New version: NIST SP 800-53 Rev. 5 (v1.5.0-8ebe3c9118) – 714 new, 0 changed, 0 removed
- Document: NIST SP 800-53 Rev. 5 (https://raw.githubusercontent.com/usnistgov/oscal-content/v1.5.0/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json)
- Version: v1.5.0-8ebe3c9118
- Project: NIST
- Import: #615, 20.10.2026 17:06, nist
The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes).
Taken over directly (additional fields, HTML of an unchanged text): 34 issues.
Review: 0 open, 714 applied, 0 rejected.
New sections (714)
- AC-02(01) Automated System Account Management [applied]
NIST-SP800-53-rev5_ac-2.1 - AC-02(02) Automated Temporary and Emergency Account Management [applied]
NIST-SP800-53-rev5_ac-2.2 - AC-02(03) Disable Accounts [applied]
NIST-SP800-53-rev5_ac-2.3 - AC-02(04) Automated Audit Actions [applied]
NIST-SP800-53-rev5_ac-2.4 - AC-02(05) Inactivity Logout [applied]
NIST-SP800-53-rev5_ac-2.5 - AC-02(06) Dynamic Privilege Management [applied]
NIST-SP800-53-rev5_ac-2.6 - AC-02(07) Privileged User Accounts [applied]
NIST-SP800-53-rev5_ac-2.7 - AC-02(08) Dynamic Account Management [applied]
NIST-SP800-53-rev5_ac-2.8 - AC-02(09) Restrictions on Use of Shared and Group Accounts [applied]
NIST-SP800-53-rev5_ac-2.9 - AC-02(11) Usage Conditions [applied]
NIST-SP800-53-rev5_ac-2.11 - AC-02(12) Account Monitoring for Atypical Usage [applied]
NIST-SP800-53-rev5_ac-2.12 - AC-02(13) Disable Accounts for High-risk Individuals [applied]
NIST-SP800-53-rev5_ac-2.13 - AC-03(02) Dual Authorization [applied]
NIST-SP800-53-rev5_ac-3.2 - AC-03(03) Mandatory Access Control [applied]
NIST-SP800-53-rev5_ac-3.3 - AC-03(04) Discretionary Access Control [applied]
NIST-SP800-53-rev5_ac-3.4 - AC-03(05) Security-relevant Information [applied]
NIST-SP800-53-rev5_ac-3.5 - AC-03(07) Role-based Access Control [applied]
NIST-SP800-53-rev5_ac-3.7 - AC-03(08) Revocation of Access Authorizations [applied]
NIST-SP800-53-rev5_ac-3.8 - AC-03(09) Controlled Release [applied]
NIST-SP800-53-rev5_ac-3.9 - AC-03(10) Audited Override of Access Control Mechanisms [applied]
NIST-SP800-53-rev5_ac-3.10 - AC-03(11) Restrict Access to Specific Information Types [applied]
NIST-SP800-53-rev5_ac-3.11 - AC-03(12) Assert and Enforce Application Access [applied]
NIST-SP800-53-rev5_ac-3.12 - AC-03(13) Attribute-based Access Control [applied]
NIST-SP800-53-rev5_ac-3.13 - AC-03(14) Individual Access [applied]
NIST-SP800-53-rev5_ac-3.14 - AC-03(15) Discretionary and Mandatory Access Control [applied]
NIST-SP800-53-rev5_ac-3.15 - AC-04(01) Object Security and Privacy Attributes [applied]
NIST-SP800-53-rev5_ac-4.1 - AC-04(02) Processing Domains [applied]
NIST-SP800-53-rev5_ac-4.2 - AC-04(03) Dynamic Information Flow Control [applied]
NIST-SP800-53-rev5_ac-4.3 - AC-04(04) Flow Control of Encrypted Information [applied]
