware canaries (URLhaus)	2026-10-21 13:58 UTC	12	2026-10-21
NASA Cybersecurity Policy Reference (OCIO/CSET)	as of 2026-09-15	271	2026-09-15
NIST PIV and digital identity fips-201	FIPS 201-3	124	2022-01-24
NIST PIV and digital identity ir-7863	IR 7863	6	2015-06-18
NIST PIV and digital identity sp-800-116	SP 800-116 Rev. 1	3	2018-06-29
NIST PIV and digital identity sp-800-156	SP 800-156	26	2016-05-20
NIST PIV and digital identity sp-800-157	SP 800-157 Rev. 1 (Draft)	60	2024-11-14
NIST PIV and digital identity sp-800-217	SP 800-217 (Draft)	64	2024-11-14
NIST PIV and digital identity sp-800-63	SP 800-63-4	43	2025-07-31
NIST PIV and digital identity sp-800-63a	SP 800-63A-4	31	2025-07-31
NIST PIV and digital identity sp-800-63b	SP 800-63B-4	73	2025-07-31
NIST PIV and digital identity sp-800-63c	SP 800-63C-4	64	2025-07-31
NIST PIV and digital identity sp-800-73-pt1	SP 800-73-5	20	2024-07-15
NIST PIV and digital identity sp-800-73-pt2	SP 800-73-5	50	2024-07-15
NIST PIV and digital identity sp-800-73-pt3	SP 800-73-5	14	2024-07-15
NIST PIV and digital identity sp-800-76	SP 800-76-2	33	2013-07-11
NIST PIV and digital identity sp-800-78	SP 800-78-5	21	2024-07-15
NIST PIV and digital identity sp-800-79	SP 800-79-2	40	2015-07-30
NIST PIV and digital identity sp-800-85a	SP 800-85A-4	30	2016-04-13
NIST PIV and digital identity sp-800-87	SP 800-87 Rev. 2	11	2018-04-19
NIST PIV and digital identity sp-800-96	SP 800-96	27	2006-12-29
NIST SP 800-171 Rev 3 (CUI; CMMC Level 2)	OSCAL 1.1.0	130	2026-10-22
NIST SP 800-53 (controls)	5.2.0	1196	2026-10-22
NIST SP 800-53B (baselines) profile:high	5.2.0	370	2026-10-22
NIST SP 800-53B (baselines) profile:low	5.2.0	149	2026-10-22
NIST SP 800-53B (baselines) profile:moderate	5.2.0	287	2026-10-22
NIST SP 800-53B (baselines) profile:privacy	5.2.0	96	2026-10-22
NIST macOS Security Compliance Project mscp:ios_26	iOS 26 Guidance, Revision 3.0 (6262df0)	152	2026-06-22
NIST macOS Security Compliance Project mscp:sequoia	Sequoia Guidance, Revision 4.0 (be5491f)	328	2026-01-29
NIST macOS Security Compliance Project mscp:tahoe	Tahoe Guidance, Revision 3.0 (cf656e8)	335	2026-06-25
NIST platform security: roots of trust, firmware and secure enclaves fips-140	FIPS 140-3	7	2019-03-22
NIST platform security: roots of trust, firmware and secure enclaves ir-8320	IR 8320	26	2022-05-04
NIST platform security: roots of trust, firmware and secure enclaves ir-8320a	IR 8320A	11	2021-06-17
NIST platform security: roots of trust, firmware and secure enclaves ir-8320b	IR 8320B	1	2022-04-20
NIST platform security: roots of trust, firmware and secure enclaves ir-8320d	IR 8320D (Draft)	17	2023-02-23
NIST platform security: roots of trust, firmware and secure enclaves sp-800-124	SP 800-124 Rev. 1	11	2013-06-21
NIST platform security: roots of trust, firmware and secure enclaves sp-800-147	SP 800-147	15	2011-04-29
NIST platform security: roots of trust, firmware and secure enclaves sp-800-147b	SP 800-147B	20	2014-08-28
NIST platform security: roots of trust, firmware and secure enclaves sp-800-193	SP 800-193	47	2018-05-04
NIST platform security: roots of trust, firmware and secure enclaves sp-800-219	SP 800-219	7	2022-06-24
NIST platform security: roots of trust, firmware and secure enclaves sp-800-57-pt1	SP 800-57 Part 1 Rev. 5	64	2020-05-04
Tracker canaries (EasyPrivacy)	202610271409	12	2026-10-27

What changed

A control is not a fixed thing: publishers revise the text, move a rule between severities, add and withdraw. The change register keeps every version and shows each control before and after, with the publisher's stated reason.

Tracker canaries (EasyPrivacy) 202610271409first version · Tue 27 Oct
Ad canaries (EasyList) 2026102714052 changed · Tue 27 Oct
NIST SP 800-171 Rev 3 (CUI; CMMC Level 2) OSCAL 1.1.0first version · Thu 22 Oct
NIST SP 800-53B (baselines) 5.2.0first version · Thu 22 Oct
NIST SP 800-53B (baselines) 5.2.0first version · Thu 22 Oct
NIST SP 800-53B (baselines) 5.2.0first version · Thu 22 Oct

The technical end

A control says what must be true; a STIG rule says how to check and fix it on one platform, and a baseline export turns that into the Jamf, Intune or shell setting that enforces it. Every STIG rule here links to the controls it implements through its CCIs, and every control page lists the rules that reach it.