Changes

Sottokwistjonijiet

Links
Titlu	Deskrizzjoni
New version: NIST SP 800-53 Rev. 5 (v1.5.0-8ebe3c9118) – 714 new, 0 changed, 0 removed	New version: NIST SP 800-53 Rev. 5 (v1.5.0-8ebe3c9118) – 714 new, 0 changed, 0 removed Document: NIST SP 800-53 Rev. 5 (https://raw.githubusercontent.com/usnistgov/oscal-content/v1.5.0/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json) Version: v1.5.0-8ebe3c9118 Project: NIST Import: #615, 20.10.2026 17:06, nist The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes). Taken over directly (additional fields, HTML of an unchanged text): 34 issues. Review: 0 open, 714 applied, 0 rejected. New sections (714) AC-02(01) Automated System Account Management [applied] NIST-SP800-53-rev5_ac-2.1 AC-02(02) Automated Temporary and Emergency Account Management [applied] NIST-SP800-53-rev5_ac-2.2 AC-02(03) Disable Accounts [applied] NIST-SP800-53-rev5_ac-2.3 AC-02(04) Automated Audit Actions [applied] NIST-SP800-53-rev5_ac-2.4 AC-02(05) Inactivity Logout [applied] NIST-SP800-53-rev5_ac-2.5 AC-02(06) Dynamic Privilege Management [applied] NIST-SP800-53-rev5_ac-2.6 AC-02(07) Privileged User Accounts [applied] NIST-SP800-53-rev5_ac-2.7 AC-02(08) Dynamic Account Management [applied] NIST-SP800-53-rev5_ac-2.8 AC-02(09) Restrictions on Use of Shared and Group Accounts [applied] NIST-SP800-53-rev5_ac-2.9 AC-02(11) Usage Conditions [applied] NIST-SP800-53-rev5_ac-2.11 AC-02(12) Account Monitoring for Atypical Usage [applied] NIST-SP800-53-rev5_ac-2.12 AC-02(13) Disable Accounts for High-risk Individuals [applied] NIST-SP800-53-rev5_ac-2.13 AC-03(02) Dual Authorization [applied] NIST-SP800-53-rev5_ac-3.2 AC-03(03) Mandatory Access Control [applied] NIST-SP800-53-rev5_ac-3.3 AC-03(04) Discretionary Access Control [applied] NIST-SP800-53-rev5_ac-3.4 AC-03(05) Security-relevant Information [applied] NIST-SP800-53-rev5_ac-3.5 AC-03(07) Role-based Access Control [applied] NIST-SP800-53-rev5_ac-3.7 AC-03(08) Revocation of Access Authorizations [applied] NIST-SP800-53-rev5_ac-3.8 AC-03(09) Controlled Release [applied] NIST-SP800-53-rev5_ac-3.9 AC-03(10) Audited Override of Access Control Mechanisms [applied] NIST-SP800-53-rev5_ac-3.10 AC-03(11) Restrict Access to Specific Information Types [applied] NIST-SP800-53-rev5_ac-3.11 AC-03(12) Assert and Enforce Application Access [applied] NIST-SP800-53-rev5_ac-3.12 AC-03(13) Attribute-based Access Control [applied] NIST-SP800-53-rev5_ac-3.13 AC-03(14) Individual Access [applied] NIST-SP800-53-rev5_ac-3.14 AC-03(15) Discretionary and Mandatory Access Control [applied] NIST-SP800-53-rev5_ac-3.15 AC-04(01) Object Security and Privacy Attributes [applied] NIST-SP800-53-rev5_ac-4.1 AC-04(02) Processing Domains [applied] NIST-SP800-53-rev5_ac-4.2 AC-04(03) Dynamic Information Flow Control [applied] NIST-SP800-53-rev5_ac-4.3 AC-04(04) Flow Control of Encrypted Information [applied] NIST-SP800-53-rev5_ac-4.4 AC-04(05) Embedded Data Types [applied] NIST-SP800-53-rev5_ac-4.5 AC-04(06) Metadata [applied] NIST-SP800-53-rev5_ac-4.6 AC-04(07) One-way Flow Mechanisms [applied] NIST-SP800-53-rev5_ac-4.7 AC-04(08) Security and Privacy Policy Filters [applied] NIST-SP800-53-rev5_ac-4.8 AC-04(09) Human Reviews [applied] NIST-SP800-53-rev5_ac-4.9 AC-04(10) Enable and Disable Security or Privacy Policy Filters [applied] NIST-SP800-53-rev5_ac-4.10 AC-04(11) Configuration of Security or Privacy Policy Filters [applied] NIST-SP800-53-rev5_ac-4.11 AC-04(12) Data Type Identifiers [applied] NIST-SP800-53-rev5_ac-4.12 AC-04(13) Decomposition into Policy-relevant Subcomponents [applied] NIST-SP800-53-rev5_ac-4.13 AC-04(14) Security or Privacy Policy Filter Constraints [applied] NIST-SP800-53-rev5_ac-4.14 AC-04(15) Detection of Unsanctioned Information [applied] NIST-SP800-53-rev5_ac-4.15 AC-04(17) Domain Authentication [applied] NIST-SP800-53-rev5_ac-4.17 AC-04(19) Validation of Metadata [applied] NIST-SP800-53-rev5_ac-4.19 AC-04(20) Approved Solutions [applied] NIST-SP800-53-rev5_ac-4.20 AC-04(21) Physical or Logical Separation of Information Flows [applied] NIST-SP800-53-rev5_ac-4.21 AC-04(22) Access Only [applied] NIST-SP800-53-rev5_ac-4.22 AC-04(23) Modify Non-releasable Information [applied] NIST-SP800-53-rev5_ac-4.23 AC-04(24) Internal Normalized Format [applied] NIST-SP800-53-rev5_ac-4.24 AC-04(25) Data Sanitization [applied] NIST-SP800-53-rev5_ac-4.25 AC-04(26) Audit Filtering Actions [applied] NIST-SP800-53-rev5_ac-4.26 AC-04(27) Redundant/Independent Filtering Mechanisms [applied] NIST-SP800-53-rev5_ac-4.27 AC-04(28) Linear Filter Pipelines [applied] NIST-SP800-53-rev5_ac-4.28 AC-04(29) Filter Orchestration Engines [applied] NIST-SP800-53-rev5_ac-4.29 AC-04(30) Filter Mechanisms Using Multiple Processes [applied] NIST-SP800-53-rev5_ac-4.30 AC-04(31) Failed Content Transfer Prevention [applied] NIST-SP800-53-rev5_ac-4.31 AC-04(32) Process Requirements for Information Transfer [applied] NIST-SP800-53-rev5_ac-4.32 AC-06(01) Authorize Access to Security Functions [applied] NIST-SP800-53-rev5_ac-6.1 AC-06(02) Non-privileged Access for Nonsecurity Functions [applied] NIST-SP800-53-rev5_ac-6.2 AC-06(03) Network Access to Privileged Commands [applied] NIST-SP800-53-rev5_ac-6.3 AC-06(04) Separate Processing Domains [applied] NIST-SP800-53-rev5_ac-6.4 AC-06(05) Privileged Accounts [applied] NIST-SP800-53-rev5_ac-6.5 AC-06(06) Privileged Access by Non-organizational Users [applied] NIST-SP800-53-rev5_ac-6.6 AC-06(07) Review of User Privileges [applied] NIST-SP800-53-rev5_ac-6.7 AC-06(08) Privilege Levels for Code Execution [applied] NIST-SP800-53-rev5_ac-6.8 AC-06(09) Log Use of Privileged Functions [applied] NIST-SP800-53-rev5_ac-6.9 AC-06(10) Prohibit Non-privileged Users from Executing Privileged Functions [applied] NIST-SP800-53-rev5_ac-6.10 AC-07(02) Purge or Wipe Mobile Device [applied] NIST-SP800-53-rev5_ac-7.2 AC-07(03) Biometric Attempt Limiting [applied] NIST-SP800-53-rev5_ac-7.3 AC-07(04) Use of Alternate Authentication Factor [applied] NIST-SP800-53-rev5_ac-7.4 AC-09(01) Unsuccessful Logons [applied] NIST-SP800-53-rev5_ac-9.1 AC-09(02) Successful and Unsuccessful Logons [applied] NIST-SP800-53-rev5_ac-9.2 AC-09(03) Notification of Account Changes [applied] NIST-SP800-53-rev5_ac-9.3 AC-09(04) Additional Logon Information [applied] NIST-SP800-53-rev5_ac-9.4 AC-11(01) Pattern-hiding Displays [applied] NIST-SP800-53-rev5_ac-11.1 AC-12(01) User-initiated Logouts [applied] NIST-SP800-53-rev5_ac-12.1 AC-12(02) Termination Message [applied] NIST-SP800-53-rev5_ac-12.2 AC-12(03) Timeout Warning Message [applied] NIST-SP800-53-rev5_ac-12.3 AC-16(01) Dynamic Attribute Association [applied] NIST-SP800-53-rev5_ac-16.1 AC-16(02) Attribute Value Changes by Authorized Individuals [applied] NIST-SP800-53-rev5_ac-16.2 AC-16(03) Maintenance of Attribute Associations by System [applied] NIST-SP800-53-rev5_ac-16.3 AC-16(04) Association of Attributes by Authorized Individuals [applied] NIST-SP800-53-rev5_ac-16.4 AC-16(05) Attribute Displays on Objects to Be Output [applied] NIST-SP800-53-rev5_ac-16.5 AC-16(06) Maintenance of Attribute Association [applied] NIST-SP800-53-rev5_ac-16.6 AC-16(07) Consistent Attribute Interpretation [applied] NIST-SP800-53-rev5_ac-16.7 AC-16(08) Association Techniques and Technologies [applied] NIST-SP800-53-rev5_ac-16.8 AC-16(09) Attribute Reassignment — Regrading Mechanisms [applied] NIST-SP800-53-rev5_ac-16.9 AC-16(10) Attribute Configuration by Authorized Individuals [applied] NIST-SP800-53-rev5_ac-16.10 AC-17(01) Monitoring and Control [applied] NIST-SP800-53-rev5_ac-17.1 AC-17(02) Protection of Confidentiality and Integrity Using Encryption [applied] NIST-SP800-53-rev5_ac-17.2 AC-17(03) Managed Access Control Points [applied] NIST-SP800-53-rev5_ac-17.3 AC-17(04) Privileged Commands and Access [applied] NIST-SP800-53-rev5_ac-17.4 AC-17(06) Protection of Mechanism Information [applied] NIST-SP800-53-rev5_ac-17.6 AC-17(09) Disconnect or Disable Access [applied] NIST-SP800-53-rev5_ac-17.9 AC-17(10) Authenticate Remote Commands [applied] NIST-SP800-53-rev5_ac-17.10 AC-18(01) Authentication and Encryption [applied] NIST-SP800-53-rev5_ac-18.1 AC-18(03) Disable Wireless Networking [applied] NIST-SP800-53-rev5_ac-18.3 AC-18(04) Restrict Configurations by Users [applied] NIST-SP800-53-rev5_ac-18.4 AC-18(05) Antennas and Transmission Power Levels [applied] NIST-SP800-53-rev5_ac-18.5 AC-19(04) Restrictions for Classified Information [applied] NIST-SP800-53-rev5_ac-19.4 AC-19(05) Full Device or Container-based Encryption [applied] NIST-SP800-53-rev5_ac-19.5 AC-20(01) Limits on Authorized Use [applied] NIST-SP800-53-rev5_ac-20.1 AC-20(02) Portable Storage Devices — Restricted Use [applied] NIST-SP800-53-rev5_ac-20.2 AC-20(03) Non-organizationally Owned Systems — Restricted Use [applied] NIST-SP800-53-rev5_ac-20.3 AC-20(04) Network Accessible Storage Devices — Prohibited Use [applied] NIST-SP800-53-rev5_ac-20.4 AC-20(05) Portable Storage Devices — Prohibited Use [applied] NIST-SP800-53-rev5_ac-20.5 AC-21(01) Automated Decision Support [applied] NIST-SP800-53-rev5_ac-21.1 AC-21(02) Information Search and Retrieval [applied] NIST-SP800-53-rev5_ac-21.2 AC-24(01) Transmit Access Authorization Information [applied] NIST-SP800-53-rev5_ac-24.1 AC-24(02) No User or Process Identity [applied] NIST-SP800-53-rev5_ac-24.2 AT-02(01) Practical Exercises [applied] NIST-SP800-53-rev5_at-2.1 AT-02(02) Insider Threat [applied] NIST-SP800-53-rev5_at-2.2 AT-02(03) Social Engineering and Mining [applied] NIST-SP800-53-rev5_at-2.3 AT-02(04) Suspicious Communications and Anomalous System Behavior [applied] NIST-SP800-53-rev5_at-2.4 AT-02(05) Advanced Persistent Threat [applied] NIST-SP800-53-rev5_at-2.5 AT-02(06) Cyber Threat Environment [applied] NIST-SP800-53-rev5_at-2.6 AT-03(01) Environmental Controls [applied] NIST-SP800-53-rev5_at-3.1 AT-03(02) Physical Security Controls [applied] NIST-SP800-53-rev5_at-3.2 AT-03(03) Practical Exercises [applied] NIST-SP800-53-rev5_at-3.3 AT-03(05) Processing Personally Identifiable Information [applied] NIST-SP800-53-rev5_at-3.5 AU-03(01) Additional Audit Information [applied] NIST-SP800-53-rev5_au-3.1 AU-03(03) Limit Personally Identifiable Information Elements [applied] NIST-SP800-53-rev5_au-3.3 AU-04(01) Transfer to Alternate Storage [applied] NIST-SP800-53-rev5_au-4.1 AU-05(01) Storage Capacity Warning [applied] NIST-SP800-53-rev5_au-5.1 AU-05(02) Real-time Alerts [applied] NIST-SP800-53-rev5_au-5.2 AU-05(03) Configurable Traffic Volume Thresholds [applied] NIST-SP800-53-rev5_au-5.3 AU-05(04) Shutdown on Failure [applied] NIST-SP800-53-rev5_au-5.4 AU-05(05) Alternate Audit Logging Capability [applied] NIST-SP800-53-rev5_au-5.5 AU-06(01) Automated Process Integration [applied] NIST-SP800-53-rev5_au-6.1 AU-06(03) Correlate Audit Record Repositories [applied] NIST-SP800-53-rev5_au-6.3 AU-06(04) Central Review and Analysis [applied] NIST-SP800-53-rev5_au-6.4 AU-06(05) Integrated Analysis of Audit Records [applied] NIST-SP800-53-rev5_au-6.5 AU-06(06) Correlation with Physical Monitoring [applied] NIST-SP800-53-rev5_au-6.6 AU-06(07) Permitted Actions [applied] NIST-SP800-53-rev5_au-6.7 AU-06(08) Full Text Analysis of Privileged Commands [applied] NIST-SP800-53-rev5_au-6.8 AU-06(09) Correlation with Information from Nontechnical Sources [applied] NIST-SP800-53-rev5_au-6.9 AU-07(01) Automatic Processing [applied] NIST-SP800-53-rev5_au-7.1 AU-09(01) Hardware Write-once Media [applied] NIST-SP800-53-rev5_au-9.1 AU-09(02) Store on Separate Physical Systems or Components [applied] NIST-SP800-53-rev5_au-9.2 AU-09(03) Cryptographic Protection [applied] NIST-SP800-53-rev5_au-9.3 AU-09(04) Access by Subset of Privileged Users [applied] NIST-SP800-53-rev5_au-9.4 AU-09(05) Dual Authorization [applied] NIST-SP800-53-rev5_au-9.5 AU-09(06) Read-only Access [applied] NIST-SP800-53-rev5_au-9.6 AU-09(07) Store on Component with Different Operating System [applied] NIST-SP800-53-rev5_au-9.7 AU-10(01) Association of Identities [applied] NIST-SP800-53-rev5_au-10.1 AU-10(02) Validate Binding of Information Producer Identity [applied] NIST-SP800-53-rev5_au-10.2 AU-10(03) Chain of Custody [applied] NIST-SP800-53-rev5_au-10.3 AU-10(04) Validate Binding of Information Reviewer Identity [applied] NIST-SP800-53-rev5_au-10.4 AU-11(01) Long-term Retrieval Capability [applied] NIST-SP800-53-rev5_au-11.1 AU-12(01) System-wide and Time-correlated Audit Trail [applied] NIST-SP800-53-rev5_au-12.1 AU-12(02) Standardized Formats [applied] NIST-SP800-53-rev5_au-12.2 AU-12(03) Changes by Authorized Individuals [applied] NIST-SP800-53-rev5_au-12.3 AU-12(04) Query Parameter Audits of Personally Identifiable Information [applied] NIST-SP800-53-rev5_au-12.4 AU-13(01) Use of Automated Tools [applied] NIST-SP800-53-rev5_au-13.1 AU-13(02) Review of Monitored Sites [applied] NIST-SP800-53-rev5_au-13.2 AU-13(03) Unauthorized Replication of Information [applied] NIST-SP800-53-rev5_au-13.3 AU-14(01) System Start-up [applied] NIST-SP800-53-rev5_au-14.1 AU-14(03) Remote Viewing and Listening [applied] NIST-SP800-53-rev5_au-14.3 AU-16(01) Identity Preservation [applied] NIST-SP800-53-rev5_au-16.1 AU-16(02) Sharing of Audit Information [applied] NIST-SP800-53-rev5_au-16.2 AU-16(03) Disassociability [applied] NIST-SP800-53-rev5_au-16.3 CA-02(01) Independent Assessors [applied] NIST-SP800-53-rev5_ca-2.1 CA-02(02) Specialized Assessments [applied] NIST-SP800-53-rev5_ca-2.2 CA-02(03) Leveraging Results from External Organizations [applied] NIST-SP800-53-rev5_ca-2.3 CA-03(06) Transfer Authorizations [applied] NIST-SP800-53-rev5_ca-3.6 CA-03(07) Transitive Information Exchanges [applied] NIST-SP800-53-rev5_ca-3.7 CA-05(01) Automation Support for Accuracy and Currency [applied] NIST-SP800-53-rev5_ca-5.1 CA-06(01) Joint Authorization — Intra-organization [applied] NIST-SP800-53-rev5_ca-6.1 CA-06(02) Joint Authorization — Inter-organization [applied] NIST-SP800-53-rev5_ca-6.2 CA-07(01) Independent Assessment [applied] NIST-SP800-53-rev5_ca-7.1 CA-07(03) Trend Analyses [applied] NIST-SP800-53-rev5_ca-7.3 CA-07(04) Risk Monitoring [applied] NIST-SP800-53-rev5_ca-7.4 CA-07(05) Consistency Analysis [applied] NIST-SP800-53-rev5_ca-7.5 CA-07(06) Automation Support for Monitoring [applied] NIST-SP800-53-rev5_ca-7.6 CA-08(01) Independent Penetration Testing Agent or Team [applied] NIST-SP800-53-rev5_ca-8.1 CA-08(02) Red Team Exercises [applied] NIST-SP800-53-rev5_ca-8.2 CA-08(03) Facility Penetration Testing [applied] NIST-SP800-53-rev5_ca-8.3 CA-09(01) Compliance Checks [applied] NIST-SP800-53-rev5_ca-9.1 CM-02(02) Automation Support for Accuracy and Currency [applied] NIST-SP800-53-rev5_cm-2.2 CM-02(03) Retention of Previous Configurations [applied] NIST-SP800-53-rev5_cm-2.3 CM-02(06) Development and Test Environments [applied] NIST-SP800-53-rev5_cm-2.6 CM-02(07) Configure Systems and Components for High-risk Areas [applied] NIST-SP800-53-rev5_cm-2.7 CM-03(01) Automated Documentation, Notification, and Prohibition of Changes [applied] NIST-SP800-53-rev5_cm-3.1 CM-03(02) Testing, Validation, and Documentation of Changes [applied] NIST-SP800-53-rev5_cm-3.2 CM-03(03) Automated Change Implementation [applied] NIST-SP800-53-rev5_cm-3.3 CM-03(04) Security and Privacy Representatives [applied] NIST-SP800-53-rev5_cm-3.4 CM-03(05) Automated Security Response [applied] NIST-SP800-53-rev5_cm-3.5 CM-03(06) Cryptography Management [applied] NIST-SP800-53-rev5_cm-3.6 CM-03(07) Review System Changes [applied] NIST-SP800-53-rev5_cm-3.7 CM-03(08) Prevent or Restrict Configuration Changes [applied] NIST-SP800-53-rev5_cm-3.8 CM-04(01) Separate Test Environments [applied] NIST-SP800-53-rev5_cm-4.1 CM-04(02) Verification of Controls [applied] NIST-SP800-53-rev5_cm-4.2 CM-05(01) Automated Access Enforcement and Audit Records [applied] NIST-SP800-53-rev5_cm-5.1 CM-05(04) Dual Authorization [applied] NIST-SP800-53-rev5_cm-5.4 CM-05(05) Privilege Limitation for Production and Operation [applied] NIST-SP800-53-rev5_cm-5.5 CM-05(06) Limit Library Privileges [applied] NIST-SP800-53-rev5_cm-5.6 CM-06(01) Automated Management, Application, and Verification [applied] NIST-SP800-53-rev5_cm-6.1 CM-06(02) Respond to Unauthorized Changes [applied] NIST-SP800-53-rev5_cm-6.2 CM-07(01) Periodic Review [applied] NIST-SP800-53-rev5_cm-7.1 CM-07(02) Prevent Program Execution [applied] NIST-SP800-53-rev5_cm-7.2 CM-07(03) Registration Compliance [applied] NIST-SP800-53-rev5_cm-7.3 CM-07(04) Unauthorized Software — Deny-by-exception [applied] NIST-SP800-53-rev5_cm-7.4 … and 514 more
New version: NIST SP 800-53 Rev. 5 HIGH Baseline (v1.5.0-4fbdb82960) – 182 new, 0 changed, 0 removed	New version: NIST SP 800-53 Rev. 5 HIGH Baseline (v1.5.0-4fbdb82960) – 182 new, 0 changed, 0 removed Document: NIST SP 800-53 Rev. 5 HIGH Baseline (https://raw.githubusercontent.com/usnistgov/oscal-content/v1.5.0/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_HIGH-baseline-resolved-profile_catalog.json) Version: v1.5.0-4fbdb82960 Project: NIST Import: #616, 20.10.2026 17:06, nist The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes). Taken over directly (additional fields, HTML of an unchanged text): 14 issues. Review: 0 open, 182 applied, 0 rejected. New sections (182) AC-02(01) [H] Automated System Account Management [applied] NIST-SP800-53H-rev5_ac-2.1H AC-02(02) [H] Automated Temporary and Emergency Account Management [applied] NIST-SP800-53H-rev5_ac-2.2H AC-02(03) [H] Disable Accounts [applied] NIST-SP800-53H-rev5_ac-2.3H AC-02(04) [H] Automated Audit Actions [applied] NIST-SP800-53H-rev5_ac-2.4H AC-02(05) [H] Inactivity Logout [applied] NIST-SP800-53H-rev5_ac-2.5H AC-02(11) [H] Usage Conditions [applied] NIST-SP800-53H-rev5_ac-2.11H AC-02(12) [H] Account Monitoring for Atypical Usage [applied] NIST-SP800-53H-rev5_ac-2.12H AC-02(13) [H] Disable Accounts for High-risk Individuals [applied] NIST-SP800-53H-rev5_ac-2.13H AC-04(04) [H] Flow Control of Encrypted Information [applied] NIST-SP800-53H-rev5_ac-4.4H AC-06(01) [H] Authorize Access to Security Functions [applied] NIST-SP800-53H-rev5_ac-6.1H AC-06(02) [H] Non-privileged Access for Nonsecurity Functions [applied] NIST-SP800-53H-rev5_ac-6.2H AC-06(03) [H] Network Access to Privileged Commands [applied] NIST-SP800-53H-rev5_ac-6.3H AC-06(05) [H] Privileged Accounts [applied] NIST-SP800-53H-rev5_ac-6.5H AC-06(07) [H] Review of User Privileges [applied] NIST-SP800-53H-rev5_ac-6.7H AC-06(09) [H] Log Use of Privileged Functions [applied] NIST-SP800-53H-rev5_ac-6.9H AC-06(10) [H] Prohibit Non-privileged Users from Executing Privileged Functions [applied] NIST-SP800-53H-rev5_ac-6.10H AC-11(01) [H] Pattern-hiding Displays [applied] NIST-SP800-53H-rev5_ac-11.1H AC-17(01) [H] Monitoring and Control [applied] NIST-SP800-53H-rev5_ac-17.1H AC-17(02) [H] Protection of Confidentiality and Integrity Using Encryption [applied] NIST-SP800-53H-rev5_ac-17.2H AC-17(03) [H] Managed Access Control Points [applied] NIST-SP800-53H-rev5_ac-17.3H AC-17(04) [H] Privileged Commands and Access [applied] NIST-SP800-53H-rev5_ac-17.4H AC-18(01) [H] Authentication and Encryption [applied] NIST-SP800-53H-rev5_ac-18.1H AC-18(03) [H] Disable Wireless Networking [applied] NIST-SP800-53H-rev5_ac-18.3H AC-18(04) [H] Restrict Configurations by Users [applied] NIST-SP800-53H-rev5_ac-18.4H AC-18(05) [H] Antennas and Transmission Power Levels [applied] NIST-SP800-53H-rev5_ac-18.5H AC-19(05) [H] Full Device or Container-based Encryption [applied] NIST-SP800-53H-rev5_ac-19.5H AC-20(01) [H] Limits on Authorized Use [applied] NIST-SP800-53H-rev5_ac-20.1H AC-20(02) [H] Portable Storage Devices — Restricted Use [applied] NIST-SP800-53H-rev5_ac-20.2H AT-02(02) [H] Insider Threat [applied] NIST-SP800-53H-rev5_at-2.2H AT-02(03) [H] Social Engineering and Mining [applied] NIST-SP800-53H-rev5_at-2.3H AU-03(01) [H] Additional Audit Information [applied] NIST-SP800-53H-rev5_au-3.1H AU-05(01) [H] Storage Capacity Warning [applied] NIST-SP800-53H-rev5_au-5.1H AU-05(02) [H] Real-time Alerts [applied] NIST-SP800-53H-rev5_au-5.2H AU-06(01) [H] Automated Process Integration [applied] NIST-SP800-53H-rev5_au-6.1H AU-06(03) [H] Correlate