NIST-SP800-53-rev5_ac-4.4 - AC-04(05) Embedded Data Types [applied]
NIST-SP800-53-rev5_ac-4.5 - AC-04(06) Metadata [applied]
NIST-SP800-53-rev5_ac-4.6 - AC-04(07) One-way Flow Mechanisms [applied]
NIST-SP800-53-rev5_ac-4.7 - AC-04(08) Security and Privacy Policy Filters [applied]
NIST-SP800-53-rev5_ac-4.8 - AC-04(09) Human Reviews [applied]
NIST-SP800-53-rev5_ac-4.9 - AC-04(10) Enable and Disable Security or Privacy Policy Filters [applied]
NIST-SP800-53-rev5_ac-4.10 - AC-04(11) Configuration of Security or Privacy Policy Filters [applied]
NIST-SP800-53-rev5_ac-4.11 - AC-04(12) Data Type Identifiers [applied]
NIST-SP800-53-rev5_ac-4.12 - AC-04(13) Decomposition into Policy-relevant Subcomponents [applied]
NIST-SP800-53-rev5_ac-4.13 - AC-04(14) Security or Privacy Policy Filter Constraints [applied]
NIST-SP800-53-rev5_ac-4.14 - AC-04(15) Detection of Unsanctioned Information [applied]
NIST-SP800-53-rev5_ac-4.15 - AC-04(17) Domain Authentication [applied]
NIST-SP800-53-rev5_ac-4.17 - AC-04(19) Validation of Metadata [applied]
NIST-SP800-53-rev5_ac-4.19 - AC-04(20) Approved Solutions [applied]
NIST-SP800-53-rev5_ac-4.20 - AC-04(21) Physical or Logical Separation of Information Flows [applied]
NIST-SP800-53-rev5_ac-4.21 - AC-04(22) Access Only [applied]
NIST-SP800-53-rev5_ac-4.22 - AC-04(23) Modify Non-releasable Information [applied]
NIST-SP800-53-rev5_ac-4.23 - AC-04(24) Internal Normalized Format [applied]
NIST-SP800-53-rev5_ac-4.24 - AC-04(25) Data Sanitization [applied]
NIST-SP800-53-rev5_ac-4.25 - AC-04(26) Audit Filtering Actions [applied]
NIST-SP800-53-rev5_ac-4.26 - AC-04(27) Redundant/Independent Filtering Mechanisms [applied]
NIST-SP800-53-rev5_ac-4.27 - AC-04(28) Linear Filter Pipelines [applied]
NIST-SP800-53-rev5_ac-4.28 - AC-04(29) Filter Orchestration Engines [applied]
NIST-SP800-53-rev5_ac-4.29 - AC-04(30) Filter Mechanisms Using Multiple Processes [applied]
NIST-SP800-53-rev5_ac-4.30 - AC-04(31) Failed Content Transfer Prevention [applied]
NIST-SP800-53-rev5_ac-4.31 - AC-04(32) Process Requirements for Information Transfer [applied]
NIST-SP800-53-rev5_ac-4.32 - AC-06(01) Authorize Access to Security Functions [applied]
NIST-SP800-53-rev5_ac-6.1 - AC-06(02) Non-privileged Access for Nonsecurity Functions [applied]
NIST-SP800-53-rev5_ac-6.2 - AC-06(03) Network Access to Privileged Commands [applied]
NIST-SP800-53-rev5_ac-6.3 - AC-06(04) Separate Processing Domains [applied]
NIST-SP800-53-rev5_ac-6.4 - AC-06(05) Privileged Accounts [applied]
NIST-SP800-53-rev5_ac-6.5 - AC-06(06) Privileged Access by Non-organizational Users [applied]
NIST-SP800-53-rev5_ac-6.6 - AC-06(07) Review of User Privileges [applied]
NIST-SP800-53-rev5_ac-6.7 - AC-06(08) Privilege Levels for Code Execution [applied]
NIST-SP800-53-rev5_ac-6.8 - AC-06(09) Log Use of Privileged Functions [applied]
