NIST SP 800-53 (controls)

The OSCAL catalog NIST publishes, which carries both the 800-53 controls and the 800-53A assessment objectives. Current Release 5.2.0 (2025-08-27). History is loaded from the same repository's commits. Source · US Government work, public domain.

Where this comes fromControl catalogue · US federal civilian, US defense, NASA

Published by NIST. The control catalogue: roughly a thousand controls and enhancements in twenty families, each a statement of what must be true, with discussion and related controls.

Derives from

FISMA 2014, FIPS 199 and FIPS 200

Feeds into

NIST SP 800-53A, NIST SP 800-53B, CNSSI 1253, DISA Security Requirements Guides, NASA-SPEC-2600 (ASCS), macOS Security Compliance Project, Control Correlation Identifiers, OSCAL, SCAP and the National Checklist Program, CSET (CISA's assessment tool)

At the publisher

SP 800-53 Rev. 5 public
Release search (the controls themselves) public
OSCAL content on GitHub public the machine-readable catalogue this instance reads

The same step, another body

NIST SP 800-53A, NIST SP 800-171 — the other answers to the same job, on Learn

Catalog 4 versions

Versions of this standard
Version	Published	Requirements	Against the previous version	Loaded
5.2.0	2026-10-22	1196	1 revised	Fri 23 Oct
5.2.0	2026-05-11	1196	no control-level changes	15 Oct
5.2.0	2025-08-26	1196	3 added, 5 with discussion or related-control updates	15 Oct
5.1.1+u4	2024-02-04	1193	first version loaded	15 Oct