Audit Record Repositories [applied] NIST-SP800-53H-rev5_au-6.3H AU-06(05) [H] Integrated Analysis of Audit Records [applied] NIST-SP800-53H-rev5_au-6.5H AU-06(06) [H] Correlation with Physical Monitoring [applied] NIST-SP800-53H-rev5_au-6.6H AU-07(01) [H] Automatic Processing [applied] NIST-SP800-53H-rev5_au-7.1H AU-09(02) [H] Store on Separate Physical Systems or Components [applied] NIST-SP800-53H-rev5_au-9.2H AU-09(03) [H] Cryptographic Protection [applied] NIST-SP800-53H-rev5_au-9.3H AU-09(04) [H] Access by Subset of Privileged Users [applied] NIST-SP800-53H-rev5_au-9.4H AU-12(01) [H] System-wide and Time-correlated Audit Trail [applied] NIST-SP800-53H-rev5_au-12.1H AU-12(03) [H] Changes by Authorized Individuals [applied] NIST-SP800-53H-rev5_au-12.3H CA-02(01) [H] Independent Assessors [applied] NIST-SP800-53H-rev5_ca-2.1H CA-02(02) [H] Specialized Assessments [applied] NIST-SP800-53H-rev5_ca-2.2H CA-03(06) [H] Transfer Authorizations [applied] NIST-SP800-53H-rev5_ca-3.6H CA-07(01) [H] Independent Assessment [applied] NIST-SP800-53H-rev5_ca-7.1H CA-07(04) [H] Risk Monitoring [applied] NIST-SP800-53H-rev5_ca-7.4H CA-08(01) [H] Independent Penetration Testing Agent or Team [applied] NIST-SP800-53H-rev5_ca-8.1H CM-02(02) [H] Automation Support for Accuracy and Currency [applied] NIST-SP800-53H-rev5_cm-2.2H CM-02(03) [H] Retention of Previous Configurations [applied] NIST-SP800-53H-rev5_cm-2.3H CM-02(07) [H] Configure Systems and Components for High-risk Areas [applied] NIST-SP800-53H-rev5_cm-2.7H CM-03(01) [H] Automated Documentation, Notification, and Prohibition of Changes [applied] NIST-SP800-53H-rev5_cm-3.1H CM-03(02) [H] Testing, Validation, and Documentation of Changes [applied] NIST-SP800-53H-rev5_cm-3.2H CM-03(04) [H] Security and Privacy Representatives [applied] NIST-SP800-53H-rev5_cm-3.4H CM-03(06) [H] Cryptography Management [applied] NIST-SP800-53H-rev5_cm-3.6H CM-04(01) [H] Separate Test Environments [applied] NIST-SP800-53H-rev5_cm-4.1H CM-04(02) [H] Verification of Controls [applied] NIST-SP800-53H-rev5_cm-4.2H CM-05(01) [H] Automated Access Enforcement and Audit Records [applied] NIST-SP800-53H-rev5_cm-5.1H CM-06(01) [H] Automated Management, Application, and Verification [applied] NIST-SP800-53H-rev5_cm-6.1H CM-06(02) [H] Respond to Unauthorized Changes [applied] NIST-SP800-53H-rev5_cm-6.2H CM-07(01) [H] Periodic Review [applied] NIST-SP800-53H-rev5_cm-7.1H CM-07(02) [H] Prevent Program Execution [applied] NIST-SP800-53H-rev5_cm-7.2H CM-07(05) [H] Authorized Software — Allow-by-exception [applied] NIST-SP800-53H-rev5_cm-7.5H CM-08(01) [H] Updates During Installation and Removal [applied] NIST-SP800-53H-rev5_cm-8.1H CM-08(02) [H] Automated Maintenance [applied] NIST-SP800-53H-rev5_cm-8.2H CM-08(03) [H] Automated Unauthorized Component Detection [applied] NIST-SP800-53H-rev5_cm-8.3H CM-08(04) [H] Accountability Information [applied] NIST-SP800-53H-rev5_cm-8.4H CM-12(01) [H] Automated Tools to Support Information Location [applied] NIST-SP800-53H-rev5_cm-12.1H CP-02(01) [H] Coordinate with Related Plans [applied] NIST-SP800-53H-rev5_cp-2.1H CP-02(02) [H] Capacity Planning [applied] NIST-SP800-53H-rev5_cp-2.2H CP-02(03) [H] Resume Mission and Business Functions [applied] NIST-SP800-53H-rev5_cp-2.3H CP-02(05) [H] Continue Mission and Business Functions [applied] NIST-SP800-53H-rev5_cp-2.5H CP-02(08) [H] Identify Critical Assets [applied] NIST-SP800-53H-rev5_cp-2.8H CP-03(01) [H] Simulated Events [applied] NIST-SP800-53H-rev5_cp-3.1H CP-04(01) [H] Coordinate with Related Plans [applied] NIST-SP800-53H-rev5_cp-4.1H CP-04(02) [H] Alternate Processing Site [applied] NIST-SP800-53H-rev5_cp-4.2H CP-06(01) [H] Separation from Primary Site [applied] NIST-SP800-53H-rev5_cp-6.1H CP-06(02) [H] Recovery Time and Recovery Point Objectives [applied] NIST-SP800-53H-rev5_cp-6.2H CP-06(03) [H] Accessibility [applied] NIST-SP800-53H-rev5_cp-6.3H CP-07(01) [H] Separation from Primary Site [applied] NIST-SP800-53H-rev5_cp-7.1H CP-07(02) [H] Accessibility [applied] NIST-SP800-53H-rev5_cp-7.2H CP-07(03) [H] Priority of Service [applied] NIST-SP800-53H-rev5_cp-7.3H CP-07(04) [H] Preparation for Use [applied] NIST-SP800-53H-rev5_cp-7.4H CP-08(01) [H] Priority of Service Provisions [applied] NIST-SP800-53H-rev5_cp-8.1H CP-08(02) [H] Single Points of Failure [applied] NIST-SP800-53H-rev5_cp-8.2H CP-08(03) [H] Separation of Primary and Alternate Providers [applied] NIST-SP800-53H-rev5_cp-8.3H CP-08(04) [H] Provider Contingency Plan [applied] NIST-SP800-53H-rev5_cp-8.4H CP-09(01) [H] Testing for Reliability and Integrity [applied] NIST-SP800-53H-rev5_cp-9.1H CP-09(02) [H] Test Restoration Using Sampling [applied] NIST-SP800-53H-rev5_cp-9.2H CP-09(03) [H] Separate Storage for Critical Information [applied] NIST-SP800-53H-rev5_cp-9.3H CP-09(05) [H] Transfer to Alternate Storage Site [applied] NIST-SP800-53H-rev5_cp-9.5H CP-09(08) [H] Cryptographic Protection [applied] NIST-SP800-53H-rev5_cp-9.8H CP-10(02) [H] Transaction Recovery [applied] NIST-SP800-53H-rev5_cp-10.2H CP-10(04) [H] Restore Within Time Period [applied] NIST-SP800-53H-rev5_cp-10.4H IA-02(01) [H] Multi-factor Authentication to Privileged Accounts [applied] NIST-SP800-53H-rev5_ia-2.1H IA-02(02) [H] Multi-factor Authentication to Non-privileged Accounts [applied] NIST-SP800-53H-rev5_ia-2.2H IA-02(05) [H] Individual Authentication with Group Authentication [applied] NIST-SP800-53H-rev5_ia-2.5H IA-02(08) [H] Access to Accounts — Replay Resistant [applied] NIST-SP800-53H-rev5_ia-2.8H IA-02(12) [H] Acceptance of PIV Credentials [applied] NIST-SP800-53H-rev5_ia-2.12H IA-04(04) [H] Identify User Status [applied] NIST-SP800-53H-rev5_ia-4.4H IA-05(01) [H] Password-based Authentication [applied] NIST-SP800-53H-rev5_ia-5.1H IA-05(02) [H] Public Key-based Authentication [applied] NIST-SP800-53H-rev5_ia-5.2H IA-05(06) [H] Protection of Authenticators [applied] NIST-SP800-53H-rev5_ia-5.6H IA-08(01) [H] Acceptance of PIV Credentials from Other Agencies [applied] NIST-SP800-53H-rev5_ia-8.1H IA-08(02) [H] Acceptance of External Authenticators [applied] NIST-SP800-53H-rev5_ia-8.2H IA-08(04) [H] Use of Defined Profiles [applied] NIST-SP800-53H-rev5_ia-8.4H IA-12(02) [H] Identity Evidence [applied] NIST-SP800-53H-rev5_ia-12.2H IA-12(03) [H] Identity Evidence Validation and Verification [applied] NIST-SP800-53H-rev5_ia-12.3H IA-12(04) [H] In-person Validation and Verification [applied] NIST-SP800-53H-rev5_ia-12.4H IA-12(05) [H] Address Confirmation [applied] NIST-SP800-53H-rev5_ia-12.5H IR-02(01) [H] Simulated Events [applied] NIST-SP800-53H-rev5_ir-2.1H IR-02(02) [H] Automated Training Environments [applied] NIST-SP800-53H-rev5_ir-2.2H IR-03(02) [H] Coordination with Related Plans [applied] NIST-SP800-53H-rev5_ir-3.2H IR-04(01) [H] Automated Incident Handling Processes [applied] NIST-SP800-53H-rev5_ir-4.1H IR-04(04) [H] Information Correlation [applied] NIST-SP800-53H-rev5_ir-4.4H IR-04(11) [H] Integrated Incident Response Team [applied] NIST-SP800-53H-rev5_ir-4.11H IR-05(01) [H] Automated Tracking, Data Collection, and Analysis [applied] NIST-SP800-53H-rev5_ir-5.1H IR-06(01) [H] Automated Reporting [applied] NIST-SP800-53H-rev5_ir-6.1H IR-06(03) [H] Supply Chain Coordination [applied] NIST-SP800-53H-rev5_ir-6.3H IR-07(01) [H] Automation Support for Availability of Information and Support [applied] NIST-SP800-53H-rev5_ir-7.1H MA-02(02) [H] Automated Maintenance Activities [applied] NIST-SP800-53H-rev5_ma-2.2H MA-03(01) [H] Inspect Tools [applied] NIST-SP800-53H-rev5_ma-3.1H MA-03(02) [H] Inspect Media [applied] NIST-SP800-53H-rev5_ma-3.2H MA-03(03) [H] Prevent Unauthorized Removal [applied] NIST-SP800-53H-rev5_ma-3.3H MA-04(03) [H] Comparable Security and Sanitization [applied] NIST-SP800-53H-rev5_ma-4.3H MA-05(01) [H] Individuals Without Appropriate Access [applied] NIST-SP800-53H-rev5_ma-5.1H MP-06(01) [H] Review, Approve, Track, Document, and Verify [applied] NIST-SP800-53H-rev5_mp-6.1H MP-06(02) [H] Equipment Testing [applied] NIST-SP800-53H-rev5_mp-6.2H MP-06(03) [H] Nondestructive Techniques [applied] NIST-SP800-53H-rev5_mp-6.3H PE-03(01) [H] System Access [applied] NIST-SP800-53H-rev5_pe-3.1H PE-06(01) [H] Intrusion Alarms and Surveillance Equipment [applied] NIST-SP800-53H-rev5_pe-6.1H PE-06(04) [H] Monitoring Physical Access to Systems [applied] NIST-SP800-53H-rev5_pe-6.4H PE-08(01) [H] Automated Records Maintenance and Review [applied] NIST-SP800-53H-rev5_pe-8.1H PE-11(01) [H] Alternate Power Supply — Minimal Operational Capability [applied] NIST-SP800-53H-rev5_pe-11.1H PE-13(01) [H] Detection Systems — Automatic Activation and Notification [applied] NIST-SP800-53H-rev5_pe-13.1H PE-13(02) [H] Suppression Systems — Automatic Activation and Notification [applied] NIST-SP800-53H-rev5_pe-13.2H PE-15(01) [H] Automation Support [applied] NIST-SP800-53H-rev5_pe-15.1H PL-04(01) [H] Social Media and External Site/Application Usage Restrictions [applied] NIST-SP800-53H-rev5_pl-4.1H PS-04(02) [H] Automated Actions [applied] NIST-SP800-53H-rev5_ps-4.2H RA-03(01) [H] Supply Chain Risk Assessment [applied] NIST-SP800-53H-rev5_ra-3.1H RA-05(02) [H] Update Vulnerabilities to Be Scanned [applied] NIST-SP800-53H-rev5_ra-5.2H RA-05(04) [H] Discoverable Information [applied] NIST-SP800-53H-rev5_ra-5.4H RA-05(05) [H] Privileged Access [applied] NIST-SP800-53H-rev5_ra-5.5H RA-05(11) [H] Public Disclosure Program [applied] NIST-SP800-53H-rev5_ra-5.11H SA-04(01) [H] Functional Properties of Controls [applied] NIST-SP800-53H-rev5_sa-4.1H SA-04(02) [H] Design and Implementation Information for Controls [applied] NIST-SP800-53H-rev5_sa-4.2H SA-04(05) [H] System, Component, and Service Configurations [applied] NIST-SP800-53H-rev5_sa-4.5H SA-04(09) [H] Functions, Ports, Protocols, and Services in Use [applied] NIST-SP800-53H-rev5_sa-4.9H SA-04(10) [H] Use of Approved PIV Products [applied] NIST-SP800-53H-rev5_sa-4.10H SA-09(02) [H] Identification of Functions, Ports, Protocols, and Services [applied] NIST-SP800-53H-rev5_sa-9.2H SA-15(03) [H] Criticality Analysis [applied] NIST-SP800-53H-rev5_sa-15.3H SC-07(03) [H] Access Points [applied] NIST-SP800-53H-rev5_sc-7.3H SC-07(04) [H] External Telecommunications Services [applied] NIST-SP800-53H-rev5_sc-7.4H SC-07(05) [H] Deny by Default — Allow by Exception [applied] NIST-SP800-53H-rev5_sc-7.5H SC-07(07) [H] Split Tunneling for Remote Devices [applied] NIST-SP800-53H-rev5_sc-7.7H SC-07(08) [H] Route Traffic to Authenticated Proxy Servers [applied] NIST-SP800-53H-rev5_sc-7.8H SC-07(18) [H] Fail Secure [applied] NIST-SP800-53H-rev5_sc-7.18H SC-07(21) [H] Isolation of System Components [applied] NIST-SP800-53H-rev5_sc-7.21H SC-08(01) [H] Cryptographic Protection [applied] NIST-SP800-53H-rev5_sc-8.1H SC-12(01) [H] Availability [applied] NIST-SP800-53H-rev5_sc-12.1H SC-28(01) [H] Cryptographic Protection [applied] NIST-SP800-53H-rev5_sc-28.1H SI-02(02) [H] Automated Flaw Remediation Status [applied] NIST-SP800-53H-rev5_si-2.2H SI-04(02) [H] Automated Tools and Mechanisms for Real-time Analysis [applied] NIST-SP800-53H-rev5_si-4.2H SI-04(04) [H] Inbound and Outbound Communications Traffic [applied] NIST-SP800-53H-rev5_si-4.4H SI-04(05) [H] System-generated Alerts [applied] NIST-SP800-53H-rev5_si-4.5H SI-04(10) [H] Visibility of Encrypted Communications [applied] NIST-SP800-53H-rev5_si-4.10H SI-04(12) [H] Automated Organization-generated Alerts [applied] NIST-SP800-53H-rev5_si-4.12H SI-04(14) [H] Wireless Intrusion Detection [applied] NIST-SP800-53H-rev5_si-4.14H SI-04(20) [H] Privileged Users [applied] NIST-SP800-53H-rev5_si-4.20H SI-04(22) [H] Unauthorized Network Services [applied] NIST-SP800-53H-rev5_si-4.22H SI-05(01) [H] Automated Alerts and Advisories [applied] NIST-SP800-53H-rev5_si-5.1H SI-07(01) [H] Integrity Checks [applied] NIST-SP800-53H-rev5_si-7.1H SI-07(02) [H] Automated Notifications of Integrity Violations [applied] NIST-SP800-53H-rev5_si-7.2H SI-07(05) [H] Automated Response to Integrity Violations [applied] NIST-SP800-53H-rev5_si-7.5H SI-07(07) [H] Integration of Detection and Response [applied] NIST-SP800-53H-rev5_si-7.7H SI-07(15) [H] Code Authentication [applied] NIST-SP800-53H-rev5_si-7.15H SI-08(02) [H] Automatic Updates [applied] NIST-SP800-53H-rev5_si-8.2H SR-02(01) [H] Establish SCRM Team [applied] NIST-SP800-53H-rev5_sr-2.1H SR-09(01) [H] Multiple Stages of System Development Life Cycle [applied] NIST-SP800-53H-rev5_sr-9.1H SR-11(01) [H] Anti-counterfeit Training [applied] NIST-SP800-53H-rev5_sr-11.1H SR-11(02) [H] Configuration Control for Component Service and Repair [applied] NIST-SP800-53H-rev5_sr-11.2H
New version: NIST SP 800-53 Rev. 5 MODERATE Baseline (v1.5.0-7b754e4c16) – 110 new, 0 changed, 0 removed	New version: NIST SP 800-53 Rev. 5 MODERATE Baseline (v1.5.0-7b754e4c16) – 110 new, 0 changed, 0 removed Document: NIST SP 800-53 Rev. 5 MODERATE Baseline (https://raw.githubusercontent.com/usnistgov/oscal-content/v1.5.0/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_MODERATE-baseline-resolved-profile_catalog.json) Version: v1.5.0-7b754e4c16 Project: NIST Import: #617, 20.10.2026 17:06, nist The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes). Taken over directly (additional fields, HTML of an unchanged text): 14 issues. Review: 0 open, 110 applied, 0 rejected. New sections (110) AC-02(01) [M] Automated System Account Management [applied] NIST-SP800-53M-rev5_ac-2.1M AC-02(02) [M] Automated Temporary and Emergency Account Management [applied] NIST-SP800-53M-rev5_ac-2.2M AC-02(03) [M] Disable Accounts [applied] NIST-SP800-53M-rev5_ac-2.3M AC-02(04) [M] Automated Audit Actions [applied] NIST-SP800-53M-rev5_ac-2.4M AC-02(05) [M] Inactivity Logout [applied] NIST-SP800-53M-rev5_ac-2.5M AC-02(13) [M] Disable Accounts for High-risk Individuals [applied] NIST-SP800-53M-rev5_ac-2.13M AC-06(01) [M] Authorize Access to Security Functions [applied] NIST-SP800-53M-rev5_ac-6.1M AC-06(02) [M] Non-privileged Access for Nonsecurity Functions [applied] NIST-SP800-53M-rev5_ac-6.2M AC-06(05) [M] Privileged Accounts [applied] NIST-SP800-53M-rev5_ac-6.5M AC-06(07) [M] Review of User Privileges [applied] NIST-SP800-53M-rev5_ac-6.7M AC-06(09) [M] Log Use of Privileged Functions [applied] NIST-SP800-53M-rev5_ac-6.9M AC-06(10) [M] Prohibit Non-privileged Users from Executing Privileged Functions [applied] NIST-SP800-53M-rev5_ac-6.10M AC-11(01) [M] Pattern-hiding Displays [applied] NIST-SP800-53M-rev5_ac-11.1M AC-17(01) [M] Monitoring and Control [applied] NIST-SP800-53M-rev5_ac-17.1M AC-17(02) [M] Protection of Confidentiality and Integrity Using Encryption [applied] NIST-SP800-53M-rev5_ac-17.2M AC-17(03) [M] Managed Access Control Points [applied] NIST-SP800-53M-rev5_ac-17.3M AC-17(04) [M] Privileged Commands and Access [applied] NIST-SP800-53M-rev5_ac-17.4M AC-18(01) [M] Authentication and Encryption [applied] NIST-SP800-53M-rev5_ac-18.1M AC-18(03) [M] Disable Wireless Networking [applied] NIST-SP800-53M-rev5_ac-18.3M AC-19(05) [M] Full Device or Container-based Encryption [applied] NIST-SP800-53M-rev5_ac-19.5M AC-20(01) [M] Limits on Authorized Use [applied] NIST-SP800-53M-rev5_ac-20.1M AC-20(02) [M] Portable Storage Devices — Restricted Use [applied] NIST-SP800-53M-rev5_ac-20.2M AT-02(02) [M] Insider Threat [applied] NIST-SP800-53M-rev5_at-2.2M AT-02(03) [M] Social Engineering and Mining [applied] NIST-SP800-53M-rev5_at-2.3M AU-03(01) [M] Additional Audit Information [applied] NIST-SP800-53M-rev5_au-3.1M AU-06(01) [M] Automated Process Integration [applied] NIST-SP800-53M-rev5_au-6.1M AU-06(03) [M] Correlate Audit Record Repositories [applied] NIST-SP800-53M-rev5_au-6.3M AU-07(01) [M] Automatic Processing [applied] NIST-SP800-53M-rev5_au-7.1M AU-09(04) [M] Access by Subset of Privileged Users [applied] NIST-SP800-53M-rev5_au-9.4M CA-02(01) [M] Independent Assessors [applied] NIST-SP800-53M-rev5_ca-2.1M CA-07(01) [M] Independent Assessment [applied] NIST-SP800-53M-rev5_ca-7.1M CA-07(04) [M] Risk Monitoring [applied] NIST-SP800-53M-rev5_ca-7.4M CM-02(02) [M] Automation Support for Accuracy and Currency [applied] NIST-SP800-53M-rev5_cm-2.2M CM-02(03) [M] Retention of Previous Configurations [applied] NIST-SP800-53M-rev5_cm-2.3M CM-02(07) [M] Configure Systems and Components for High-risk Areas [applied] NIST-SP800-53M-rev5_cm-2.7M CM-03(02) [M] Testing, Validation, and Documentation of Changes [applied] NIST-SP800-53M-rev5_cm-3.2M CM-03(04) [M] Security and Privacy Representatives [applied] NIST-SP800-53M-rev5_cm-3.4M CM-04(02) [M] Verification of Controls [applied] NIST-SP800-53M-rev5_cm-4.2M CM-07(01) [M] Periodic Review [applied] NIST-SP800-53M-rev5_cm-7.1M CM-07(02) [M] Prevent Program Execution [applied] NIST-SP800-53M-rev5_cm-7.2M CM-07(05) [M] Authorized Software — Allow-by-exception [applied] NIST-SP800-53M-rev5_cm-7.5M CM-08(01) [M] Updates During Installation and Removal [applied] NIST-SP800-53M-rev5_cm-8.1M CM-08(03) [M] Automated Unauthorized Component Detection [applied] NIST-SP800-53M-rev5_cm-8.3M CM-12(01) [M] Automated Tools to Support Information Location [applied] NIST-SP800-53M-rev5_cm-12.1M CP-02(01) [M] Coordinate with Related Plans [applied] NIST-SP800-53M-rev5_cp-2.1M CP-02(03) [M] Resume Mission and Business Functions [applied] NIST-SP800-53M-rev5_cp-2.3M CP-02(08) [M] Identify Critical Assets [applied] NIST-SP800-53M-rev5_cp-2.8M CP-04(01) [M] Coordinate with Related Plans [applied] NIST-SP800-53M-rev5_cp-4.1M CP-06(01) [M] Separation from Primary Site [applied] NIST-SP800-53M-rev5_cp-6.1M CP-06(03) [M] Accessibility [applied] NIST-SP800-53M-rev5_cp-6.3M CP-07(01) [M] Separation from Primary Site [applied] NIST-SP800-53M-rev5_cp-7.1M CP-07(02) [M] Accessibility [applied] NIST-SP800-53M-rev5_cp-7.2M CP-07(03) [M] Priority of Service [applied] NIST-SP800-53M-rev5_cp-7.3M CP-08(01) [M] Priority of Service Provisions [applied] NIST-SP800-53M-rev5_cp-8.1M CP-08(02) [M] Single Points of Failure [applied] NIST-SP800-53M-rev5_cp-8.2M CP-09(01) [M] Testing for Reliability and Integrity [applied] NIST-SP800-53M-rev5_cp-9.1M CP-09(08) [M] Cryptographic Protection [applied] NIST-SP800-53M-rev5_cp-9.8M CP-10(02) [M] Transaction Recovery [applied] NIST-SP800-53M-rev5_cp-10.2M IA-02(01) [M] Multi-factor Authentication to Privileged Accounts [applied] NIST-SP800-53M-rev5_ia-2.1M IA-02(02) [M] Multi-factor Authentication to Non-privileged Accounts [applied] NIST-SP800-53M-rev5_ia-2.2M IA-02(08) [M] Access to Accounts — Replay Resistant [applied] NIST-SP800-53M-rev5_ia-2.8M IA-02(12) [M] Acceptance of PIV Credentials [applied] NIST-SP800-53M-rev5_ia-2.12M IA-04(04) [M] Identify User Status [applied] NIST-SP800-53M-rev5_ia-4.4M IA-05(01) [M] Password-based Authentication [applied] NIST-SP800-53M-rev5_ia-5.1M IA-05(02) [M] Public Key-based Authentication [applied] NIST-SP800-53M-rev5_ia-5.2M IA-05(06) [M] Protection of Authenticators [applied] NIST-SP800-53M-rev5_ia-5.6M IA-08(01) [M] Acceptance of PIV Credentials from Other Agencies [applied] NIST-SP800-53M-rev5_ia-8.1M IA-08(02) [M] Acceptance of External Authenticators [applied] NIST-SP800-53M-rev5_ia-8.2M IA-08(04) [M] Use of Defined Profiles [applied] NIST-SP800-53M-rev5_ia-8.4M IA-12(02) [M] Identity Evidence [applied] NIST-SP800-53M-rev5_ia-12.2M IA-12(03) [M] Identity Evidence Validation and Verification [applied] NIST-SP800-53M-rev5_ia-12.3M IA-12(05) [M] Address Confirmation [applied] NIST-SP800-53M-rev5_ia-12.5M IR-03(02) [M] Coordination with Related Plans [applied] NIST-SP800-53M-rev5_ir-3.2M IR-04(01) [M] Automated Incident Handling Processes [applied] NIST-SP800-53M-rev5_ir-4.1M IR-06(01) [M] Automated Reporting [applied] NIST-SP800-53M-rev5_ir-6.1M IR-06(03) [M] Supply Chain Coordination [applied] NIST-SP800-53M-rev5_ir-6.3M IR-07(01) [M] Automation Support for Availability of Information and Support [applied] NIST-SP800-53M-rev5_ir-7.1M MA-03(01) [M] Inspect Tools [applied] NIST-SP800-53M-rev5_ma-3.1M MA-03(02) [M] Inspect Media [applied] NIST-SP800-53M-rev5_ma-3.2M MA-03(03) [M] Prevent Unauthorized Removal [applied] NIST-SP800-53M-rev5_ma-3.3M PE-06(01) [M] Intrusion Alarms and Surveillance Equipment [applied] NIST-SP800-53M-rev5_pe-6.1M PE-13(01) [M] Detection Systems — Automatic Activation and Notification [applied] NIST-SP800-53M-rev5_pe-13.1M PL-04(01) [M] Social Media and External Site/Application Usage Restrictions [applied] NIST-SP800-53M-rev5_pl-4.1M RA-03(01) [M] Supply Chain Risk Assessment [applied] NIST-SP800-53M-rev5_ra-3.1M RA-05(02) [M] Update Vulnerabilities to Be Scanned [applied] NIST-SP800-53M-rev5_ra-5.2M RA-05(05) [M] Privileged Access [applied] NIST-SP800-53M-rev5_ra-5.5M RA-05(11) [M] Public Disclosure Program [applied] NIST-SP800-53M-rev5_ra-5.11M SA-04(01) [M] Functional Properties of Controls [applied] NIST-SP800-53M-rev5_sa-4.1M SA-04(02) [M] Design and Implementation Information for Controls [applied] NIST-SP800-53M-rev5_sa-4.2M SA-04(09) [M] Functions, Ports, Protocols, and Services in Use [applied] NIST-SP800-53M-rev5_sa-4.9M SA-04(10) [M] Use of Approved PIV Products [applied] NIST-SP800-53M-rev5_sa-4.10M SA-09(02) [M] Identification of Functions, Ports, Protocols, and Services [applied] NIST-SP800-53M-rev5_sa-9.2M SA-15(03) [M] Criticality Analysis [applied] NIST-SP800-53M-rev5_sa-15.3M SC-07(03) [M] Access Points [applied] NIST-SP800-53M-rev5_sc-7.3M SC-07(04) [M] External Telecommunications Services [applied] NIST-SP800-53M-rev5_sc-7.4M SC-07(05) [M] Deny by Default — Allow by Exception [applied] NIST-SP800-53M-rev5_sc-7.5M SC-07(07) [M] Split Tunneling for Remote Devices [applied] NIST-SP800-53M-rev5_sc-7.7M SC-07(08) [M] Route Traffic to Authenticated Proxy Servers [applied] NIST-SP800-53M-rev5_sc-7.8M SC-08(01) [M] Cryptographic Protection [applied] NIST-SP800-53M-rev5_sc-8.1M SC-28(01) [M] Cryptographic Protection [applied] NIST-SP800-53M-rev5_sc-28.1M SI-02(02) [M] Automated Flaw Remediation Status [applied] NIST-SP800-53M-rev5_si-2.2M SI-04(02) [M] Automated Tools and Mechanisms for Real-time Analysis [applied] NIST-SP800-53M-rev5_si-4.2M SI-04(04) [M] Inbound and Outbound Communications Traffic [applied] NIST-SP800-53M-rev5_si-4.4M SI-04(05) [M] System-generated Alerts [applied] NIST-SP800-53M-rev5_si-4.5M SI-07(01) [M] Integrity Checks [applied] NIST-SP800-53M-rev5_si-7.1M SI-07(07) [M] Integration of Detection and Response [applied] NIST-SP800-53M-rev5_si-7.7M SI-08(02) [M] Automatic Updates [applied] NIST-SP800-53M-rev5_si-8.2M SR-02(01) [M] Establish SCRM Team [applied] NIST-SP800-53M-rev5_sr-2.1M SR-11(01) [M] Anti-counterfeit Training [applied] NIST-SP800-53M-rev5_sr-11.1M SR-11(02) [M] Configuration Control for Component Service and Repair [applied] NIST-SP800-53M-rev5_sr-11.2M