NIST-SP800-53-rev5_ac-6.9 - AC-06(10) Prohibit Non-privileged Users from Executing Privileged Functions [applied]
NIST-SP800-53-rev5_ac-6.10 - AC-07(02) Purge or Wipe Mobile Device [applied]
NIST-SP800-53-rev5_ac-7.2 - AC-07(03) Biometric Attempt Limiting [applied]
NIST-SP800-53-rev5_ac-7.3 - AC-07(04) Use of Alternate Authentication Factor [applied]
NIST-SP800-53-rev5_ac-7.4 - AC-09(01) Unsuccessful Logons [applied]
NIST-SP800-53-rev5_ac-9.1 - AC-09(02) Successful and Unsuccessful Logons [applied]
NIST-SP800-53-rev5_ac-9.2 - AC-09(03) Notification of Account Changes [applied]
NIST-SP800-53-rev5_ac-9.3 - AC-09(04) Additional Logon Information [applied]
NIST-SP800-53-rev5_ac-9.4 - AC-11(01) Pattern-hiding Displays [applied]
NIST-SP800-53-rev5_ac-11.1 - AC-12(01) User-initiated Logouts [applied]
NIST-SP800-53-rev5_ac-12.1 - AC-12(02) Termination Message [applied]
NIST-SP800-53-rev5_ac-12.2 - AC-12(03) Timeout Warning Message [applied]
NIST-SP800-53-rev5_ac-12.3 - AC-16(01) Dynamic Attribute Association [applied]
NIST-SP800-53-rev5_ac-16.1 - AC-16(02) Attribute Value Changes by Authorized Individuals [applied]
NIST-SP800-53-rev5_ac-16.2 - AC-16(03) Maintenance of Attribute Associations by System [applied]
NIST-SP800-53-rev5_ac-16.3 - AC-16(04) Association of Attributes by Authorized Individuals [applied]
NIST-SP800-53-rev5_ac-16.4 - AC-16(05) Attribute Displays on Objects to Be Output [applied]
NIST-SP800-53-rev5_ac-16.5 - AC-16(06) Maintenance of Attribute Association [applied]
NIST-SP800-53-rev5_ac-16.6 - AC-16(07) Consistent Attribute Interpretation [applied]
NIST-SP800-53-rev5_ac-16.7 - AC-16(08) Association Techniques and Technologies [applied]
NIST-SP800-53-rev5_ac-16.8 - AC-16(09) Attribute Reassignment — Regrading Mechanisms [applied]
NIST-SP800-53-rev5_ac-16.9 - AC-16(10) Attribute Configuration by Authorized Individuals [applied]
NIST-SP800-53-rev5_ac-16.10 - AC-17(01) Monitoring and Control [applied]
NIST-SP800-53-rev5_ac-17.1 - AC-17(02) Protection of Confidentiality and Integrity Using Encryption [applied]
NIST-SP800-53-rev5_ac-17.2 - AC-17(03) Managed Access Control Points [applied]
NIST-SP800-53-rev5_ac-17.3 - AC-17(04) Privileged Commands and Access [applied]
NIST-SP800-53-rev5_ac-17.4 - AC-17(06) Protection of Mechanism Information [applied]
NIST-SP800-53-rev5_ac-17.6 - AC-17(09) Disconnect or Disable Access [applied]
NIST-SP800-53-rev5_ac-17.9 - AC-17(10) Authenticate Remote Commands [applied]
NIST-SP800-53-rev5_ac-17.10 - AC-18(01) Authentication and Encryption [applied]
NIST-SP800-53-rev5_ac-18.1 - AC-18(03) Disable Wireless Networking [applied]
NIST-SP800-53-rev5_ac-18.3 - AC-18(04) Restrict Configurations by Users [applied]
NIST-SP800-53-rev5_ac-18.4 - AC-18(05) Antennas and Transmission Power Levels [applied]
