BaselineWatch
1 versions
Desk

DISA Control Correlation Identifiers (CCI)

The CCI list DISA publishes: each identifier's definition and its index into NIST SP 800-53 Revisions 4 and 5. It is the join between every STIG rule and the Register's control pages. Found through the STIG library listing, so an unchanged list costs one small request. Source · US Government work, public domain.

Where this comes fromCheck and evidence · US defense, US federal civilian, NASA

Published by DISA. A list that breaks each 800-53 control statement into single testable assertions, each with a CCI number that a STIG rule then cites.

Derives from
NIST SP 800-53
At the publisher
The same step, another body
OSCAL, SCAP and the National Checklist Program, CSET (CISA's assessment tool) — the other answers to the same job, on Learn

cci 1 version

Versions of this standard
VersionPublishedRequirementsAgainst the previous versionLoaded
2026-07-14 2026-07-15 5149 first version loaded 17 Oct