New version: NIST SP 800-53 Rev. 5 LOW Baseline (v1.5.0-941e5bcdce) – 18 new, 0 changed, 0 removed	New version: NIST SP 800-53 Rev. 5 LOW Baseline (v1.5.0-941e5bcdce) – 18 new, 0 changed, 0 removed Document: NIST SP 800-53 Rev. 5 LOW Baseline (https://raw.githubusercontent.com/usnistgov/oscal-content/v1.5.0/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_LOW-baseline-resolved-profile_catalog.json) Version: v1.5.0-941e5bcdce Project: NIST Import: #618, 20.10.2026 17:06, nist The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes). Taken over directly (additional fields, HTML of an unchanged text): 12 issues. Review: 0 open, 18 applied, 0 rejected. New sections (18) AT-02(02) [L] Insider Threat [applied] NIST-SP800-53L-rev5_at-2.2L CA-07(04) [L] Risk Monitoring [applied] NIST-SP800-53L-rev5_ca-7.4L IA-02(01) [L] Multi-factor Authentication to Privileged Accounts [applied] NIST-SP800-53L-rev5_ia-2.1L IA-02(02) [L] Multi-factor Authentication to Non-privileged Accounts [applied] NIST-SP800-53L-rev5_ia-2.2L IA-02(08) [L] Access to Accounts — Replay Resistant [applied] NIST-SP800-53L-rev5_ia-2.8L IA-02(12) [L] Acceptance of PIV Credentials [applied] NIST-SP800-53L-rev5_ia-2.12L IA-05(01) [L] Password-based Authentication [applied] NIST-SP800-53L-rev5_ia-5.1L IA-08(01) [L] Acceptance of PIV Credentials from Other Agencies [applied] NIST-SP800-53L-rev5_ia-8.1L IA-08(02) [L] Acceptance of External Authenticators [applied] NIST-SP800-53L-rev5_ia-8.2L IA-08(04) [L] Use of Defined Profiles [applied] NIST-SP800-53L-rev5_ia-8.4L PL-04(01) [L] Social Media and External Site/Application Usage Restrictions [applied] NIST-SP800-53L-rev5_pl-4.1L RA-03(01) [L] Supply Chain Risk Assessment [applied] NIST-SP800-53L-rev5_ra-3.1L RA-05(02) [L] Update Vulnerabilities to Be Scanned [applied] NIST-SP800-53L-rev5_ra-5.2L RA-05(11) [L] Public Disclosure Program [applied] NIST-SP800-53L-rev5_ra-5.11L SA-04(10) [L] Use of Approved PIV Products [applied] NIST-SP800-53L-rev5_sa-4.10L SR-02(01) [L] Establish SCRM Team [applied] NIST-SP800-53L-rev5_sr-2.1L SR-11(01) [L] Anti-counterfeit Training [applied] NIST-SP800-53L-rev5_sr-11.1L SR-11(02) [L] Configuration Control for Component Service and Repair [applied] NIST-SP800-53L-rev5_sr-11.2L
New version: NIST SP 800-53 Rev. 5 PRIVACY Baseline (v1.5.0-09ec05c6b7) – 15 new, 0 changed, 0 removed	New version: NIST SP 800-53 Rev. 5 PRIVACY Baseline (v1.5.0-09ec05c6b7) – 15 new, 0 changed, 0 removed Document: NIST SP 800-53 Rev. 5 PRIVACY Baseline (https://raw.githubusercontent.com/usnistgov/oscal-content/v1.5.0/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_PRIVACY-baseline-resolved-profile_catalog.json) Version: v1.5.0-09ec05c6b7 Project: NIST Import: #619, 20.10.2026 17:06, nist The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes). Taken over directly (additional fields, HTML of an unchanged text): 5 issues. Review: 0 open, 15 applied, 0 rejected. New sections (15) AT-03(05) [P] Processing Personally Identifiable Information [applied] NIST-SP800-53P-rev5_at-3.5P CA-07(04) [P] Risk Monitoring [applied] NIST-SP800-53P-rev5_ca-7.4P IR-02(03) [P] Breach [applied] NIST-SP800-53P-rev5_ir-2.3P IR-08(01) [P] Breaches [applied] NIST-SP800-53P-rev5_ir-8.1P PL-04(01) [P] Social Media and External Site/Application Usage Restrictions [applied] NIST-SP800-53P-rev5_pl-4.1P PM-20(01) [P] Privacy Policies on Websites, Applications, and Digital Services [applied] NIST-SP800-53P-rev5_pm-20.1P PT-05(02) [P] Privacy Act Statements [applied] NIST-SP800-53P-rev5_pt-5.2P PT-06(01) [P] Routine Uses [applied] NIST-SP800-53P-rev5_pt-6.1P PT-06(02) [P] Exemption Rules [applied] NIST-SP800-53P-rev5_pt-6.2P PT-07(01) [P] Social Security Numbers [applied] NIST-SP800-53P-rev5_pt-7.1P PT-07(02) [P] First Amendment Information [applied] NIST-SP800-53P-rev5_pt-7.2P SI-12(01) [P] Limit Personally Identifiable Information Elements [applied] NIST-SP800-53P-rev5_si-12.1P SI-12(02) [P] Minimize Personally Identifiable Information in Testing, Training, and Research [applied] NIST-SP800-53P-rev5_si-12.2P SI-12(03) [P] Information Disposal [applied] NIST-SP800-53P-rev5_si-12.3P SI-18(04) [P] Individual Requests [applied] NIST-SP800-53P-rev5_si-18.4P
Imported: NIST Cybersecurity Framework (CSF) 2.0 (v1.5.0-7b8b2d8b45)	Imported: NIST Cybersecurity Framework (CSF) 2.0 (v1.5.0-7b8b2d8b45) Document: NIST Cybersecurity Framework (CSF) 2.0 (https://raw.githubusercontent.com/usnistgov/oscal-content/v1.5.0/nist.gov/CSF/v2.0/json/NIST_CSF_v2.0_catalog.json) Version: v1.5.0-7b8b2d8b45 Project: NIST Import: #620, 20.10.2026 17:06, nist The document was not there yet and was created with 226 sections, including language, labels and the link to the source. Outline GV GOVERN – 38 sections ID IDENTIFY – 47 sections PR PROTECT – 67 sections DE DETECT – 26 sections RS RESPOND – 31 sections RC RECOVER – 16 sections
Imported: NIST SP 800-171 Rev. 3 (v1.5.0-1bc9d5ab5f)	Imported: NIST SP 800-171 Rev. 3 (v1.5.0-1bc9d5ab5f) Document: NIST SP 800-171 Rev. 3 (https://raw.githubusercontent.com/usnistgov/oscal-content/v1.5.0/nist.gov/SP800-171/rev3/json/NIST_SP800-171_rev3_catalog.json) Version: v1.5.0-1bc9d5ab5f Project: NIST Import: #621, 20.10.2026 17:06, nist The document was not there yet and was created with 148 sections, including language, labels and the link to the source. Outline 03.01 Access Control – 23 sections 03.02 Awareness and Training – 4 sections 03.03 Audit and Accountability – 10 sections 03.04 Configuration Management – 13 sections 03.05 Identification and Authentication – 13 sections 03.06 Incident Response – 6 sections 03.07 Maintenance – 7 sections 03.08 Media Protection – 10 sections 03.09 Personnel Security – 3 sections 03.10 Physical Protection – 9 sections 03.11 Risk Assessment – 5 sections 03.12 Security Assessment and Monitoring – 6 sections 03.13 System and Communications Protection – 17 sections 03.14 System and Information Integrity – 9 sections 03.15 Planning – 4 sections 03.16 System and Services Acquisition – 4 sections 03.17 Supply Chain Risk Management – 4 sections
Imported: NIST SP 800-172 Rev. 3 (v1.5.0-da27cdb624)	Imported: NIST SP 800-172 Rev. 3 (v1.5.0-da27cdb624) Document: NIST SP 800-172 Rev. 3 (https://raw.githubusercontent.com/usnistgov/oscal-content/v1.5.0/nist.gov/SP800-172/rev3/json/NIST_SP800-172_rev3_catalog.json) Version: v1.5.0-da27cdb624 Project: NIST Import: #622, 20.10.2026 17:06, nist The document was not there yet and was created with 133 sections, including language, labels and the link to the source. Outline 3.1 Access Control – 18 sections 3.2 Awareness and Training – 5 sections 3.3 Audit and Accountability – 5 sections 3.4 Configuration Management – 9 sections 3.5 Identification and Authentication – 8 sections 3.6 Incident Response – 5 sections 3.7 Maintenance – 2 sections 3.8 Media Protection – 5 sections 3.9 Personnel Security – 5 sections 3.10 Physical Protection – 3 sections 3.11 Risk Assessment – 13 sections 3.12 Security Assessment and Monitoring – 5 sections 3.13 System and Communications Protection – 17 sections 3.14 System and Information Integrity – 20 sections 3.15 Planning – 4 sections 3.16 System and Services Acquisition – 2 sections 3.17 Supply Chain Risk Management – 6 sections
Imported: NIST SP 800-218 Secure Software Development Framework (SSDF) (v1.5.0-94f85f2145)	Imported: NIST SP 800-218 Secure Software Development Framework (SSDF) (v1.5.0-94f85f2145) Document: NIST SP 800-218 Secure Software Development Framework (SSDF) (https://raw.githubusercontent.com/usnistgov/oscal-content/v1.5.0/nist.gov/SP800-218/ver1/json/NIST_SP800-218_ver1_catalog.json) Version: v1.5.0-94f85f2145 Project: NIST Import: #623, 20.10.2026 17:06, nist The document was not there yet and was created with 66 sections, including language, labels and the link to the source. Outline PO Prepare the Organization – 19 sections PS Protect Software – 8 sections PW Produce Well-Secured Software – 25 sections RV Respond to Vulnerabilities – 13 sections
New version: NIST SP 800-53 Rev. 5 (v1.5.0-8ebe3c9118) – 1015 new, 0 changed, 0 removed, 1014 links	New version: NIST SP 800-53 Rev. 5 (v1.5.0-8ebe3c9118) – 1015 new, 0 changed, 0 removed, 1014 links Document: NIST SP 800-53 Rev. 5 (https://raw.githubusercontent.com/usnistgov/oscal-content/v1.5.0/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json) Version: v1.5.0-8ebe3c9118 Project: NIST Import: #641, 20.10.2026 21:17, nist The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes). Review: 0 open, 2029 applied, 0 rejected. New sections (1015) NIST SP 800-53 Rev. 5 – Assessment Procedures [applied] NIST-SP800-53-rev5_assessment-procedures AC-01 Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-1_assessment AC-02 Account Management – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-2_assessment AC-02(01) Automated System Account Management – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-2.1_assessment AC-02(02) Automated Temporary and Emergency Account Management – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-2.2_assessment AC-02(03) Disable Accounts – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-2.3_assessment AC-02(04) Automated Audit Actions – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-2.4_assessment AC-02(05) Inactivity Logout – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-2.5_assessment AC-02(06) Dynamic Privilege Management – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-2.6_assessment AC-02(07) Privileged User Accounts – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-2.7_assessment AC-02(08) Dynamic Account Management – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-2.8_assessment AC-02(09) Restrictions on Use of Shared and Group Accounts – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-2.9_assessment AC-02(11) Usage Conditions – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-2.11_assessment AC-02(12) Account Monitoring for Atypical Usage – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-2.12_assessment AC-02(13) Disable Accounts for High-risk Individuals – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-2.13_assessment AC-03 Access Enforcement – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-3_assessment AC-03(02) Dual Authorization – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-3.2_assessment AC-03(03) Mandatory Access Control – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-3.3_assessment AC-03(04) Discretionary Access Control – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-3.4_assessment AC-03(05) Security-relevant Information – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-3.5_assessment AC-03(07) Role-based Access Control – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-3.7_assessment AC-03(08) Revocation of Access Authorizations – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-3.8_assessment AC-03(09) Controlled Release – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-3.9_assessment AC-03(10) Audited Override of Access Control Mechanisms – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-3.10_assessment AC-03(11) Restrict Access to Specific Information Types – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-3.11_assessment AC-03(12) Assert and Enforce Application Access – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-3.12_assessment AC-03(13) Attribute-based Access Control – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-3.13_assessment AC-03(14) Individual Access – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-3.14_assessment AC-03(15) Discretionary and Mandatory Access Control – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-3.15_assessment AC-04 Information Flow Enforcement – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4_assessment AC-04(01) Object Security and Privacy Attributes – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.1_assessment AC-04(02) Processing Domains – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.2_assessment AC-04(03) Dynamic Information Flow Control – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.3_assessment AC-04(04) Flow Control of Encrypted Information – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.4_assessment AC-04(05) Embedded Data Types – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.5_assessment AC-04(06) Metadata – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.6_assessment AC-04(07) One-way Flow Mechanisms – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.7_assessment AC-04(08) Security and Privacy Policy Filters – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.8_assessment AC-04(09) Human Reviews – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.9_assessment AC-04(10) Enable and Disable Security or Privacy Policy Filters – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.10_assessment AC-04(11) Configuration of Security or Privacy Policy Filters – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.11_assessment AC-04(12) Data Type Identifiers – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.12_assessment AC-04(13) Decomposition into Policy-relevant Subcomponents – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.13_assessment AC-04(14) Security or Privacy Policy Filter Constraints – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.14_assessment AC-04(15) Detection of Unsanctioned Information – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.15_assessment AC-04(17) Domain Authentication – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.17_assessment AC-04(19) Validation of Metadata – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.19_assessment AC-04(20) Approved Solutions – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.20_assessment AC-04(21) Physical or Logical Separation of Information Flows – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.21_assessment AC-04(22) Access Only – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.22_assessment AC-04(23) Modify Non-releasable Information – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.23_assessment AC-04(24) Internal Normalized Format – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.24_assessment AC-04(25) Data Sanitization – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.25_assessment AC-04(26) Audit Filtering Actions – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.26_assessment AC-04(27) Redundant/Independent Filtering Mechanisms – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.27_assessment AC-04(28) Linear Filter Pipelines – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.28_assessment AC-04(29) Filter Orchestration Engines – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.29_assessment AC-04(30) Filter Mechanisms Using Multiple Processes – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.30_assessment AC-04(31) Failed Content Transfer Prevention – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.31_assessment AC-04(32) Process Requirements for Information Transfer – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-4.32_assessment AC-05 Separation of Duties – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-5_assessment AC-06 Least Privilege – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-6_assessment AC-06(01) Authorize Access to Security Functions – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-6.1_assessment AC-06(02) Non-privileged Access for Nonsecurity Functions – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-6.2_assessment AC-06(03) Network Access to Privileged Commands – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-6.3_assessment AC-06(04) Separate Processing Domains – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-6.4_assessment AC-06(05) Privileged Accounts – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-6.5_assessment AC-06(06) Privileged Access by Non-organizational Users – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-6.6_assessment AC-06(07) Review of User Privileges – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-6.7_assessment AC-06(08) Privilege Levels for Code Execution – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-6.8_assessment AC-06(09) Log Use of Privileged Functions – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-6.9_assessment AC-06(10) Prohibit Non-privileged Users from Executing Privileged Functions – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-6.10_assessment AC-07 Unsuccessful Logon Attempts – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-7_assessment AC-07(02) Purge or Wipe Mobile Device – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-7.2_assessment AC-07(03) Biometric Attempt Limiting – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-7.3_assessment AC-07(04) Use of Alternate Authentication Factor – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-7.4_assessment AC-08 System Use Notification – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-8_assessment AC-09 Previous Logon Notification – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-9_assessment AC-09(01) Unsuccessful Logons – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-9.1_assessment AC-09(02) Successful and Unsuccessful Logons – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-9.2_assessment AC-09(03) Notification of Account Changes – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-9.3_assessment AC-09(04) Additional Logon Information – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-9.4_assessment AC-10 Concurrent Session