NIST-SP800-53-rev5_ac-18.5 - AC-19(04) Restrictions for Classified Information [applied]
NIST-SP800-53-rev5_ac-19.4 - AC-19(05) Full Device or Container-based Encryption [applied]
NIST-SP800-53-rev5_ac-19.5 - AC-20(01) Limits on Authorized Use [applied]
NIST-SP800-53-rev5_ac-20.1 - AC-20(02) Portable Storage Devices — Restricted Use [applied]
NIST-SP800-53-rev5_ac-20.2 - AC-20(03) Non-organizationally Owned Systems — Restricted Use [applied]
NIST-SP800-53-rev5_ac-20.3 - AC-20(04) Network Accessible Storage Devices — Prohibited Use [applied]
NIST-SP800-53-rev5_ac-20.4 - AC-20(05) Portable Storage Devices — Prohibited Use [applied]
NIST-SP800-53-rev5_ac-20.5 - AC-21(01) Automated Decision Support [applied]
NIST-SP800-53-rev5_ac-21.1 - AC-21(02) Information Search and Retrieval [applied]
NIST-SP800-53-rev5_ac-21.2 - AC-24(01) Transmit Access Authorization Information [applied]
NIST-SP800-53-rev5_ac-24.1 - AC-24(02) No User or Process Identity [applied]
NIST-SP800-53-rev5_ac-24.2 - AT-02(01) Practical Exercises [applied]
NIST-SP800-53-rev5_at-2.1 - AT-02(02) Insider Threat [applied]
NIST-SP800-53-rev5_at-2.2 - AT-02(03) Social Engineering and Mining [applied]
NIST-SP800-53-rev5_at-2.3 - AT-02(04) Suspicious Communications and Anomalous System Behavior [applied]
NIST-SP800-53-rev5_at-2.4 - AT-02(05) Advanced Persistent Threat [applied]
NIST-SP800-53-rev5_at-2.5 - AT-02(06) Cyber Threat Environment [applied]
NIST-SP800-53-rev5_at-2.6 - AT-03(01) Environmental Controls [applied]
NIST-SP800-53-rev5_at-3.1 - AT-03(02) Physical Security Controls [applied]
NIST-SP800-53-rev5_at-3.2 - AT-03(03) Practical Exercises [applied]
NIST-SP800-53-rev5_at-3.3 - AT-03(05) Processing Personally Identifiable Information [applied]
NIST-SP800-53-rev5_at-3.5 - AU-03(01) Additional Audit Information [applied]
NIST-SP800-53-rev5_au-3.1 - AU-03(03) Limit Personally Identifiable Information Elements [applied]
NIST-SP800-53-rev5_au-3.3 - AU-04(01) Transfer to Alternate Storage [applied]
NIST-SP800-53-rev5_au-4.1 - AU-05(01) Storage Capacity Warning [applied]
NIST-SP800-53-rev5_au-5.1 - AU-05(02) Real-time Alerts [applied]
NIST-SP800-53-rev5_au-5.2 - AU-05(03) Configurable Traffic Volume Thresholds [applied]
NIST-SP800-53-rev5_au-5.3 - AU-05(04) Shutdown on Failure [applied]
NIST-SP800-53-rev5_au-5.4 - AU-05(05) Alternate Audit Logging Capability [applied]
NIST-SP800-53-rev5_au-5.5 - AU-06(01) Automated Process Integration [applied]
NIST-SP800-53-rev5_au-6.1 - AU-06(03) Correlate Audit Record Repositories [applied]
NIST-SP800-53-rev5_au-6.3 - AU-06(04) Central Review and Analysis [applied]
NIST-SP800-53-rev5_au-6.4 - AU-06(05) Integrated Analysis of Audit Records [applied]
NIST-SP800-53-rev5_au-6.5 - AU-06(06) Correlation with Physical Monitoring [applied]