Control – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-10_assessment AC-11 Device Lock – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-11_assessment AC-11(01) Pattern-hiding Displays – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-11.1_assessment AC-12 Session Termination – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-12_assessment AC-12(01) User-initiated Logouts – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-12.1_assessment AC-12(02) Termination Message – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-12.2_assessment AC-12(03) Timeout Warning Message – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-12.3_assessment AC-14 Permitted Actions Without Identification or Authentication – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-14_assessment AC-16 Security and Privacy Attributes – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-16_assessment AC-16(01) Dynamic Attribute Association – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-16.1_assessment AC-16(02) Attribute Value Changes by Authorized Individuals – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-16.2_assessment AC-16(03) Maintenance of Attribute Associations by System – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-16.3_assessment AC-16(04) Association of Attributes by Authorized Individuals – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-16.4_assessment AC-16(05) Attribute Displays on Objects to Be Output – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-16.5_assessment AC-16(06) Maintenance of Attribute Association – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-16.6_assessment AC-16(07) Consistent Attribute Interpretation – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-16.7_assessment AC-16(08) Association Techniques and Technologies – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-16.8_assessment AC-16(09) Attribute Reassignment — Regrading Mechanisms – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-16.9_assessment AC-16(10) Attribute Configuration by Authorized Individuals – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-16.10_assessment AC-17 Remote Access – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-17_assessment AC-17(01) Monitoring and Control – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-17.1_assessment AC-17(02) Protection of Confidentiality and Integrity Using Encryption – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-17.2_assessment AC-17(03) Managed Access Control Points – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-17.3_assessment AC-17(04) Privileged Commands and Access – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-17.4_assessment AC-17(06) Protection of Mechanism Information – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-17.6_assessment AC-17(09) Disconnect or Disable Access – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-17.9_assessment AC-17(10) Authenticate Remote Commands – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-17.10_assessment AC-18 Wireless Access – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-18_assessment AC-18(01) Authentication and Encryption – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-18.1_assessment AC-18(03) Disable Wireless Networking – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-18.3_assessment AC-18(04) Restrict Configurations by Users – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-18.4_assessment AC-18(05) Antennas and Transmission Power Levels – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-18.5_assessment AC-19 Access Control for Mobile Devices – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-19_assessment AC-19(04) Restrictions for Classified Information – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-19.4_assessment AC-19(05) Full Device or Container-based Encryption – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-19.5_assessment AC-20 Use of External Systems – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-20_assessment AC-20(01) Limits on Authorized Use – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-20.1_assessment AC-20(02) Portable Storage Devices — Restricted Use – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-20.2_assessment AC-20(03) Non-organizationally Owned Systems — Restricted Use – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-20.3_assessment AC-20(04) Network Accessible Storage Devices — Prohibited Use – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-20.4_assessment AC-20(05) Portable Storage Devices — Prohibited Use – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-20.5_assessment AC-21 Information Sharing – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-21_assessment AC-21(01) Automated Decision Support – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-21.1_assessment AC-21(02) Information Search and Retrieval – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-21.2_assessment AC-22 Publicly Accessible Content – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-22_assessment AC-23 Data Mining Protection – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-23_assessment AC-24 Access Control Decisions – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-24_assessment AC-24(01) Transmit Access Authorization Information – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-24.1_assessment AC-24(02) No User or Process Identity – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-24.2_assessment AC-25 Reference Monitor – Assessment Procedure [applied] NIST-SP800-53-rev5_ac-25_assessment AT-01 Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53-rev5_at-1_assessment AT-02 Literacy Training and Awareness – Assessment Procedure [applied] NIST-SP800-53-rev5_at-2_assessment AT-02(01) Practical Exercises – Assessment Procedure [applied] NIST-SP800-53-rev5_at-2.1_assessment AT-02(02) Insider Threat – Assessment Procedure [applied] NIST-SP800-53-rev5_at-2.2_assessment AT-02(03) Social Engineering and Mining – Assessment Procedure [applied] NIST-SP800-53-rev5_at-2.3_assessment AT-02(04) Suspicious Communications and Anomalous System Behavior – Assessment Procedure [applied] NIST-SP800-53-rev5_at-2.4_assessment AT-02(05) Advanced Persistent Threat – Assessment Procedure [applied] NIST-SP800-53-rev5_at-2.5_assessment AT-02(06) Cyber Threat Environment – Assessment Procedure [applied] NIST-SP800-53-rev5_at-2.6_assessment AT-03 Role-based Training – Assessment Procedure [applied] NIST-SP800-53-rev5_at-3_assessment AT-03(01) Environmental Controls – Assessment Procedure [applied] NIST-SP800-53-rev5_at-3.1_assessment AT-03(02) Physical Security Controls – Assessment Procedure [applied] NIST-SP800-53-rev5_at-3.2_assessment AT-03(03) Practical Exercises – Assessment Procedure [applied] NIST-SP800-53-rev5_at-3.3_assessment AT-03(05) Processing Personally Identifiable Information – Assessment Procedure [applied] NIST-SP800-53-rev5_at-3.5_assessment AT-04 Training Records – Assessment Procedure [applied] NIST-SP800-53-rev5_at-4_assessment AT-06 Training Feedback – Assessment Procedure [applied] NIST-SP800-53-rev5_at-6_assessment AU-01 Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53-rev5_au-1_assessment AU-02 Event Logging – Assessment Procedure [applied] NIST-SP800-53-rev5_au-2_assessment AU-03 Content of Audit Records – Assessment Procedure [applied] NIST-SP800-53-rev5_au-3_assessment AU-03(01) Additional Audit Information – Assessment Procedure [applied] NIST-SP800-53-rev5_au-3.1_assessment AU-03(03) Limit Personally Identifiable Information Elements – Assessment Procedure [applied] NIST-SP800-53-rev5_au-3.3_assessment AU-04 Audit Log Storage Capacity – Assessment Procedure [applied] NIST-SP800-53-rev5_au-4_assessment AU-04(01) Transfer to Alternate Storage – Assessment Procedure [applied] NIST-SP800-53-rev5_au-4.1_assessment AU-05 Response to Audit Logging Process Failures – Assessment Procedure [applied] NIST-SP800-53-rev5_au-5_assessment AU-05(01) Storage Capacity Warning – Assessment Procedure [applied] NIST-SP800-53-rev5_au-5.1_assessment AU-05(02) Real-time Alerts – Assessment Procedure [applied] NIST-SP800-53-rev5_au-5.2_assessment AU-05(03) Configurable Traffic Volume Thresholds – Assessment Procedure [applied] NIST-SP800-53-rev5_au-5.3_assessment AU-05(04) Shutdown on Failure – Assessment Procedure [applied] NIST-SP800-53-rev5_au-5.4_assessment AU-05(05) Alternate Audit Logging Capability – Assessment Procedure [applied] NIST-SP800-53-rev5_au-5.5_assessment AU-06 Audit Record Review, Analysis, and Reporting – Assessment Procedure [applied] NIST-SP800-53-rev5_au-6_assessment AU-06(01) Automated Process Integration – Assessment Procedure [applied] NIST-SP800-53-rev5_au-6.1_assessment AU-06(03) Correlate Audit Record Repositories – Assessment Procedure [applied] NIST-SP800-53-rev5_au-6.3_assessment AU-06(04) Central Review and Analysis – Assessment Procedure [applied] NIST-SP800-53-rev5_au-6.4_assessment AU-06(05) Integrated Analysis of Audit Records – Assessment Procedure [applied] NIST-SP800-53-rev5_au-6.5_assessment AU-06(06) Correlation with Physical Monitoring – Assessment Procedure [applied] NIST-SP800-53-rev5_au-6.6_assessment AU-06(07) Permitted Actions – Assessment Procedure [applied] NIST-SP800-53-rev5_au-6.7_assessment AU-06(08) Full Text Analysis of Privileged Commands – Assessment Procedure [applied] NIST-SP800-53-rev5_au-6.8_assessment AU-06(09) Correlation with Information from Nontechnical Sources – Assessment Procedure [applied] NIST-SP800-53-rev5_au-6.9_assessment AU-07 Audit Record Reduction and Report Generation – Assessment Procedure [applied] NIST-SP800-53-rev5_au-7_assessment AU-07(01) Automatic Processing – Assessment Procedure [applied] NIST-SP800-53-rev5_au-7.1_assessment AU-08 Time Stamps – Assessment Procedure [applied] NIST-SP800-53-rev5_au-8_assessment AU-09 Protection of Audit Information – Assessment Procedure [applied] NIST-SP800-53-rev5_au-9_assessment AU-09(01) Hardware Write-once Media – Assessment Procedure [applied] NIST-SP800-53-rev5_au-9.1_assessment AU-09(02) Store on Separate Physical Systems or Components – Assessment Procedure [applied] NIST-SP800-53-rev5_au-9.2_assessment AU-09(03) Cryptographic Protection – Assessment Procedure [applied] NIST-SP800-53-rev5_au-9.3_assessment AU-09(04) Access by Subset of Privileged Users – Assessment Procedure [applied] NIST-SP800-53-rev5_au-9.4_assessment AU-09(05) Dual Authorization – Assessment Procedure [applied] NIST-SP800-53-rev5_au-9.5_assessment AU-09(06) Read-only Access – Assessment Procedure [applied] NIST-SP800-53-rev5_au-9.6_assessment AU-09(07) Store on Component with Different Operating System – Assessment Procedure [applied] NIST-SP800-53-rev5_au-9.7_assessment AU-10 Non-repudiation – Assessment Procedure [applied] NIST-SP800-53-rev5_au-10_assessment AU-10(01) Association of Identities – Assessment Procedure [applied] NIST-SP800-53-rev5_au-10.1_assessment AU-10(02) Validate Binding of Information Producer Identity – Assessment Procedure [applied] NIST-SP800-53-rev5_au-10.2_assessment AU-10(03) Chain of Custody – Assessment Procedure [applied] NIST-SP800-53-rev5_au-10.3_assessment AU-10(04) Validate Binding of Information Reviewer Identity – Assessment Procedure [applied] NIST-SP800-53-rev5_au-10.4_assessment AU-11 Audit Record Retention – Assessment Procedure [applied] NIST-SP800-53-rev5_au-11_assessment AU-11(01) Long-term Retrieval Capability – Assessment Procedure [applied] NIST-SP800-53-rev5_au-11.1_assessment AU-12 Audit Record Generation – Assessment Procedure [applied] NIST-SP800-53-rev5_au-12_assessment AU-12(01) System-wide and Time-correlated Audit Trail – Assessment Procedure [applied] NIST-SP800-53-rev5_au-12.1_assessment AU-12(02) Standardized Formats – Assessment Procedure [applied] NIST-SP800-53-rev5_au-12.2_assessment AU-12(03) Changes by Authorized Individuals – Assessment Procedure [applied] NIST-SP800-53-rev5_au-12.3_assessment AU-12(04) Query Parameter Audits of Personally Identifiable Information – Assessment Procedure [applied] NIST-SP800-53-rev5_au-12.4_assessment AU-13 Monitoring for Information Disclosure – Assessment Procedure [applied] NIST-SP800-53-rev5_au-13_assessment AU-13(01) Use of Automated Tools – Assessment Procedure [applied] NIST-SP800-53-rev5_au-13.1_assessment AU-13(02) Review of Monitored Sites – Assessment Procedure [applied] NIST-SP800-53-rev5_au-13.2_assessment AU-13(03) Unauthorized Replication of Information – Assessment Procedure [applied] NIST-SP800-53-rev5_au-13.3_assessment AU-14 Session Audit – Assessment Procedure [applied] NIST-SP800-53-rev5_au-14_assessment AU-14(01) System Start-up – Assessment Procedure [applied] NIST-SP800-53-rev5_au-14.1_assessment AU-14(03) Remote Viewing and Listening – Assessment Procedure [applied] NIST-SP800-53-rev5_au-14.3_assessment AU-16 Cross-organizational Audit Logging – Assessment Procedure [applied] NIST-SP800-53-rev5_au-16_assessment … and 815 more New links (1014) Blocks → AC-01 Policy and Procedures [applied] NIST-SP800-53-rev5_ac-1_assessment Blocks → AC-02 Account Management [applied] NIST-SP800-53-rev5_ac-2_assessment Blocks → AC-02(01) Automated System Account Management [applied] NIST-SP800-53-rev5_ac-2.1_assessment Blocks → AC-02(02) Automated Temporary and Emergency Account Management [applied] NIST-SP800-53-rev5_ac-2.2_assessment Blocks → AC-02(03) Disable Accounts [applied] NIST-SP800-53-rev5_ac-2.3_assessment Blocks → AC-02(04) Automated Audit Actions [applied] NIST-SP800-53-rev5_ac-2.4_assessment Blocks → AC-02(05) Inactivity Logout [applied] NIST-SP800-53-rev5_ac-2.5_assessment Blocks → AC-02(06) Dynamic Privilege Management [applied] NIST-SP800-53-rev5_ac-2.6_assessment Blocks → AC-02(07) Privileged User Accounts [applied] NIST-SP800-53-rev5_ac-2.7_assessment Blocks → AC-02(08) Dynamic Account Management [applied] NIST-SP800-53-rev5_ac-2.8_assessment Blocks → AC-02(09) Restrictions on Use of Shared and Group Accounts [applied] NIST-SP800-53-rev5_ac-2.9_assessment Blocks → AC-02(11) Usage Conditions [applied] NIST-SP800-53-rev5_ac-2.11_assessment Blocks → AC-02(12) Account Monitoring for Atypical Usage [applied] NIST-SP800-53-rev5_ac-2.12_assessment Blocks → AC-02(13) Disable Accounts for High-risk Individuals [applied] NIST-SP800-53-rev5_ac-2.13_assessment Blocks → AC-03 Access Enforcement [applied] NIST-SP800-53-rev5_ac-3_assessment Blocks → AC-03(02) Dual Authorization [applied] NIST-SP800-53-rev5_ac-3.2_assessment Blocks → AC-03(03) Mandatory Access Control [applied] NIST-SP800-53-rev5_ac-3.3_assessment Blocks → AC-03(04) Discretionary Access Control [applied] NIST-SP800-53-rev5_ac-3.4_assessment Blocks → AC-03(05) Security-relevant Information [applied] NIST-SP800-53-rev5_ac-3.5_assessment Blocks → AC-03(07) Role-based Access Control [applied] NIST-SP800-53-rev5_ac-3.7_assessment Blocks → AC-03(08) Revocation of Access Authorizations [applied] NIST-SP800-53-rev5_ac-3.8_assessment Blocks → AC-03(09) Controlled Release [applied] NIST-SP800-53-rev5_ac-3.9_assessment Blocks → AC-03(10) Audited Override of Access Control Mechanisms [applied] NIST-SP800-53-rev5_ac-3.10_assessment Blocks → AC-03(11) Restrict Access to Specific Information Types [applied] NIST-SP800-53-rev5_ac-3.11_assessment Blocks → AC-03(12) Assert and Enforce Application Access [applied] NIST-SP800-53-rev5_ac-3.12_assessment Blocks → AC-03(13) Attribute-based Access Control [applied] NIST-SP800-53-rev5_ac-3.13_assessment Blocks → AC-03(14) Individual Access [applied] NIST-SP800-53-rev5_ac-3.14_assessment Blocks → AC-03(15) Discretionary and Mandatory Access Control [applied] NIST-SP800-53-rev5_ac-3.15_assessment Blocks → AC-04 Information Flow Enforcement [applied] NIST-SP800-53-rev5_ac-4_assessment Blocks → AC-04(01) Object Security and Privacy Attributes [applied] NIST-SP800-53-rev5_ac-4.1_assessment Blocks → AC-04(02) Processing Domains [applied] NIST-SP800-53-rev5_ac-4.2_assessment Blocks → AC-04(03) Dynamic Information Flow Control [applied] NIST-SP800-53-rev5_ac-4.3_assessment Blocks → AC-04(04) Flow Control of Encrypted Information [applied] NIST-SP800-53-rev5_ac-4.4_assessment Blocks → AC-04(05) Embedded Data Types [applied] NIST-SP800-53-rev5_ac-4.5_assessment Blocks → AC-04(06) Metadata [applied] NIST-SP800-53-rev5_ac-4.6_assessment Blocks → AC-04(07) One-way Flow Mechanisms [applied] NIST-SP800-53-rev5_ac-4.7_assessment Blocks → AC-04(08) Security and Privacy Policy Filters [applied] NIST-SP800-53-rev5_ac-4.8_assessment Blocks → AC-04(09) Human Reviews [applied] NIST-SP800-53-rev5_ac-4.9_assessment Blocks → AC-04(10) Enable and Disable Security or Privacy Policy Filters [applied] NIST-SP800-53-rev5_ac-4.10_assessment Blocks → AC-04(11) Configuration of Security or Privacy Policy Filters [applied] NIST-SP800-53-rev5_ac-4.11_assessment Blocks → AC-04(12) Data Type Identifiers [applied] NIST-SP800-53-rev5_ac-4.12_assessment Blocks → AC-04(13) Decomposition into Policy-relevant Subcomponents [applied] NIST-SP800-53-rev5_ac-4.13_assessment Blocks → AC-04(14) Security or Privacy Policy Filter Constraints [applied] NIST-SP800-53-rev5_ac-4.14_assessment Blocks → AC-04(15) Detection of Unsanctioned Information [applied] NIST-SP800-53-rev5_ac-4.15_assessment Blocks → AC-04(17) Domain Authentication [applied] NIST-SP800-53-rev5_ac-4.17_assessment Blocks → AC-04(19) Validation of Metadata [applied] NIST-SP800-53-rev5_ac-4.19_assessment Blocks → AC-04(20) Approved Solutions [applied] NIST-SP800-53-rev5_ac-4.20_assessment Blocks → AC-04(21) Physical or Logical Separation of Information Flows [applied] NIST-SP800-53-rev5_ac-4.21_assessment Blocks → AC-04(22) Access Only [applied] NIST-SP800-53-rev5_ac-4.22_assessment Blocks → AC-04(23) Modify Non-releasable Information [applied] NIST-SP800-53-rev5_ac-4.23_assessment Blocks → AC-04(24) Internal Normalized Format [applied] NIST-SP800-53-rev5_ac-4.24_assessment Blocks → AC-04(25) Data Sanitization [applied] NIST-SP800-53-rev5_ac-4.25_assessment Blocks → AC-04(26) Audit Filtering Actions [applied] NIST-SP800-53-rev5_ac-4.26_assessment Blocks → AC-04(27) Redundant/Independent Filtering Mechanisms [applied] NIST-SP800-53-rev5_ac-4.27_assessment Blocks → AC-04(28) Linear Filter Pipelines [applied] NIST-SP800-53-rev5_ac-4.28_assessment Blocks → AC-04(29) Filter Orchestration Engines [applied] NIST-SP800-53-rev5_ac-4.29_assessment Blocks → AC-04(30) Filter Mechanisms Using Multiple Processes [applied] NIST-SP800-53-rev5_ac-4.30_assessment Blocks → AC-04(31) Failed Content Transfer Prevention [applied] NIST-SP800-53-rev5_ac-4.31_assessment Blocks → AC-04(32) Process Requirements for Information Transfer [applied] NIST-SP800-53-rev5_ac-4.32_assessment Blocks → AC-05 Separation of Duties [applied] NIST-SP800-53-rev5_ac-5_assessment Blocks → AC-06 Least Privilege [applied] NIST-SP800-53-rev5_ac-6_assessment Blocks → AC-06(01) Authorize Access to Security Functions [applied] NIST-SP800-53-rev5_ac-6.1_assessment Blocks → AC-06(02) Non-privileged Access for Nonsecurity Functions [applied] NIST-SP800-53-rev5_ac-6.2_assessment Blocks → AC-06(03) Network Access to Privileged Commands [applied] NIST-SP800-53-rev5_ac-6.3_assessment Blocks → AC-06(04) Separate Processing Domains [applied] NIST-SP800-53-rev5_ac-6.4_assessment Blocks → AC-06(05) Privileged Accounts [applied] NIST-SP800-53-rev5_ac-6.5_assessment Blocks → AC-06(06) Privileged Access by Non-organizational Users [applied] NIST-SP800-53-rev5_ac-6.6_assessment Blocks → AC-06(07) Review of User Privileges [applied] NIST-SP800-53-rev5_ac-6.7_assessment Blocks → AC-06(08) Privilege Levels for Code Execution [applied] NIST-SP800-53-rev5_ac-6.8_assessment Blocks → AC-06(09) Log Use of Privileged Functions [applied] NIST-SP800-53-rev5_ac-6.9_assessment Blocks → AC-06(10) Prohibit Non-privileged Users from Executing Privileged Functions [applied] NIST-SP800-53-rev5_ac-6.10_assessment Blocks → AC-07 Unsuccessful Logon Attempts [applied] NIST-SP800-53-rev5_ac-7_assessment Blocks → AC-07(02) Purge or Wipe Mobile Device [applied] NIST-SP800-53-rev5_ac-7.2_assessment Blocks → AC-07(03) Biometric Attempt Limiting [applied] NIST-SP800-53-rev5_ac-7.3_assessment Blocks → AC-07(04) Use of Alternate Authentication Factor [applied] NIST-SP800-53-rev5_ac-7.4_assessment Blocks → AC-08 System Use Notification [applied] NIST-SP800-53-rev5_ac-8_assessment Blocks → AC-09 Previous Logon Notification [applied] NIST-SP800-53-rev5_ac-9_assessment Blocks → AC-09(01) Unsuccessful Logons [applied] NIST-SP800-53-rev5_ac-9.1_assessment Blocks → AC-09(02) Successful and Unsuccessful Logons [applied] NIST-SP800-53-rev5_ac-9.2_assessment Blocks → AC-09(03) Notification of Account Changes [applied] NIST-SP800-53-rev5_ac-9.3_assessment Blocks → AC-09(04) Additional Logon Information [applied] NIST-SP800-53-rev5_ac-9.4_assessment Blocks → AC-10 Concurrent Session Control [applied] NIST-SP800-53-rev5_ac-10_assessment Blocks → AC-11 Device Lock [applied] NIST-SP800-53-rev5_ac-11_assessment Blocks → AC-11(01) Pattern-hiding Displays [applied] NIST-SP800-53-rev5_ac-11.1_assessment Blocks → AC-12 Session Termination [applied] NIST-SP800-53-rev5_ac-12_assessment Blocks → AC-12(01) User-initiated Logouts [applied] NIST-SP800-53-rev5_ac-12.1_assessment Blocks → AC-12(02) Termination Message [applied] NIST-SP800-53-rev5_ac-12.2_assessment Blocks → AC-12(03) Timeout Warning Message [applied] NIST-SP800-53-rev5_ac-12.3_assessment Blocks → AC-14 Permitted Actions Without Identification or Authentication [applied] NIST-SP800-53-rev5_ac-14_assessment Blocks → AC-16 Security and Privacy Attributes [applied] NIST-SP800-53-rev5_ac-16_assessment Blocks → AC-16(01) Dynamic Attribute Association [applied] NIST-SP800-53-rev5_ac-16.1_assessment Blocks → AC-16(02) Attribute Value Changes by Authorized Individuals [applied] NIST-SP800-53-rev5_ac-16.2_assessment Blocks → AC-16(03) Maintenance of Attribute Associations by System [applied] NIST-SP800-53-rev5_ac-16.3_assessment Blocks → AC-16(04) Association of Attributes by Authorized Individuals [applied] NIST-SP800-53-rev5_ac-16.4_assessment Blocks → AC-16(05) Attribute Displays on Objects to Be Output [applied] NIST-SP800-53-rev5_ac-16.5_assessment Blocks → AC-16(06) Maintenance of Attribute Association [applied] NIST-SP800-53-rev5_ac-16.6_assessment Blocks → AC-16(07) Consistent Attribute Interpretation [applied] NIST-SP800-53-rev5_ac-16.7_assessment Blocks → AC-16(08) Association Techniques and Technologies [applied] NIST-SP800-53-rev5_ac-16.8_assessment Blocks → AC-16(09) Attribute Reassignment — Regrading Mechanisms [applied] NIST-SP800-53-rev5_ac-16.9_assessment Blocks → AC-16(10) Attribute Configuration by Authorized Individuals [applied] NIST-SP800-53-rev5_ac-16.10_assessment Blocks → AC-17 Remote Access [applied] NIST-SP800-53-rev5_ac-17_assessment Blocks → AC-17(01) Monitoring and Control [applied] NIST-SP800-53-rev5_ac-17.1_assessment Blocks → AC-17(02) Protection of Confidentiality and Integrity Using Encryption [applied] NIST-SP800-53-rev5_ac-17.2_assessment Blocks → AC-17(03) Managed Access Control Points [applied] NIST-SP800-53-rev5_ac-17.3_assessment Blocks → AC-17(04) Privileged Commands and Access [applied] NIST-SP800-53-rev5_ac-17.4_assessment Blocks → AC-17(06) Protection of Mechanism Information [applied] NIST-SP800-53-rev5_ac-17.6_assessment Blocks → AC-17(09) Disconnect or Disable Access [applied] NIST-SP800-53-rev5_ac-17.9_assessment Blocks → AC-17(10) Authenticate Remote Commands [applied] NIST-SP800-53-rev5_ac-17.10_assessment Blocks → AC-18 Wireless Access [applied] NIST-SP800-53-rev5_ac-18_assessment Blocks → AC-18(01) Authentication and Encryption [applied] NIST-SP800-53-rev5_ac-18.1_assessment Blocks → AC-18(03) Disable Wireless Networking [applied] NIST-SP800-53-rev5_ac-18.3_assessment Blocks → AC-18(04) Restrict Configurations by Users [applied] NIST-SP800-53-rev5_ac-18.4_assessment Blocks → AC-18(05) Antennas and Transmission Power Levels [applied] NIST-SP800-53-rev5_ac-18.5_assessment Blocks → AC-19 Access Control for Mobile Devices [applied] NIST-SP800-53-rev5_ac-19_assessment Blocks → AC-19(04) Restrictions for Classified Information [applied] NIST-SP800-53-rev5_ac-19.4_assessment Blocks → AC-19(05) Full Device or Container-based Encryption [applied] NIST-SP800-53-rev5_ac-19.5_assessment Blocks → AC-20 Use of External Systems [applied] NIST-SP800-53-rev5_ac-20_assessment Blocks → AC-20(01) Limits on Authorized Use [applied] NIST-SP800-53-rev5_ac-20.1_assessment Blocks → AC-20(02) Portable Storage Devices — Restricted Use [applied] NIST-SP800-53-rev5_ac-20.2_assessment Blocks → AC-20(03) Non-organizationally Owned Systems — Restricted Use [applied] NIST-SP800-53-rev5_ac-20.3_assessment Blocks → AC-20(04) Network Accessible Storage Devices — Prohibited Use [applied] NIST-SP800-53-rev5_ac-20.4_assessment Blocks → AC-20(05) Portable Storage Devices — Prohibited Use [applied] NIST-SP800-53-rev5_ac-20.5_assessment Blocks → AC-21 Information Sharing [applied] NIST-SP800-53-rev5_ac-21_assessment Blocks → AC-21(01) Automated Decision Support [applied] NIST-SP800-53-rev5_ac-21.1_assessment Blocks → AC-21(02) Information Search and Retrieval [applied] NIST-SP800-53-rev5_ac-21.2_assessment Blocks → AC-22 Publicly Accessible Content [applied] NIST-SP800-53-rev5_ac-22_assessment Blocks → AC-23 Data Mining Protection [applied] NIST-SP800-53-rev5_ac-23_assessment Blocks → AC-24 Access Control Decisions [applied] NIST-SP800-53-rev5_ac-24_assessment Blocks → AC-24(01) Transmit Access Authorization Information [applied] NIST-SP800-53-rev5_ac-24.1_assessment Blocks → AC-24(02) No User or Process Identity [applied] NIST-SP800-53-rev5_ac-24.2_assessment Blocks → AC-25 Reference Monitor [applied] NIST-SP800-53-rev5_ac-25_assessment Blocks → AT-01 Policy and Procedures [applied] NIST-SP800-53-rev5_at-1_assessment Blocks → AT-02 Literacy Training and Awareness [applied] NIST-SP800-53-rev5_at-2_assessment Blocks → AT-02(01) Practical Exercises [applied] NIST-SP800-53-rev5_at-2.1_assessment Blocks → AT-02(02) Insider Threat [applied] NIST-SP800-53-rev5_at-2.2_assessment Blocks → AT-02(03) Social Engineering and Mining [applied] NIST-SP800-53-rev5_at-2.3_assessment Blocks → AT-02(04) Suspicious Communications and Anomalous System Behavior [applied] NIST-SP800-53-rev5_at-2.4_assessment Blocks → AT-02(05) Advanced Persistent Threat [applied] NIST-SP800-53-rev5_at-2.5_assessment Blocks → AT-02(06) Cyber Threat Environment [applied] NIST-SP800-53-rev5_at-2.6_assessment Blocks → AT-03 Role-based Training [applied] NIST-SP800-53-rev5_at-3_assessment Blocks → AT-03(01) Environmental Controls [applied] NIST-SP800-53-rev5_at-3.1_assessment Blocks → AT-03(02) Physical Security Controls [applied] NIST-SP800-53-rev5_at-3.2_assessment Blocks → AT-03(03) Practical Exercises [applied] NIST-SP800-53-rev5_at-3.3_assessment Blocks → AT-03(05) Processing Personally Identifiable Information [applied] NIST-SP800-53-rev5_at-3.5_assessment Blocks → AT-04 Training Records [applied] NIST-SP800-53-rev5_at-4_assessment Blocks → AT-06 Training Feedback [applied] NIST-SP800-53-rev5_at-6_assessment Blocks → AU-01 Policy and Procedures [applied] NIST-SP800-53-rev5_au-1_assessment Blocks → AU-02 Event Logging [applied] NIST-SP800-53-rev5_au-2_assessment Blocks → AU-03 Content of Audit Records [applied] NIST-SP800-53-rev5_au-3_assessment Blocks → AU-03(01) Additional Audit Information [applied] NIST-SP800-53-rev5_au-3.1_assessment Blocks → AU-03(03) Limit Personally Identifiable Information Elements [applied] NIST-SP800-53-rev5_au-3.3_assessment Blocks → AU-04 Audit Log Storage Capacity [applied] NIST-SP800-53-rev5_au-4_assessment Blocks → AU-04(01) Transfer to Alternate Storage [applied] NIST-SP800-53-rev5_au-4.1_assessment Blocks → AU-05 Response to Audit Logging Process Failures [applied] NIST-SP800-53-rev5_au-5_assessment Blocks → AU-05(01) Storage Capacity Warning [applied] NIST-SP800-53-rev5_au-5.1_assessment Blocks → AU-05(02) Real-time Alerts [applied] NIST-SP800-53-rev5_au-5.2_assessment Blocks → AU-05(03) Configurable Traffic Volume Thresholds [applied] NIST-SP800-53-rev5_au-5.3_assessment Blocks → AU-05(04) Shutdown on Failure [applied] NIST-SP800-53-rev5_au-5.4_assessment Blocks → AU-05(05) Alternate Audit Logging Capability [applied] NIST-SP800-53-rev5_au-5.5_assessment Blocks → AU-06 Audit Record Review, Analysis, and Reporting [applied] NIST-SP800-53-rev5_au-6_assessment Blocks → AU-06(01) Automated Process Integration [applied] NIST-SP800-53-rev5_au-6.1_assessment Blocks → AU-06(03) Correlate Audit Record Repositories [applied] NIST-SP800-53-rev5_au-6.3_assessment Blocks → AU-06(04) Central Review and Analysis [applied] NIST-SP800-53-rev5_au-6.4_assessment Blocks → AU-06(05) Integrated Analysis of Audit Records [applied] NIST-SP800-53-rev5_au-6.5_assessment Blocks → AU-06(06) Correlation with Physical Monitoring [applied] NIST-SP800-53-rev5_au-6.6_assessment Blocks → AU-06(07) Permitted Actions [applied] NIST-SP800-53-rev5_au-6.7_assessment Blocks → AU-06(08) Full Text Analysis of Privileged Commands [applied] NIST-SP800-53-rev5_au-6.8_assessment Blocks → AU-06(09) Correlation with Information from Nontechnical Sources [applied] NIST-SP800-53-rev5_au-6.9_assessment Blocks → AU-07 Audit Record Reduction and Report Generation [applied] NIST-SP800-53-rev5_au-7_assessment Blocks → AU-07(01) Automatic Processing [applied] NIST-SP800-53-rev5_au-7.1_assessment Blocks → AU-08 Time Stamps [applied] NIST-SP800-53-rev5_au-8_assessment Blocks → AU-09 Protection of Audit Information [applied] NIST-SP800-53-rev5_au-9_assessment Blocks → AU-09(01) Hardware Write-once Media [applied] NIST-SP800-53-rev5_au-9.1_assessment Blocks → AU-09(02) Store on Separate Physical Systems or Components [applied] NIST-SP800-53-rev5_au-9.2_assessment Blocks → AU-09(03) Cryptographic Protection [applied] NIST-SP800-53-rev5_au-9.3_assessment Blocks → AU-09(04) Access by Subset of Privileged Users [applied] NIST-SP800-53-rev5_au-9.4_assessment Blocks → AU-09(05) Dual Authorization [applied] NIST-SP800-53-rev5_au-9.5_assessment Blocks → AU-09(06) Read-only Access [applied] NIST-SP800-53-rev5_au-9.6_assessment Blocks → AU-09(07) Store on Component with Different Operating System [applied] NIST-SP800-53-rev5_au-9.7_assessment Blocks → AU-10 Non-repudiation [applied] NIST-SP800-53-rev5_au-10_assessment Blocks → AU-10(01) Association of Identities [applied] NIST-SP800-53-rev5_au-10.1_assessment Blocks → AU-10(02) Validate Binding of Information Producer Identity [applied] NIST-SP800-53-rev5_au-10.2_assessment Blocks → AU-10(03) Chain of Custody [applied] NIST-SP800-53-rev5_au-10.3_assessment Blocks → AU-10(04) Validate Binding of Information Reviewer Identity [applied] NIST-SP800-53-rev5_au-10.4_assessment Blocks → AU-11 Audit Record Retention [applied] NIST-SP800-53-rev5_au-11_assessment Blocks → AU-11(01) Long-term Retrieval Capability [applied] NIST-SP800-53-rev5_au-11.1_assessment Blocks → AU-12 Audit Record Generation [applied] NIST-SP800-53-rev5_au-12_assessment Blocks → AU-12(01) System-wide and Time-correlated Audit Trail [applied] NIST-SP800-53-rev5_au-12.1_assessment Blocks → AU-12(02) Standardized Formats [applied] NIST-SP800-53-rev5_au-12.2_assessment Blocks → AU-12(03) Changes by Authorized Individuals [applied] NIST-SP800-53-rev5_au-12.3_assessment Blocks → AU-12(04) Query Parameter Audits of Personally Identifiable Information [applied] NIST-SP800-53-rev5_au-12.4_assessment Blocks → AU-13 Monitoring for Information Disclosure [applied] NIST-SP800-53-rev5_au-13_assessment Blocks → AU-13(01) Use of Automated Tools [applied] NIST-SP800-53-rev5_au-13.1_assessment Blocks → AU-13(02) Review of Monitored Sites [applied] NIST-SP800-53-rev5_au-13.2_assessment Blocks → AU-13(03) Unauthorized Replication of Information [applied] NIST-SP800-53-rev5_au-13.3_assessment Blocks → AU-14 Session Audit [applied] NIST-SP800-53-rev5_au-14_assessment Blocks → AU-14(01) System Start-up [applied] NIST-SP800-53-rev5_au-14.1_assessment Blocks → AU-14(03) Remote Viewing and Listening [applied] NIST-SP800-53-rev5_au-14.3_assessment Blocks → AU-16 Cross-organizational Audit Logging [applied] NIST-SP800-53-rev5_au-16_assessment Blocks → AU-16(01) Identity Preservation [applied] NIST-SP800-53-rev5_au-16.1_assessment … and 814 more
New version: NIST SP 800-53 Rev. 5 HIGH Baseline (v1.5.0-4fbdb82960) – 371 new, 0 changed, 0 removed, 370 links	New version: NIST SP 800-53 Rev. 5 HIGH Baseline (v1.5.0-4fbdb82960) – 371 new, 0 changed, 0 removed, 370 links Document: NIST SP 800-53 Rev. 5 HIGH Baseline (https://raw.githubusercontent.com/usnistgov/oscal-content/v1.5.0/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_HIGH-baseline-resolved-profile_catalog.json) Version: v1.5.0-4fbdb82960 Project: NIST Import: #642, 20.10.2026 21:17, nist The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes). Review: 0 open, 741 applied, 0 rejected. New sections (371) NIST SP 800-53 Rev. 5 HIGH Baseline – Assessment Procedures [applied] NIST-SP800-53H-rev5_assessment-procedures AC-01 [H] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-1H_assessment AC-02 [H] Account Management – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-2H_assessment AC-02(01) [H] Automated System Account Management – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-2.1H_assessment AC-02(02) [H] Automated Temporary and Emergency Account Management – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-2.2H_assessment AC-02(03) [H] Disable Accounts – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-2.3H_assessment AC-02(04) [H] Automated Audit Actions – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-2.4H_assessment AC-02(05) [H] Inactivity Logout – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-2.5H_assessment AC-02(11) [H] Usage Conditions – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-2.11H_assessment AC-02(12) [H] Account Monitoring for Atypical Usage – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-2.12H_assessment AC-02(13) [H] Disable Accounts for High-risk Individuals – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-2.13H_assessment AC-03 [H] Access Enforcement – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-3H_assessment AC-04 [H] Information Flow Enforcement – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-4H_assessment AC-04(04) [H] Flow Control of Encrypted Information – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-4.4H_assessment AC-05 [H] Separation of Duties – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-5H_assessment AC-06 [H] Least Privilege – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-6H_assessment AC-06(01) [H] Authorize Access to Security Functions – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-6.1H_assessment AC-06(02) [H] Non-privileged Access for Nonsecurity Functions – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-6.2H_assessment AC-06(03) [H] Network Access to Privileged Commands – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-6.3H_assessment AC-06(05) [H] Privileged Accounts – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-6.5H_assessment AC-06(07) [H] Review of User Privileges – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-6.7H_assessment AC-06(09) [H] Log Use of Privileged Functions – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-6.9H_assessment AC-06(10) [H] Prohibit Non-privileged Users from Executing Privileged Functions – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-6.10H_assessment AC-07 [H] Unsuccessful Logon Attempts – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-7H_assessment AC-08 [H] System Use Notification – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-8H_assessment AC-10 [H] Concurrent Session Control – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-10H_assessment AC-11 [H] Device Lock – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-11H_assessment AC-11(01) [H] Pattern-hiding Displays – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-11.1H_assessment AC-12 [H] Session Termination – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-12H_assessment AC-14 [H] Permitted Actions Without Identification or Authentication – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-14H_assessment AC-17 [H] Remote Access – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-17H_assessment AC-17(01) [H] Monitoring and Control – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-17.1H_assessment AC-17(02) [H] Protection of Confidentiality and Integrity Using Encryption – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-17.2H_assessment AC-17(03) [H] Managed Access Control Points – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-17.3H_assessment AC-17(04) [H] Privileged Commands and Access – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-17.4H_assessment AC-18 [H] Wireless Access – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-18H_assessment AC-18(01) [H] Authentication and Encryption – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-18.1H_assessment AC-18(03) [H] Disable Wireless Networking – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-18.3H_assessment AC-18(04) [H] Restrict Configurations by Users – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-18.4H_assessment AC-18(05) [H] Antennas and Transmission Power Levels – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-18.5H_assessment AC-19 [H] Access Control for Mobile Devices – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-19H_assessment AC-19(05) [H] Full Device or Container-based Encryption – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-19.5H_assessment AC-20 [H] Use of External Systems – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-20H_assessment AC-20(01) [H] Limits on Authorized Use – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-20.1H_assessment AC-20(02) [H] Portable Storage Devices — Restricted Use – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-20.2H_assessment AC-21 [H] Information Sharing – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-21H_assessment AC-22 [H] Publicly Accessible Content – Assessment Procedure [applied] NIST-SP800-53H-rev5_ac-22H_assessment AT-01 [H] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53H-rev5_at-1H_assessment AT-02 [H] Literacy Training and Awareness – Assessment Procedure [applied] NIST-SP800-53H-rev5_at-2H_assessment AT-02(02) [H] Insider Threat – Assessment Procedure [applied] NIST-SP800-53H-rev5_at-2.2H_assessment AT-02(03) [H] Social Engineering and Mining – Assessment Procedure [applied] NIST-SP800-53H-rev5_at-2.3H_assessment AT-03 [H] Role-based Training – Assessment Procedure [applied] NIST-SP800-53H-rev5_at-3H_assessment AT-04 [H] Training Records – Assessment Procedure [applied] NIST-SP800-53H-rev5_at-4H_assessment AU-01 [H] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-1H_assessment AU-02 [H] Event Logging – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-2H_assessment AU-03 [H] Content of Audit Records – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-3H_assessment AU-03(01) [H] Additional Audit Information – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-3.1H_assessment AU-04 [H] Audit Log Storage Capacity – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-4H_assessment AU-05 [H] Response to Audit Logging Process Failures – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-5H_assessment AU-05(01) [H] Storage Capacity Warning – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-5.1H_assessment AU-05(02) [H] Real-time Alerts – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-5.2H_assessment AU-06 [H] Audit Record Review, Analysis, and Reporting – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-6H_assessment AU-06(01) [H] Automated Process Integration – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-6.1H_assessment AU-06(03) [H] Correlate Audit Record Repositories – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-6.3H_assessment AU-06(05) [H] Integrated Analysis of Audit Records – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-6.5H_assessment AU-06(06) [H] Correlation with Physical Monitoring – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-6.6H_assessment AU-07 [H] Audit Record Reduction and Report Generation – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-7H_assessment AU-07(01) [H] Automatic Processing – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-7.1H_assessment AU-08 [H] Time Stamps – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-8H_assessment AU-09 [H] Protection of Audit Information – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-9H_assessment AU-09(02) [H] Store on Separate Physical Systems or Components – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-9.2H_assessment AU-09(03) [H] Cryptographic Protection – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-9.3H_assessment AU-09(04) [H] Access by Subset of Privileged Users – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-9.4H_assessment AU-10 [H] Non-repudiation – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-10H_assessment AU-11 [H] Audit Record Retention – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-11H_assessment AU-12 [H] Audit Record Generation – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-12H_assessment AU-12(01) [H] System-wide and Time-correlated Audit Trail – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-12.1H_assessment AU-12(03) [H] Changes by Authorized Individuals – Assessment Procedure [applied] NIST-SP800-53H-rev5_au-12.3H_assessment CA-01 [H] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53H-rev5_ca-1H_assessment CA-02 [H] Control Assessments – Assessment Procedure [applied] NIST-SP800-53H-rev5_ca-2H_assessment CA-02(01) [H] Independent Assessors – Assessment Procedure [applied] NIST-SP800-53H-rev5_ca-2.1H_assessment CA-02(02) [H] Specialized Assessments – Assessment Procedure [applied] NIST-SP800-53H-rev5_ca-2.2H_assessment CA-03 [H] Information Exchange – Assessment Procedure [applied] NIST-SP800-53H-rev5_ca-3H_assessment CA-03(06) [H] Transfer Authorizations – Assessment Procedure [applied] NIST-SP800-53H-rev5_ca-3.6H_assessment CA-05 [H] Plan of Action and Milestones – Assessment Procedure [applied] NIST-SP800-53H-rev5_ca-5H_assessment CA-06 [H] Authorization – Assessment Procedure [applied] NIST-SP800-53H-rev5_ca-6H_assessment CA-07 [H] Continuous Monitoring – Assessment Procedure [applied] NIST-SP800-53H-rev5_ca-7H_assessment CA-07(01) [H] Independent Assessment – Assessment Procedure [applied] NIST-SP800-53H-rev5_ca-7.1H_assessment CA-07(04) [H] Risk Monitoring – Assessment Procedure [applied] NIST-SP800-53H-rev5_ca-7.4H_assessment CA-08 [H] Penetration Testing – Assessment Procedure [applied] NIST-SP800-53H-rev5_ca-8H_assessment CA-08(01) [H] Independent Penetration Testing Agent or Team – Assessment Procedure [applied] NIST-SP800-53H-rev5_ca-8.1H_assessment CA-09 [H] Internal System Connections – Assessment Procedure [applied] NIST-SP800-53H-rev5_ca-9H_assessment CM-01 [H] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-1H_assessment CM-02 [H] Baseline Configuration – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-2H_assessment CM-02(02) [H] Automation Support for Accuracy and Currency – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-2.2H_assessment CM-02(03) [H] Retention of Previous Configurations – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-2.3H_assessment CM-02(07) [H] Configure Systems and Components for High-risk Areas – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-2.7H_assessment CM-03 [H] Configuration Change Control – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-3H_assessment CM-03(01) [H] Automated Documentation, Notification, and Prohibition of Changes – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-3.1H_assessment CM-03(02) [H] Testing, Validation, and Documentation of Changes – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-3.2H_assessment CM-03(04) [H] Security and Privacy Representatives – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-3.4H_assessment CM-03(06) [H] Cryptography Management – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-3.6H_assessment CM-04 [H] Impact Analyses – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-4H_assessment CM-04(01) [H] Separate Test Environments – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-4.1H_assessment CM-04(02) [H] Verification of Controls – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-4.2H_assessment CM-05 [H] Access Restrictions for Change – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-5H_assessment CM-05(01) [H] Automated Access Enforcement and Audit Records – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-5.1H_assessment CM-06 [H] Configuration Settings – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-6H_assessment CM-06(01) [H] Automated Management, Application, and Verification – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-6.1H_assessment CM-06(02) [H] Respond to Unauthorized Changes – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-6.2H_assessment CM-07 [H] Least Functionality – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-7H_assessment CM-07(01) [H] Periodic Review – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-7.1H_assessment CM-07(02) [H] Prevent Program Execution – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-7.2H_assessment CM-07(05) [H] Authorized Software — Allow-by-exception – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-7.5H_assessment CM-08 [H] System Component Inventory – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-8H_assessment CM-08(01) [H] Updates During Installation and Removal – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-8.1H_assessment CM-08(02) [H] Automated Maintenance – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-8.2H_assessment CM-08(03) [H] Automated Unauthorized Component Detection – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-8.3H_assessment CM-08(04) [H] Accountability Information – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-8.4H_assessment CM-09 [H] Configuration Management Plan – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-9H_assessment CM-10 [H] Software Usage Restrictions – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-10H_assessment CM-11 [H] User-installed Software – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-11H_assessment CM-12 [H] Information Location – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-12H_assessment CM-12(01) [H] Automated Tools to Support Information Location – Assessment Procedure [applied] NIST-SP800-53H-rev5_cm-12.1H_assessment CP-01 [H] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-1H_assessment CP-02 [H] Contingency Plan – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-2H_assessment CP-02(01) [H] Coordinate with Related Plans – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-2.1H_assessment CP-02(02) [H] Capacity Planning – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-2.2H_assessment CP-02(03) [H] Resume Mission and Business Functions – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-2.3H_assessment CP-02(05) [H] Continue Mission and Business Functions – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-2.5H_assessment CP-02(08) [H] Identify Critical Assets – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-2.8H_assessment CP-03 [H] Contingency Training – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-3H_assessment CP-03(01) [H] Simulated Events – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-3.1H_assessment CP-04 [H] Contingency Plan Testing – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-4H_assessment CP-04(01) [H] Coordinate with Related Plans – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-4.1H_assessment CP-04(02) [H] Alternate Processing Site – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-4.2H_assessment CP-06 [H] Alternate Storage Site – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-6H_assessment CP-06(01) [H] Separation from Primary Site – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-6.1H_assessment CP-06(02) [H] Recovery Time and Recovery Point Objectives – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-6.2H_assessment CP-06(03) [H] Accessibility – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-6.3H_assessment CP-07 [H] Alternate Processing Site – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-7H_assessment CP-07(01) [H] Separation from Primary Site – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-7.1H_assessment CP-07(02) [H] Accessibility – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-7.2H_assessment CP-07(03) [H] Priority of Service – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-7.3H_assessment CP-07(04) [H] Preparation for Use – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-7.4H_assessment CP-08 [H] Telecommunications Services – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-8H_assessment CP-08(01) [H] Priority of Service Provisions – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-8.1H_assessment CP-08(02) [H] Single Points of Failure – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-8.2H_assessment CP-08(03) [H] Separation of Primary and Alternate Providers – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-8.3H_assessment CP-08(04) [H] Provider Contingency Plan – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-8.4H_assessment CP-09 [H] System Backup – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-9H_assessment CP-09(01) [H] Testing for Reliability and Integrity – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-9.1H_assessment CP-09(02) [H] Test Restoration Using Sampling – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-9.2H_assessment CP-09(03) [H] Separate Storage for Critical Information – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-9.3H_assessment CP-09(05) [H] Transfer to Alternate Storage Site – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-9.5H_assessment CP-09(08) [H] Cryptographic Protection – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-9.8H_assessment CP-10 [H] System Recovery and Reconstitution – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-10H_assessment CP-10(02) [H] Transaction Recovery – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-10.2H_assessment CP-10(04) [H] Restore Within Time Period – Assessment Procedure [applied] NIST-SP800-53H-rev5_cp-10.4H_assessment IA-01 [H] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-1H_assessment IA-02 [H] Identification and Authentication (Organizational Users) – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-2H_assessment IA-02(01) [H] Multi-factor Authentication to Privileged Accounts – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-2.1H_assessment IA-02(02) [H] Multi-factor Authentication to Non-privileged Accounts – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-2.2H_assessment IA-02(05) [H] Individual Authentication with Group Authentication – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-2.5H_assessment IA-02(08) [H] Access to Accounts — Replay Resistant – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-2.8H_assessment IA-02(12) [H] Acceptance of PIV Credentials – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-2.12H_assessment IA-03 [H] Device Identification and Authentication – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-3H_assessment IA-04 [H] Identifier Management – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-4H_assessment IA-04(04) [H] Identify User Status – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-4.4H_assessment IA-05 [H] Authenticator Management – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-5H_assessment IA-05(01) [H] Password-based Authentication – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-5.1H_assessment IA-05(02) [H] Public Key-based Authentication – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-5.2H_assessment IA-05(06) [H] Protection of Authenticators – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-5.6H_assessment IA-06 [H] Authentication Feedback – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-6H_assessment IA-07 [H] Cryptographic Module Authentication – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-7H_assessment IA-08 [H] Identification and Authentication (Non-organizational Users) – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-8H_assessment IA-08(01) [H] Acceptance of PIV Credentials from Other Agencies – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-8.1H_assessment IA-08(02) [H] Acceptance of External Authenticators – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-8.2H_assessment IA-08(04) [H] Use of Defined Profiles – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-8.4H_assessment IA-11 [H] Re-authentication – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-11H_assessment IA-12 [H] Identity Proofing – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-12H_assessment IA-12(02) [H] Identity Evidence – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-12.2H_assessment IA-12(03) [H] Identity Evidence Validation and Verification – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-12.3H_assessment IA-12(04) [H] In-person Validation and Verification – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-12.4H_assessment IA-12(05) [H] Address Confirmation – Assessment Procedure [applied] NIST-SP800-53H-rev5_ia-12.5H_assessment IR-01 [H] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53H-rev5_ir-1H_assessment IR-02 [H] Incident Response Training – Assessment Procedure [applied] NIST-SP800-53H-rev5_ir-2H_assessment IR-02(01) [H] Simulated Events – Assessment Procedure [applied] NIST-SP800-53H-rev5_ir-2.1H_assessment IR-02(02) [H] Automated Training Environments – Assessment Procedure [applied] NIST-SP800-53H-rev5_ir-2.2H_assessment IR-03 [H] Incident Response Testing – Assessment Procedure [applied] NIST-SP800-53H-rev5_ir-3H_assessment IR-03(02) [H] Coordination with Related Plans – Assessment Procedure [applied] NIST-SP800-53H-rev5_ir-3.2H_assessment IR-04 [H] Incident Handling – Assessment Procedure [applied] NIST-SP800-53H-rev5_ir-4H_assessment IR-04(01) [H] Automated Incident Handling Processes – Assessment Procedure [applied] NIST-SP800-53H-rev5_ir-4.1H_assessment IR-04(04) [H] Information Correlation – Assessment Procedure [applied] NIST-SP800-53H-rev5_ir-4.4H_assessment IR-04(11) [H] Integrated Incident Response Team – Assessment Procedure [applied] NIST-SP800-53H-rev5_ir-4.11H_assessment IR-05 [H] Incident Monitoring – Assessment Procedure [applied] NIST-SP800-53H-rev5_ir-5H_assessment IR-05(01) [H] Automated Tracking, Data Collection, and Analysis – Assessment Procedure [applied] NIST-SP800-53H-rev5_ir-5.1H_assessment IR-06 [H] Incident Reporting – Assessment Procedure [applied] NIST-SP800-53H-rev5_ir-6H_assessment IR-06(01) [H] Automated Reporting – Assessment Procedure [applied] NIST-SP800-53H-rev5_ir-6.1H_assessment IR-06(03) [H] Supply Chain Coordination – Assessment Procedure [applied] NIST-SP800-53H-rev5_ir-6.3H_assessment … and 171 more New links (370) Blocks → AC-01 [H] Policy and Procedures [applied] NIST-SP800-53H-rev5_ac-1H_assessment Blocks → AC-02 [H] Account Management [applied] NIST-SP800-53H-rev5_ac-2H_assessment Blocks → AC-02(01) [H] Automated System Account Management [applied] NIST-SP800-53H-rev5_ac-2.1H_assessment Blocks → AC-02(02) [H] Automated Temporary and Emergency Account Management [applied] NIST-SP800-53H-rev5_ac-2.2H_assessment Blocks → AC-02(03) [H] Disable Accounts [applied] NIST-SP800-53H-rev5_ac-2.3H_assessment Blocks → AC-02(04) [H] Automated Audit Actions [applied] NIST-SP800-53H-rev5_ac-2.4H_assessment Blocks → AC-02(05) [H] Inactivity Logout [applied] NIST-SP800-53H-rev5_ac-2.5H_assessment Blocks → AC-02(11) [H] Usage Conditions [applied] NIST-SP800-53H-rev5_ac-2.11H_assessment Blocks → AC-02(12) [H] Account Monitoring for Atypical Usage [applied] NIST-SP800-53H-rev5_ac-2.12H_assessment Blocks → AC-02(13) [H] Disable Accounts for High-risk Individuals [applied] NIST-SP800-53H-rev5_ac-2.13H_assessment Blocks → AC-03 [H] Access Enforcement [applied] NIST-SP800-53H-rev5_ac-3H_assessment Blocks → AC-04 [H] Information Flow Enforcement [applied] NIST-SP800-53H-rev5_ac-4H_assessment Blocks → AC-04(04) [H] Flow Control of Encrypted Information [applied] NIST-SP800-53H-rev5_ac-4.4H_assessment Blocks → AC-05 [H] Separation of Duties [applied] NIST-SP800-53H-rev5_ac-5H_assessment Blocks → AC-06 [H] Least Privilege [applied] NIST-SP800-53H-rev5_ac-6H_assessment Blocks → AC-06(01) [H] Authorize Access to Security Functions [applied] NIST-SP800-53H-rev5_ac-6.1H_assessment Blocks → AC-06(02) [H] Non-privileged Access for Nonsecurity Functions [applied] NIST-SP800-53H-rev5_ac-6.2H_assessment Blocks → AC-06(03) [H] Network Access to Privileged Commands [applied] NIST-SP800-53H-rev5_ac-6.3H_assessment Blocks → AC-06(05) [H] Privileged Accounts [applied] NIST-SP800-53H-rev5_ac-6.5H_assessment Blocks → AC-06(07) [H] Review of User Privileges [applied] NIST-SP800-53H-rev5_ac-6.7H_assessment Blocks → AC-06(09) [H] Log Use of Privileged Functions [applied] NIST-SP800-53H-rev5_ac-6.9H_assessment Blocks → AC-06(10) [H] Prohibit Non-privileged Users from Executing Privileged Functions [applied] NIST-SP800-53H-rev5_ac-6.10H_assessment Blocks → AC-07 [H] Unsuccessful Logon Attempts [applied] NIST-SP800-53H-rev5_ac-7H_assessment Blocks → AC-08 [H] System Use Notification [applied] NIST-SP800-53H-rev5_ac-8H_assessment Blocks → AC-10 [H] Concurrent Session Control [applied] NIST-SP800-53H-rev5_ac-10H_assessment Blocks → AC-11 [H] Device Lock [applied] NIST-SP800-53H-rev5_ac-11H_assessment Blocks → AC-11(01) [H] Pattern-hiding Displays [applied] NIST-SP800-53H-rev5_ac-11.1H_assessment Blocks → AC-12 [H] Session Termination [applied] NIST-SP800-53H-rev5_ac-12H_assessment Blocks → AC-14 [H] Permitted Actions Without Identification or Authentication [applied] NIST-SP800-53H-rev5_ac-14H_assessment Blocks → AC-17 [H] Remote Access [applied] NIST-SP800-53H-rev5_ac-17H_assessment Blocks → AC-17(01) [H] Monitoring and Control [applied] NIST-SP800-53H-rev5_ac-17.1H_assessment Blocks → AC-17(02) [H] Protection of Confidentiality and Integrity Using Encryption [applied] NIST-SP800-53H-rev5_ac-17.2H_assessment Blocks → AC-17(03) [H] Managed Access Control Points [applied] NIST-SP800-53H-rev5_ac-17.3H_assessment Blocks → AC-17(04) [H] Privileged Commands and Access [applied] NIST-SP800-53H-rev5_ac-17.4H_assessment Blocks → AC-18 [H] Wireless Access [applied] NIST-SP800-53H-rev5_ac-18H_assessment Blocks → AC-18(01) [H] Authentication and Encryption [applied] NIST-SP800-53H-rev5_ac-18.1H_assessment Blocks → AC-18(03) [H] Disable Wireless Networking [applied] NIST-SP800-53H-rev5_ac-18.3H_assessment Blocks → AC-18(04) [H] Restrict Configurations by Users [applied] NIST-SP800-53H-rev5_ac-18.4H_assessment Blocks → AC-18(05) [H] Antennas and Transmission Power Levels [applied] NIST-SP800-53H-rev5_ac-18.5H_assessment Blocks → AC-19 [H] Access Control for Mobile Devices [applied] NIST-SP800-53H-rev5_ac-19H_assessment Blocks → AC-19(05) [H] Full Device or Container-based Encryption [applied] NIST-SP800-53H-rev5_ac-19.5H_assessment Blocks → AC-20 [H] Use of External Systems [applied] NIST-SP800-53H-rev5_ac-20H_assessment Blocks → AC-20(01) [H] Limits on Authorized Use [applied] NIST-SP800-53H-rev5_ac-20.1H_assessment Blocks → AC-20(02) [H] Portable Storage Devices — Restricted Use [applied] NIST-SP800-53H-rev5_ac-20.2H_assessment Blocks → AC-21 [H] Information Sharing [applied] NIST-SP800-53H-rev5_ac-21H_assessment Blocks → AC-22 [H] Publicly Accessible Content [applied] NIST-SP800-53H-rev5_ac-22H_assessment Blocks → AT-01 [H] Policy and Procedures [applied] NIST-SP800-53H-rev5_at-1H_assessment Blocks → AT-02 [H] Literacy Training and Awareness [applied] NIST-SP800-53H-rev5_at-2H_assessment Blocks → AT-02(02) [H] Insider Threat [applied] NIST-SP800-53H-rev5_at-2.2H_assessment Blocks → AT-02(03) [H] Social Engineering and Mining [applied] NIST-SP800-53H-rev5_at-2.3H_assessment Blocks → AT-03 [H] Role-based Training [applied] NIST-SP800-53H-rev5_at-3H_assessment Blocks → AT-04 [H] Training Records [applied] NIST-SP800-53H-rev5_at-4H_assessment Blocks → AU-01 [H] Policy and Procedures [applied] NIST-SP800-53H-rev5_au-1H_assessment Blocks → AU-02 [H] Event Logging [applied] NIST-SP800-53H-rev5_au-2H_assessment Blocks → AU-03 [H] Content of Audit Records [applied] NIST-SP800-53H-rev5_au-3H_assessment Blocks → AU-03(01) [H] Additional Audit Information [applied] NIST-SP800-53H-rev5_au-3.1H_assessment Blocks → AU-04 [H] Audit Log Storage Capacity [applied] NIST-SP800-53H-rev5_au-4H_assessment Blocks → AU-05 [H] Response to Audit Logging Process Failures [applied] NIST-SP800-53H-rev5_au-5H_assessment Blocks → AU-05(01) [H] Storage Capacity Warning [applied] NIST-SP800-53H-rev5_au-5.1H_assessment Blocks → AU-05(02) [H] Real-time Alerts [applied] NIST-SP800-53H-rev5_au-5.2H_assessment Blocks → AU-06 [H] Audit Record Review, Analysis, and Reporting [applied] NIST-SP800-53H-rev5_au-6H_assessment Blocks → AU-06(01) [H] Automated Process Integration [applied] NIST-SP800-53H-rev5_au-6.1H_assessment Blocks → AU-06(03) [H] Correlate Audit Record Repositories [applied] NIST-SP800-53H-rev5_au-6.3H_assessment Blocks → AU-06(05) [H] Integrated Analysis of Audit Records [applied] NIST-SP800-53H-rev5_au-6.5H_assessment Blocks → AU-06(06) [H] Correlation with Physical Monitoring [applied] NIST-SP800-53H-rev5_au-6.6H_assessment Blocks → AU-07 [H] Audit Record Reduction and Report Generation [applied] NIST-SP800-53H-rev5_au-7H_assessment Blocks → AU-07(01) [H] Automatic Processing [applied] NIST-SP800-53H-rev5_au-7.1H_assessment Blocks → AU-08 [H] Time Stamps [applied] NIST-SP800-53H-rev5_au-8H_assessment Blocks → AU-09 [H] Protection of Audit Information [applied] NIST-SP800-53H-rev5_au-9H_assessment Blocks → AU-09(02) [H] Store on Separate Physical Systems or Components [applied] NIST-SP800-53H-rev5_au-9.2H_assessment Blocks → AU-09(03) [H] Cryptographic Protection [applied] NIST-SP800-53H-rev5_au-9.3H_assessment Blocks → AU-09(04) [H] Access by Subset of Privileged Users [applied] NIST-SP800-53H-rev5_au-9.4H_assessment Blocks → AU-10 [H] Non-repudiation [applied] NIST-SP800-53H-rev5_au-10H_assessment Blocks → AU-11 [H] Audit Record Retention [applied] NIST-SP800-53H-rev5_au-11H_assessment Blocks → AU-12 [H] Audit Record Generation [applied] NIST-SP800-53H-rev5_au-12H_assessment Blocks → AU-12(01) [H] System-wide and Time-correlated Audit Trail [applied] NIST-SP800-53H-rev5_au-12.1H_assessment Blocks → AU-12(03) [H] Changes by Authorized Individuals [applied] NIST-SP800-53H-rev5_au-12.3H_assessment Blocks → CA-01 [H] Policy and Procedures [applied] NIST-SP800-53H-rev5_ca-1H_assessment Blocks → CA-02 [H] Control Assessments [applied] NIST-SP800-53H-rev5_ca-2H_assessment Blocks → CA-02(01) [H] Independent Assessors [applied] NIST-SP800-53H-rev5_ca-2.1H_assessment Blocks → CA-02(02) [H] Specialized Assessments [applied] NIST-SP800-53H-rev5_ca-2.2H_assessment Blocks → CA-03 [H] Information Exchange [applied] NIST-SP800-53H-rev5_ca-3H_assessment Blocks → CA-03(06) [H] Transfer Authorizations [applied] NIST-SP800-53H-rev5_ca-3.6H_assessment Blocks → CA-05 [H] Plan of Action and Milestones [applied] NIST-SP800-53H-rev5_ca-5H_assessment Blocks → CA-06 [H] Authorization [applied] NIST-SP800-53H-rev5_ca-6H_assessment Blocks → CA-07 [H] Continuous Monitoring [applied] NIST-SP800-53H-rev5_ca-7H_assessment Blocks → CA-07(01) [H] Independent Assessment [applied] NIST-SP800-53H-rev5_ca-7.1H_assessment Blocks → CA-07(04) [H] Risk Monitoring [applied] NIST-SP800-53H-rev5_ca-7.4H_assessment Blocks → CA-08 [H] Penetration Testing [applied] NIST-SP800-53H-rev5_ca-8H_assessment Blocks → CA-08(01) [H] Independent Penetration Testing Agent or Team [applied] NIST-SP800-53H-rev5_ca-8.1H_assessment Blocks → CA-09 [H] Internal System Connections [applied] NIST-SP800-53H-rev5_ca-9H_assessment Blocks → CM-01 [H] Policy and Procedures [applied] NIST-SP800-53H-rev5_cm-1H_assessment Blocks → CM-02 [H] Baseline Configuration [applied] NIST-SP800-53H-rev5_cm-2H_assessment Blocks → CM-02(02) [H] Automation Support for Accuracy and Currency [applied] NIST-SP800-53H-rev5_cm-2.2H_assessment Blocks → CM-02(03) [H] Retention of Previous Configurations [applied] NIST-SP800-53H-rev5_cm-2.3H_assessment Blocks → CM-02(07) [H] Configure Systems and Components for High-risk Areas [applied] NIST-SP800-53H-rev5_cm-2.7H_assessment Blocks → CM-03 [H] Configuration Change Control [applied] NIST-SP800-53H-rev5_cm-3H_assessment Blocks → CM-03(01) [H] Automated Documentation, Notification, and Prohibition of Changes [applied] NIST-SP800-53H-rev5_cm-3.1H_assessment Blocks → CM-03(02) [H] Testing, Validation, and Documentation of Changes [applied] NIST-SP800-53H-rev5_cm-3.2H_assessment Blocks → CM-03(04) [H] Security and Privacy Representatives [applied] NIST-SP800-53H-rev5_cm-3.4H_assessment Blocks → CM-03(06) [H] Cryptography Management [applied] NIST-SP800-53H-rev5_cm-3.6H_assessment Blocks → CM-04 [H] Impact Analyses [applied] NIST-SP800-53H-rev5_cm-4H_assessment Blocks → CM-04(01) [H] Separate Test Environments [applied] NIST-SP800-53H-rev5_cm-4.1H_assessment Blocks → CM-04(02) [H] Verification of Controls [applied] NIST-SP800-53H-rev5_cm-4.2H_assessment Blocks → CM-05 [H] Access Restrictions for Change [applied] NIST-SP800-53H-rev5_cm-5H_assessment Blocks → CM-05(01) [H] Automated Access Enforcement and Audit Records [applied] NIST-SP800-53H-rev5_cm-5.1H_assessment Blocks → CM-06 [H] Configuration Settings [applied] NIST-SP800-53H-rev5_cm-6H_assessment Blocks → CM-06(01) [H] Automated Management, Application, and Verification [applied] NIST-SP800-53H-rev5_cm-6.1H_assessment Blocks → CM-06(02) [H] Respond to Unauthorized Changes [applied] NIST-SP800-53H-rev5_cm-6.2H_assessment Blocks → CM-07 [H] Least Functionality [applied] NIST-SP800-53H-rev5_cm-7H_assessment Blocks → CM-07(01) [H] Periodic Review [applied] NIST-SP800-53H-rev5_cm-7.1H_assessment Blocks → CM-07(02) [H] Prevent Program Execution [applied] NIST-SP800-53H-rev5_cm-7.2H_assessment Blocks → CM-07(05) [H] Authorized Software — Allow-by-exception [applied] NIST-SP800-53H-rev5_cm-7.5H_assessment Blocks → CM-08 [H] System Component Inventory [applied] NIST-SP800-53H-rev5_cm-8H_assessment Blocks → CM-08(01) [H] Updates During Installation and Removal [applied] NIST-SP800-53H-rev5_cm-8.1H_assessment Blocks → CM-08(02) [H] Automated Maintenance [applied] NIST-SP800-53H-rev5_cm-8.2H_assessment Blocks → CM-08(03) [H] Automated Unauthorized Component Detection [applied] NIST-SP800-53H-rev5_cm-8.3H_assessment Blocks → CM-08(04) [H] Accountability Information [applied] NIST-SP800-53H-rev5_cm-8.4H_assessment Blocks → CM-09 [H] Configuration Management Plan [applied] NIST-SP800-53H-rev5_cm-9H_assessment Blocks → CM-10 [H] Software Usage Restrictions [applied] NIST-SP800-53H-rev5_cm-10H_assessment Blocks → CM-11 [H] User-installed Software [applied] NIST-SP800-53H-rev5_cm-11H_assessment Blocks → CM-12 [H] Information Location [applied] NIST-SP800-53H-rev5_cm-12H_assessment Blocks → CM-12(01) [H] Automated Tools to Support Information Location [applied] NIST-SP800-53H-rev5_cm-12.1H_assessment Blocks → CP-01 [H] Policy and Procedures [applied] NIST-SP800-53H-rev5_cp-1H_assessment Blocks → CP-02 [H] Contingency Plan [applied] NIST-SP800-53H-rev5_cp-2H_assessment Blocks → CP-02(01) [H] Coordinate with Related Plans [applied] NIST-SP800-53H-rev5_cp-2.1H_assessment Blocks → CP-02(02) [H] Capacity Planning [applied] NIST-SP800-53H-rev5_cp-2.2H_assessment Blocks → CP-02(03) [H] Resume Mission and Business Functions [applied] NIST-SP800-53H-rev5_cp-2.3H_assessment Blocks → CP-02(05) [H] Continue Mission and Business Functions [applied] NIST-SP800-53H-rev5_cp-2.5H_assessment Blocks → CP-02(08) [H] Identify Critical Assets [applied] NIST-SP800-53H-rev5_cp-2.8H_assessment Blocks → CP-03 [H] Contingency Training [applied] NIST-SP800-53H-rev5_cp-3H_assessment Blocks → CP-03(01) [H] Simulated Events [applied] NIST-SP800-53H-rev5_cp-3.1H_assessment Blocks → CP-04 [H] Contingency Plan Testing [applied] NIST-SP800-53H-rev5_cp-4H_assessment Blocks → CP-04(01) [H] Coordinate with Related Plans [applied] NIST-SP800-53H-rev5_cp-4.1H_assessment Blocks → CP-04(02) [H] Alternate Processing Site [applied] NIST-SP800-53H-rev5_cp-4.2H_assessment Blocks → CP-06 [H] Alternate Storage Site [applied] NIST-SP800-53H-rev5_cp-6H_assessment Blocks → CP-06(01) [H] Separation from Primary Site [applied] NIST-SP800-53H-rev5_cp-6.1H_assessment Blocks → CP-06(02) [H] Recovery Time and Recovery Point Objectives [applied] NIST-SP800-53H-rev5_cp-6.2H_assessment Blocks → CP-06(03) [H] Accessibility [applied] NIST-SP800-53H-rev5_cp-6.3H_assessment Blocks → CP-07 [H] Alternate Processing Site [applied] NIST-SP800-53H-rev5_cp-7H_assessment Blocks → CP-07(01) [H] Separation from Primary Site [applied] NIST-SP800-53H-rev5_cp-7.1H_assessment Blocks → CP-07(02) [H] Accessibility [applied] NIST-SP800-53H-rev5_cp-7.2H_assessment Blocks → CP-07(03) [H] Priority of Service [applied] NIST-SP800-53H-rev5_cp-7.3H_assessment Blocks → CP-07(04) [H] Preparation for Use [applied] NIST-SP800-53H-rev5_cp-7.4H_assessment Blocks → CP-08 [H] Telecommunications Services [applied] NIST-SP800-53H-rev5_cp-8H_assessment Blocks → CP-08(01) [H] Priority of Service Provisions [applied] NIST-SP800-53H-rev5_cp-8.1H_assessment Blocks → CP-08(02) [H] Single Points of Failure [applied] NIST-SP800-53H-rev5_cp-8.2H_assessment Blocks → CP-08(03) [H] Separation of Primary and Alternate Providers [applied] NIST-SP800-53H-rev5_cp-8.3H_assessment Blocks → CP-08(04) [H] Provider Contingency Plan [applied] NIST-SP800-53H-rev5_cp-8.4H_assessment Blocks → CP-09 [H] System Backup [applied] NIST-SP800-53H-rev5_cp-9H_assessment Blocks → CP-09(01) [H] Testing for Reliability and Integrity [applied] NIST-SP800-53H-rev5_cp-9.1H_assessment Blocks → CP-09(02) [H] Test Restoration Using Sampling [applied] NIST-SP800-53H-rev5_cp-9.2H_assessment Blocks → CP-09(03) [H] Separate Storage for Critical Information [applied] NIST-SP800-53H-rev5_cp-9.3H_assessment Blocks → CP-09(05) [H] Transfer to Alternate Storage Site [applied] NIST-SP800-53H-rev5_cp-9.5H_assessment Blocks → CP-09(08) [H] Cryptographic Protection [applied] NIST-SP800-53H-rev5_cp-9.8H_assessment Blocks → CP-10 [H] System Recovery and Reconstitution [applied] NIST-SP800-53H-rev5_cp-10H_assessment Blocks → CP-10(02) [H] Transaction Recovery [applied] NIST-SP800-53H-rev5_cp-10.2H_assessment Blocks → CP-10(04) [H] Restore Within Time Period [applied] NIST-SP800-53H-rev5_cp-10.4H_assessment Blocks → IA-01 [H] Policy and Procedures [applied] NIST-SP800-53H-rev5_ia-1H_assessment Blocks → IA-02 [H] Identification and Authentication (Organizational Users) [applied] NIST-SP800-53H-rev5_ia-2H_assessment Blocks → IA-02(01) [H] Multi-factor Authentication to Privileged Accounts [applied] NIST-SP800-53H-rev5_ia-2.1H_assessment Blocks → IA-02(02) [H] Multi-factor Authentication to Non-privileged Accounts [applied] NIST-SP800-53H-rev5_ia-2.2H_assessment Blocks → IA-02(05) [H] Individual Authentication with Group Authentication [applied] NIST-SP800-53H-rev5_ia-2.5H_assessment Blocks → IA-02(08) [H] Access to Accounts — Replay Resistant [applied] NIST-SP800-53H-rev5_ia-2.8H_assessment Blocks → IA-02(12) [H] Acceptance of PIV Credentials [applied] NIST-SP800-53H-rev5_ia-2.12H_assessment Blocks → IA-03 [H] Device Identification and Authentication [applied] NIST-SP800-53H-rev5_ia-3H_assessment Blocks → IA-04 [H] Identifier Management [applied] NIST-SP800-53H-rev5_ia-4H_assessment Blocks → IA-04(04) [H] Identify User Status [applied] NIST-SP800-53H-rev5_ia-4.4H_assessment Blocks → IA-05 [H] Authenticator Management [applied] NIST-SP800-53H-rev5_ia-5H_assessment Blocks → IA-05(01) [H] Password-based Authentication [applied] NIST-SP800-53H-rev5_ia-5.1H_assessment Blocks → IA-05(02) [H] Public Key-based Authentication [applied] NIST-SP800-53H-rev5_ia-5.2H_assessment Blocks → IA-05(06) [H] Protection of Authenticators [applied] NIST-SP800-53H-rev5_ia-5.6H_assessment Blocks → IA-06 [H] Authentication Feedback [applied] NIST-SP800-53H-rev5_ia-6H_assessment Blocks → IA-07 [H] Cryptographic Module Authentication [applied] NIST-SP800-53H-rev5_ia-7H_assessment Blocks → IA-08 [H] Identification and Authentication (Non-organizational Users) [applied] NIST-SP800-53H-rev5_ia-8H_assessment Blocks → IA-08(01) [H] Acceptance of PIV Credentials from Other Agencies [applied] NIST-SP800-53H-rev5_ia-8.1H_assessment Blocks → IA-08(02) [H] Acceptance of External Authenticators [applied] NIST-SP800-53H-rev5_ia-8.2H_assessment Blocks → IA-08(04) [H] Use of Defined Profiles [applied] NIST-SP800-53H-rev5_ia-8.4H_assessment Blocks → IA-11 [H] Re-authentication [applied] NIST-SP800-53H-rev5_ia-11H_assessment Blocks → IA-12 [H] Identity Proofing [applied] NIST-SP800-53H-rev5_ia-12H_assessment Blocks → IA-12(02) [H] Identity Evidence [applied] NIST-SP800-53H-rev5_ia-12.2H_assessment Blocks → IA-12(03) [H] Identity Evidence Validation and Verification [applied] NIST-SP800-53H-rev5_ia-12.3H_assessment Blocks → IA-12(04) [H] In-person Validation and Verification [applied] NIST-SP800-53H-rev5_ia-12.4H_assessment Blocks → IA-12(05) [H] Address Confirmation [applied] NIST-SP800-53H-rev5_ia-12.5H_assessment Blocks → IR-01 [H] Policy and Procedures [applied] NIST-SP800-53H-rev5_ir-1H_assessment Blocks → IR-02 [H] Incident Response Training [applied] NIST-SP800-53H-rev5_ir-2H_assessment Blocks → IR-02(01) [H] Simulated Events [applied] NIST-SP800-53H-rev5_ir-2.1H_assessment Blocks → IR-02(02) [H] Automated Training Environments [applied] NIST-SP800-53H-rev5_ir-2.2H_assessment Blocks → IR-03 [H] Incident Response Testing [applied] NIST-SP800-53H-rev5_ir-3H_assessment Blocks → IR-03(02) [H] Coordination with Related Plans [applied] NIST-SP800-53H-rev5_ir-3.2H_assessment Blocks → IR-04 [H] Incident Handling [applied] NIST-SP800-53H-rev5_ir-4H_assessment Blocks → IR-04(01) [H] Automated Incident Handling Processes [applied] NIST-SP800-53H-rev5_ir-4.1H_assessment Blocks → IR-04(04) [H] Information Correlation [applied] NIST-SP800-53H-rev5_ir-4.4H_assessment Blocks → IR-04(11) [H] Integrated Incident Response Team [applied] NIST-SP800-53H-rev5_ir-4.11H_assessment Blocks → IR-05 [H] Incident Monitoring [applied] NIST-SP800-53H-rev5_ir-5H_assessment Blocks → IR-05(01) [H] Automated Tracking, Data Collection, and Analysis [applied] NIST-SP800-53H-rev5_ir-5.1H_assessment Blocks → IR-06 [H] Incident Reporting [applied] NIST-SP800-53H-rev5_ir-6H_assessment Blocks → IR-06(01) [H] Automated Reporting [applied] NIST-SP800-53H-rev5_ir-6.1H_assessment Blocks → IR-06(03) [H] Supply Chain Coordination [applied] NIST-SP800-53H-rev5_ir-6.3H_assessment Blocks → IR-07 [H] Incident Response Assistance [applied] NIST-SP800-53H-rev5_ir-7H_assessment … and 170 more
New version: NIST SP 800-53 Rev. 5 MODERATE Baseline (v1.5.0-7b754e4c16) – 288 new, 0 changed, 0 removed, 287 links	New version: NIST SP 800-53 Rev. 5 MODERATE Baseline (v1.5.0-7b754e4c16) – 288 new, 0 changed, 0 removed, 287 links Document: NIST SP 800-53 Rev. 5 MODERATE Baseline (https://raw.githubusercontent.com/usnistgov/oscal-content/v1.5.0/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_MODERATE-baseline-resolved-profile_catalog.json) Version: v1.5.0-7b754e4c16 Project: NIST Import: #643, 20.10.2026 21:17, nist The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes). Review: 0 open, 575 applied, 0 rejected. New sections (288) NIST SP 800-53 Rev. 5 MODERATE Baseline – Assessment Procedures [applied] NIST-SP800-53M-rev5_assessment-procedures AC-01 [M] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-1M_assessment AC-02 [M] Account Management – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-2M_assessment AC-02(01) [M] Automated System Account Management – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-2.1M_assessment AC-02(02) [M] Automated Temporary and Emergency Account Management – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-2.2M_assessment AC-02(03) [M] Disable Accounts – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-2.3M_assessment AC-02(04) [M] Automated Audit Actions – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-2.4M_assessment AC-02(05) [M] Inactivity Logout – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-2.5M_assessment AC-02(13) [M] Disable Accounts for High-risk Individuals – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-2.13M_assessment AC-03 [M] Access Enforcement – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-3M_assessment AC-04 [M] Information Flow Enforcement – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-4M_assessment AC-05 [M] Separation of Duties – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-5M_assessment AC-06 [M] Least Privilege – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-6M_assessment AC-06(01) [M] Authorize Access to Security Functions – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-6.1M_assessment AC-06(02) [M] Non-privileged Access for Nonsecurity Functions – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-6.2M_assessment AC-06(05) [M] Privileged Accounts – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-6.5M_assessment AC-06(07) [M] Review of User Privileges – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-6.7M_assessment AC-06(09) [M] Log Use of Privileged Functions – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-6.9M_assessment AC-06(10) [M] Prohibit Non-privileged Users from Executing Privileged Functions – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-6.10M_assessment AC-07 [M] Unsuccessful Logon Attempts – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-7M_assessment AC-08 [M] System Use Notification – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-8M_assessment AC-11 [M] Device Lock – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-11M_assessment AC-11(01) [M] Pattern-hiding Displays – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-11.1M_assessment AC-12 [M] Session Termination – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-12M_assessment AC-14 [M] Permitted Actions Without Identification or Authentication – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-14M_assessment AC-17 [M] Remote Access – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-17M_assessment AC-17(01) [M] Monitoring and Control – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-17.1M_assessment AC-17(02) [M] Protection of Confidentiality and Integrity Using Encryption – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-17.2M_assessment AC-17(03) [M] Managed Access Control Points – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-17.3M_assessment AC-17(04) [M] Privileged Commands and Access – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-17.4M_assessment AC-18 [M] Wireless Access – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-18M_assessment AC-18(01) [M] Authentication and Encryption – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-18.1M_assessment AC-18(03) [M] Disable Wireless Networking – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-18.3M_assessment AC-19 [M] Access Control for Mobile Devices – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-19M_assessment AC-19(05) [M] Full Device or Container-based Encryption – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-19.5M_assessment AC-20 [M] Use of External Systems – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-20M_assessment AC-20(01) [M] Limits on Authorized Use – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-20.1M_assessment AC-20(02) [M] Portable Storage Devices — Restricted Use – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-20.2M_assessment AC-21 [M] Information Sharing – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-21M_assessment AC-22 [M] Publicly Accessible Content – Assessment Procedure [applied] NIST-SP800-53M-rev5_ac-22M_assessment AT-01 [M] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53M-rev5_at-1M_assessment AT-02 [M] Literacy Training and Awareness – Assessment