NIST-SP800-53-rev5_au-6.6 - AU-06(07) Permitted Actions [applied]
NIST-SP800-53-rev5_au-6.7 - AU-06(08) Full Text Analysis of Privileged Commands [applied]
NIST-SP800-53-rev5_au-6.8 - AU-06(09) Correlation with Information from Nontechnical Sources [applied]
NIST-SP800-53-rev5_au-6.9 - AU-07(01) Automatic Processing [applied]
NIST-SP800-53-rev5_au-7.1 - AU-09(01) Hardware Write-once Media [applied]
NIST-SP800-53-rev5_au-9.1 - AU-09(02) Store on Separate Physical Systems or Components [applied]
NIST-SP800-53-rev5_au-9.2 - AU-09(03) Cryptographic Protection [applied]
NIST-SP800-53-rev5_au-9.3 - AU-09(04) Access by Subset of Privileged Users [applied]
NIST-SP800-53-rev5_au-9.4 - AU-09(05) Dual Authorization [applied]
NIST-SP800-53-rev5_au-9.5 - AU-09(06) Read-only Access [applied]
NIST-SP800-53-rev5_au-9.6 - AU-09(07) Store on Component with Different Operating System [applied]
NIST-SP800-53-rev5_au-9.7 - AU-10(01) Association of Identities [applied]
NIST-SP800-53-rev5_au-10.1 - AU-10(02) Validate Binding of Information Producer Identity [applied]
NIST-SP800-53-rev5_au-10.2 - AU-10(03) Chain of Custody [applied]
NIST-SP800-53-rev5_au-10.3 - AU-10(04) Validate Binding of Information Reviewer Identity [applied]
NIST-SP800-53-rev5_au-10.4 - AU-11(01) Long-term Retrieval Capability [applied]
NIST-SP800-53-rev5_au-11.1 - AU-12(01) System-wide and Time-correlated Audit Trail [applied]
NIST-SP800-53-rev5_au-12.1 - AU-12(02) Standardized Formats [applied]
NIST-SP800-53-rev5_au-12.2 - AU-12(03) Changes by Authorized Individuals [applied]
NIST-SP800-53-rev5_au-12.3 - AU-12(04) Query Parameter Audits of Personally Identifiable Information [applied]
NIST-SP800-53-rev5_au-12.4 - AU-13(01) Use of Automated Tools [applied]
NIST-SP800-53-rev5_au-13.1 - AU-13(02) Review of Monitored Sites [applied]
NIST-SP800-53-rev5_au-13.2 - AU-13(03) Unauthorized Replication of Information [applied]
NIST-SP800-53-rev5_au-13.3 - AU-14(01) System Start-up [applied]
NIST-SP800-53-rev5_au-14.1 - AU-14(03) Remote Viewing and Listening [applied]
NIST-SP800-53-rev5_au-14.3 - AU-16(01) Identity Preservation [applied]
NIST-SP800-53-rev5_au-16.1 - AU-16(02) Sharing of Audit Information [applied]
NIST-SP800-53-rev5_au-16.2 - AU-16(03) Disassociability [applied]
NIST-SP800-53-rev5_au-16.3 - CA-02(01) Independent Assessors [applied]
NIST-SP800-53-rev5_ca-2.1 - CA-02(02) Specialized Assessments [applied]
NIST-SP800-53-rev5_ca-2.2 - CA-02(03) Leveraging Results from External Organizations [applied]
NIST-SP800-53-rev5_ca-2.3 - CA-03(06) Transfer Authorizations [applied]
NIST-SP800-53-rev5_ca-3.6 - CA-03(07) Transitive Information Exchanges [applied]
NIST-SP800-53-rev5_ca-3.7 - CA-05(01) Automation Support for Accuracy and Currency [applied]
NIST-SP800-53-rev5_ca-5.1 - CA-06(01) Joint Authorization — Intra-organization [applied]
NIST-SP800-53-rev5_ca-6.1 - CA-06(02) Joint Authorization — Inter-organization [applied]
NIST-SP800-53-rev5_ca-6.2 - CA-07(01) Independent Assessment [applied]
NIST-SP800-53-rev5_ca-7.1 - CA-07(03) Trend Analyses [applied]
NIST-SP800-53-rev5_ca-7.3 - CA-07(04) Risk Monitoring [applied]
NIST-SP800-53-rev5_ca-7.4 - CA-07(05) Consistency Analysis [applied]
NIST-SP800-53-rev5_ca-7.5 - CA-07(06) Automation Support for Monitoring [applied]
NIST-SP800-53-rev5_ca-7.6 - CA-08(01) Independent Penetration Testing Agent or Team [applied]
NIST-SP800-53-rev5_ca-8.1 - CA-08(02) Red Team Exercises [applied]
NIST-SP800-53-rev5_ca-8.2 - CA-08(03) Facility Penetration Testing [applied]
NIST-SP800-53-rev5_ca-8.3 - CA-09(01) Compliance Checks [applied]
NIST-SP800-53-rev5_ca-9.1 - CM-02(02) Automation Support for Accuracy and Currency [applied]
NIST-SP800-53-rev5_cm-2.2 - CM-02(03) Retention of Previous Configurations [applied]
NIST-SP800-53-rev5_cm-2.3 - CM-02(06) Development and Test Environments [applied]
NIST-SP800-53-rev5_cm-2.6 - CM-02(07) Configure Systems and Components for High-risk Areas [applied]
NIST-SP800-53-rev5_cm-2.7 - CM-03(01) Automated Documentation, Notification, and Prohibition of Changes [applied]
NIST-SP800-53-rev5_cm-3.1 - CM-03(02) Testing, Validation, and Documentation of Changes [applied]
NIST-SP800-53-rev5_cm-3.2 - CM-03(03) Automated Change Implementation [applied]
NIST-SP800-53-rev5_cm-3.3 - CM-03(04) Security and Privacy Representatives [applied]
NIST-SP800-53-rev5_cm-3.4 - CM-03(05) Automated Security Response [applied]
NIST-SP800-53-rev5_cm-3.5 - CM-03(06) Cryptography Management [applied]
NIST-SP800-53-rev5_cm-3.6 - CM-03(07) Review System Changes [applied]
NIST-SP800-53-rev5_cm-3.7 - CM-03(08) Prevent or Restrict Configuration Changes [applied]
NIST-SP800-53-rev5_cm-3.8 - CM-04(01) Separate Test Environments [applied]
NIST-SP800-53-rev5_cm-4.1 - CM-04(02) Verification of Controls [applied]
NIST-SP800-53-rev5_cm-4.2 - CM-05(01) Automated Access Enforcement and Audit Records [applied]
NIST-SP800-53-rev5_cm-5.1 - CM-05(04) Dual Authorization [applied]
NIST-SP800-53-rev5_cm-5.4 - CM-05(05) Privilege Limitation for Production and Operation [applied]
NIST-SP800-53-rev5_cm-5.5 - CM-05(06) Limit Library Privileges [applied]
NIST-SP800-53-rev5_cm-5.6 - CM-06(01) Automated Management, Application, and Verification [applied]
NIST-SP800-53-rev5_cm-6.1 - CM-06(02) Respond to Unauthorized Changes [applied]
NIST-SP800-53-rev5_cm-6.2 - CM-07(01) Periodic Review [applied]
NIST-SP800-53-rev5_cm-7.1 - CM-07(02) Prevent Program Execution [applied]
NIST-SP800-53-rev5_cm-7.2 - CM-07(03) Registration Compliance [applied]
NIST-SP800-53-rev5_cm-7.3 - CM-07(04) Unauthorized Software — Deny-by-exception [applied]
NIST-SP800-53-rev5_cm-7.4 - … and 514 more