Procedure [applied] NIST-SP800-53M-rev5_at-2M_assessment AT-02(02) [M] Insider Threat – Assessment Procedure [applied] NIST-SP800-53M-rev5_at-2.2M_assessment AT-02(03) [M] Social Engineering and Mining – Assessment Procedure [applied] NIST-SP800-53M-rev5_at-2.3M_assessment AT-03 [M] Role-based Training – Assessment Procedure [applied] NIST-SP800-53M-rev5_at-3M_assessment AT-04 [M] Training Records – Assessment Procedure [applied] NIST-SP800-53M-rev5_at-4M_assessment AU-01 [M] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53M-rev5_au-1M_assessment AU-02 [M] Event Logging – Assessment Procedure [applied] NIST-SP800-53M-rev5_au-2M_assessment AU-03 [M] Content of Audit Records – Assessment Procedure [applied] NIST-SP800-53M-rev5_au-3M_assessment AU-03(01) [M] Additional Audit Information – Assessment Procedure [applied] NIST-SP800-53M-rev5_au-3.1M_assessment AU-04 [M] Audit Log Storage Capacity – Assessment Procedure [applied] NIST-SP800-53M-rev5_au-4M_assessment AU-05 [M] Response to Audit Logging Process Failures – Assessment Procedure [applied] NIST-SP800-53M-rev5_au-5M_assessment AU-06 [M] Audit Record Review, Analysis, and Reporting – Assessment Procedure [applied] NIST-SP800-53M-rev5_au-6M_assessment AU-06(01) [M] Automated Process Integration – Assessment Procedure [applied] NIST-SP800-53M-rev5_au-6.1M_assessment AU-06(03) [M] Correlate Audit Record Repositories – Assessment Procedure [applied] NIST-SP800-53M-rev5_au-6.3M_assessment AU-07 [M] Audit Record Reduction and Report Generation – Assessment Procedure [applied] NIST-SP800-53M-rev5_au-7M_assessment AU-07(01) [M] Automatic Processing – Assessment Procedure [applied] NIST-SP800-53M-rev5_au-7.1M_assessment AU-08 [M] Time Stamps – Assessment Procedure [applied] NIST-SP800-53M-rev5_au-8M_assessment AU-09 [M] Protection of Audit Information – Assessment Procedure [applied] NIST-SP800-53M-rev5_au-9M_assessment AU-09(04) [M] Access by Subset of Privileged Users – Assessment Procedure [applied] NIST-SP800-53M-rev5_au-9.4M_assessment AU-11 [M] Audit Record Retention – Assessment Procedure [applied] NIST-SP800-53M-rev5_au-11M_assessment AU-12 [M] Audit Record Generation – Assessment Procedure [applied] NIST-SP800-53M-rev5_au-12M_assessment CA-01 [M] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53M-rev5_ca-1M_assessment CA-02 [M] Control Assessments – Assessment Procedure [applied] NIST-SP800-53M-rev5_ca-2M_assessment CA-02(01) [M] Independent Assessors – Assessment Procedure [applied] NIST-SP800-53M-rev5_ca-2.1M_assessment CA-03 [M] Information Exchange – Assessment Procedure [applied] NIST-SP800-53M-rev5_ca-3M_assessment CA-05 [M] Plan of Action and Milestones – Assessment Procedure [applied] NIST-SP800-53M-rev5_ca-5M_assessment CA-06 [M] Authorization – Assessment Procedure [applied] NIST-SP800-53M-rev5_ca-6M_assessment CA-07 [M] Continuous Monitoring – Assessment Procedure [applied] NIST-SP800-53M-rev5_ca-7M_assessment CA-07(01) [M] Independent Assessment – Assessment Procedure [applied] NIST-SP800-53M-rev5_ca-7.1M_assessment CA-07(04) [M] Risk Monitoring – Assessment Procedure [applied] NIST-SP800-53M-rev5_ca-7.4M_assessment CA-09 [M] Internal System Connections – Assessment Procedure [applied] NIST-SP800-53M-rev5_ca-9M_assessment CM-01 [M] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-1M_assessment CM-02 [M] Baseline Configuration – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-2M_assessment CM-02(02) [M] Automation Support for Accuracy and Currency – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-2.2M_assessment CM-02(03) [M] Retention of Previous Configurations – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-2.3M_assessment CM-02(07) [M] Configure Systems and Components for High-risk Areas – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-2.7M_assessment CM-03 [M] Configuration Change Control – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-3M_assessment CM-03(02) [M] Testing, Validation, and Documentation of Changes – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-3.2M_assessment CM-03(04) [M] Security and Privacy Representatives – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-3.4M_assessment CM-04 [M] Impact Analyses – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-4M_assessment CM-04(02) [M] Verification of Controls – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-4.2M_assessment CM-05 [M] Access Restrictions for Change – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-5M_assessment CM-06 [M] Configuration Settings – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-6M_assessment CM-07 [M] Least Functionality – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-7M_assessment CM-07(01) [M] Periodic Review – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-7.1M_assessment CM-07(02) [M] Prevent Program Execution – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-7.2M_assessment CM-07(05) [M] Authorized Software — Allow-by-exception – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-7.5M_assessment CM-08 [M] System Component Inventory – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-8M_assessment CM-08(01) [M] Updates During Installation and Removal – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-8.1M_assessment CM-08(03) [M] Automated Unauthorized Component Detection – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-8.3M_assessment CM-09 [M] Configuration Management Plan – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-9M_assessment CM-10 [M] Software Usage Restrictions – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-10M_assessment CM-11 [M] User-installed Software – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-11M_assessment CM-12 [M] Information Location – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-12M_assessment CM-12(01) [M] Automated Tools to Support Information Location – Assessment Procedure [applied] NIST-SP800-53M-rev5_cm-12.1M_assessment CP-01 [M] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-1M_assessment CP-02 [M] Contingency Plan – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-2M_assessment CP-02(01) [M] Coordinate with Related Plans – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-2.1M_assessment CP-02(03) [M] Resume Mission and Business Functions – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-2.3M_assessment CP-02(08) [M] Identify Critical Assets – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-2.8M_assessment CP-03 [M] Contingency Training – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-3M_assessment CP-04 [M] Contingency Plan Testing – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-4M_assessment CP-04(01) [M] Coordinate with Related Plans – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-4.1M_assessment CP-06 [M] Alternate Storage Site – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-6M_assessment CP-06(01) [M] Separation from Primary Site – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-6.1M_assessment CP-06(03) [M] Accessibility – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-6.3M_assessment CP-07 [M] Alternate Processing Site – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-7M_assessment CP-07(01) [M] Separation from Primary Site – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-7.1M_assessment CP-07(02) [M] Accessibility – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-7.2M_assessment CP-07(03) [M] Priority of Service – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-7.3M_assessment CP-08 [M] Telecommunications Services – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-8M_assessment CP-08(01) [M] Priority of Service Provisions – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-8.1M_assessment CP-08(02) [M] Single Points of Failure – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-8.2M_assessment CP-09 [M] System Backup – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-9M_assessment CP-09(01) [M] Testing for Reliability and Integrity – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-9.1M_assessment CP-09(08) [M] Cryptographic Protection – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-9.8M_assessment CP-10 [M] System Recovery and Reconstitution – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-10M_assessment CP-10(02) [M] Transaction Recovery – Assessment Procedure [applied] NIST-SP800-53M-rev5_cp-10.2M_assessment IA-01 [M] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-1M_assessment IA-02 [M] Identification and Authentication (Organizational Users) – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-2M_assessment IA-02(01) [M] Multi-factor Authentication to Privileged Accounts – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-2.1M_assessment IA-02(02) [M] Multi-factor Authentication to Non-privileged Accounts – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-2.2M_assessment IA-02(08) [M] Access to Accounts — Replay Resistant – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-2.8M_assessment IA-02(12) [M] Acceptance of PIV Credentials – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-2.12M_assessment IA-03 [M] Device Identification and Authentication – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-3M_assessment IA-04 [M] Identifier Management – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-4M_assessment IA-04(04) [M] Identify User Status – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-4.4M_assessment IA-05 [M] Authenticator Management – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-5M_assessment IA-05(01) [M] Password-based Authentication – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-5.1M_assessment IA-05(02) [M] Public Key-based Authentication – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-5.2M_assessment IA-05(06) [M] Protection of Authenticators – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-5.6M_assessment IA-06 [M] Authentication Feedback – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-6M_assessment IA-07 [M] Cryptographic Module Authentication – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-7M_assessment IA-08 [M] Identification and Authentication (Non-organizational Users) – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-8M_assessment IA-08(01) [M] Acceptance of PIV Credentials from Other Agencies – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-8.1M_assessment IA-08(02) [M] Acceptance of External Authenticators – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-8.2M_assessment IA-08(04) [M] Use of Defined Profiles – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-8.4M_assessment IA-11 [M] Re-authentication – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-11M_assessment IA-12 [M] Identity Proofing – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-12M_assessment IA-12(02) [M] Identity Evidence – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-12.2M_assessment IA-12(03) [M] Identity Evidence Validation and Verification – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-12.3M_assessment IA-12(05) [M] Address Confirmation – Assessment Procedure [applied] NIST-SP800-53M-rev5_ia-12.5M_assessment IR-01 [M] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53M-rev5_ir-1M_assessment IR-02 [M] Incident Response Training – Assessment Procedure [applied] NIST-SP800-53M-rev5_ir-2M_assessment IR-03 [M] Incident Response Testing – Assessment Procedure [applied] NIST-SP800-53M-rev5_ir-3M_assessment IR-03(02) [M] Coordination with Related Plans – Assessment Procedure [applied] NIST-SP800-53M-rev5_ir-3.2M_assessment IR-04 [M] Incident Handling – Assessment Procedure [applied] NIST-SP800-53M-rev5_ir-4M_assessment IR-04(01) [M] Automated Incident Handling Processes – Assessment Procedure [applied] NIST-SP800-53M-rev5_ir-4.1M_assessment IR-05 [M] Incident Monitoring – Assessment Procedure [applied] NIST-SP800-53M-rev5_ir-5M_assessment IR-06 [M] Incident Reporting – Assessment Procedure [applied] NIST-SP800-53M-rev5_ir-6M_assessment IR-06(01) [M] Automated Reporting – Assessment Procedure [applied] NIST-SP800-53M-rev5_ir-6.1M_assessment IR-06(03) [M] Supply Chain Coordination – Assessment Procedure [applied] NIST-SP800-53M-rev5_ir-6.3M_assessment IR-07 [M] Incident Response Assistance – Assessment Procedure [applied] NIST-SP800-53M-rev5_ir-7M_assessment IR-07(01) [M] Automation Support for Availability of Information and Support – Assessment Procedure [applied] NIST-SP800-53M-rev5_ir-7.1M_assessment IR-08 [M] Incident Response Plan – Assessment Procedure [applied] NIST-SP800-53M-rev5_ir-8M_assessment MA-01 [M] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53M-rev5_ma-1M_assessment MA-02 [M] Controlled Maintenance – Assessment Procedure [applied] NIST-SP800-53M-rev5_ma-2M_assessment MA-03 [M] Maintenance Tools – Assessment Procedure [applied] NIST-SP800-53M-rev5_ma-3M_assessment MA-03(01) [M] Inspect Tools – Assessment Procedure [applied] NIST-SP800-53M-rev5_ma-3.1M_assessment MA-03(02) [M] Inspect Media – Assessment Procedure [applied] NIST-SP800-53M-rev5_ma-3.2M_assessment MA-03(03) [M] Prevent Unauthorized Removal – Assessment Procedure [applied] NIST-SP800-53M-rev5_ma-3.3M_assessment MA-04 [M] Nonlocal Maintenance – Assessment Procedure [applied] NIST-SP800-53M-rev5_ma-4M_assessment MA-05 [M] Maintenance Personnel – Assessment Procedure [applied] NIST-SP800-53M-rev5_ma-5M_assessment MA-06 [M] Timely Maintenance – Assessment Procedure [applied] NIST-SP800-53M-rev5_ma-6M_assessment MP-01 [M] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53M-rev5_mp-1M_assessment MP-02 [M] Media Access – Assessment Procedure [applied] NIST-SP800-53M-rev5_mp-2M_assessment MP-03 [M] Media Marking – Assessment Procedure [applied] NIST-SP800-53M-rev5_mp-3M_assessment MP-04 [M] Media Storage – Assessment Procedure [applied] NIST-SP800-53M-rev5_mp-4M_assessment MP-05 [M] Media Transport – Assessment Procedure [applied] NIST-SP800-53M-rev5_mp-5M_assessment MP-06 [M] Media Sanitization – Assessment Procedure [applied] NIST-SP800-53M-rev5_mp-6M_assessment MP-07 [M] Media Use – Assessment Procedure [applied] NIST-SP800-53M-rev5_mp-7M_assessment PE-01 [M] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53M-rev5_pe-1M_assessment PE-02 [M] Physical Access Authorizations – Assessment Procedure [applied] NIST-SP800-53M-rev5_pe-2M_assessment PE-03 [M] Physical Access Control – Assessment Procedure [applied] NIST-SP800-53M-rev5_pe-3M_assessment PE-04 [M] Access Control for Transmission – Assessment Procedure [applied] NIST-SP800-53M-rev5_pe-4M_assessment PE-05 [M] Access Control for Output Devices – Assessment Procedure [applied] NIST-SP800-53M-rev5_pe-5M_assessment PE-06 [M] Monitoring Physical Access – Assessment Procedure [applied] NIST-SP800-53M-rev5_pe-6M_assessment PE-06(01) [M] Intrusion Alarms and Surveillance Equipment – Assessment Procedure [applied] NIST-SP800-53M-rev5_pe-6.1M_assessment PE-08 [M] Visitor Access Records – Assessment Procedure [applied] NIST-SP800-53M-rev5_pe-8M_assessment PE-09 [M] Power Equipment and Cabling – Assessment Procedure [applied] NIST-SP800-53M-rev5_pe-9M_assessment PE-10 [M] Emergency Shutoff – Assessment Procedure [applied] NIST-SP800-53M-rev5_pe-10M_assessment PE-11 [M] Emergency Power – Assessment Procedure [applied] NIST-SP800-53M-rev5_pe-11M_assessment PE-12 [M] Emergency Lighting – Assessment Procedure [applied] NIST-SP800-53M-rev5_pe-12M_assessment PE-13 [M] Fire Protection – Assessment Procedure [applied] NIST-SP800-53M-rev5_pe-13M_assessment PE-13(01) [M] Detection Systems — Automatic Activation and Notification – Assessment Procedure [applied] NIST-SP800-53M-rev5_pe-13.1M_assessment PE-14 [M] Environmental Controls – Assessment Procedure [applied] NIST-SP800-53M-rev5_pe-14M_assessment PE-15 [M] Water Damage Protection – Assessment Procedure [applied] NIST-SP800-53M-rev5_pe-15M_assessment PE-16 [M] Delivery and Removal – Assessment Procedure [applied] NIST-SP800-53M-rev5_pe-16M_assessment PE-17 [M] Alternate Work Site – Assessment Procedure [applied] NIST-SP800-53M-rev5_pe-17M_assessment PL-01 [M] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53M-rev5_pl-1M_assessment PL-02 [M] System Security and Privacy Plans – Assessment Procedure [applied] NIST-SP800-53M-rev5_pl-2M_assessment PL-04 [M] Rules of Behavior – Assessment Procedure [applied] NIST-SP800-53M-rev5_pl-4M_assessment PL-04(01) [M] Social Media and External Site/Application Usage Restrictions – Assessment Procedure [applied] NIST-SP800-53M-rev5_pl-4.1M_assessment PL-08 [M] Security and Privacy Architectures – Assessment Procedure [applied] NIST-SP800-53M-rev5_pl-8M_assessment PL-10 [M] Baseline Selection – Assessment Procedure [applied] NIST-SP800-53M-rev5_pl-10M_assessment PL-11 [M] Baseline Tailoring – Assessment Procedure [applied] NIST-SP800-53M-rev5_pl-11M_assessment PS-01 [M] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53M-rev5_ps-1M_assessment PS-02 [M] Position Risk Designation – Assessment Procedure [applied] NIST-SP800-53M-rev5_ps-2M_assessment PS-03 [M] Personnel Screening – Assessment Procedure [applied] NIST-SP800-53M-rev5_ps-3M_assessment … and 88 more New links (287) Blocks → AC-01 [M] Policy and Procedures [applied] NIST-SP800-53M-rev5_ac-1M_assessment Blocks → AC-02 [M] Account Management [applied] NIST-SP800-53M-rev5_ac-2M_assessment Blocks → AC-02(01) [M] Automated System Account Management [applied] NIST-SP800-53M-rev5_ac-2.1M_assessment Blocks → AC-02(02) [M] Automated Temporary and Emergency Account Management [applied] NIST-SP800-53M-rev5_ac-2.2M_assessment Blocks → AC-02(03) [M] Disable Accounts [applied] NIST-SP800-53M-rev5_ac-2.3M_assessment Blocks → AC-02(04) [M] Automated Audit Actions [applied] NIST-SP800-53M-rev5_ac-2.4M_assessment Blocks → AC-02(05) [M] Inactivity Logout [applied] NIST-SP800-53M-rev5_ac-2.5M_assessment Blocks → AC-02(13) [M] Disable Accounts for High-risk Individuals [applied] NIST-SP800-53M-rev5_ac-2.13M_assessment Blocks → AC-03 [M] Access Enforcement [applied] NIST-SP800-53M-rev5_ac-3M_assessment Blocks → AC-04 [M] Information Flow Enforcement [applied] NIST-SP800-53M-rev5_ac-4M_assessment Blocks → AC-05 [M] Separation of Duties [applied] NIST-SP800-53M-rev5_ac-5M_assessment Blocks → AC-06 [M] Least Privilege [applied] NIST-SP800-53M-rev5_ac-6M_assessment Blocks → AC-06(01) [M] Authorize Access to Security Functions [applied] NIST-SP800-53M-rev5_ac-6.1M_assessment Blocks → AC-06(02) [M] Non-privileged Access for Nonsecurity Functions [applied] NIST-SP800-53M-rev5_ac-6.2M_assessment Blocks → AC-06(05) [M] Privileged Accounts [applied] NIST-SP800-53M-rev5_ac-6.5M_assessment Blocks → AC-06(07) [M] Review of User Privileges [applied] NIST-SP800-53M-rev5_ac-6.7M_assessment Blocks → AC-06(09) [M] Log Use of Privileged Functions [applied] NIST-SP800-53M-rev5_ac-6.9M_assessment Blocks → AC-06(10) [M] Prohibit Non-privileged Users from Executing Privileged Functions [applied] NIST-SP800-53M-rev5_ac-6.10M_assessment Blocks → AC-07 [M] Unsuccessful Logon Attempts [applied] NIST-SP800-53M-rev5_ac-7M_assessment Blocks → AC-08 [M] System Use Notification [applied] NIST-SP800-53M-rev5_ac-8M_assessment Blocks → AC-11 [M] Device Lock [applied] NIST-SP800-53M-rev5_ac-11M_assessment Blocks → AC-11(01) [M] Pattern-hiding Displays [applied] NIST-SP800-53M-rev5_ac-11.1M_assessment Blocks → AC-12 [M] Session Termination [applied] NIST-SP800-53M-rev5_ac-12M_assessment Blocks → AC-14 [M] Permitted Actions Without Identification or Authentication [applied] NIST-SP800-53M-rev5_ac-14M_assessment Blocks → AC-17 [M] Remote Access [applied] NIST-SP800-53M-rev5_ac-17M_assessment Blocks → AC-17(01) [M] Monitoring and Control [applied] NIST-SP800-53M-rev5_ac-17.1M_assessment Blocks → AC-17(02) [M] Protection of Confidentiality and Integrity Using Encryption [applied] NIST-SP800-53M-rev5_ac-17.2M_assessment Blocks → AC-17(03) [M] Managed Access Control Points [applied] NIST-SP800-53M-rev5_ac-17.3M_assessment Blocks → AC-17(04) [M] Privileged Commands and Access [applied] NIST-SP800-53M-rev5_ac-17.4M_assessment Blocks → AC-18 [M] Wireless Access [applied] NIST-SP800-53M-rev5_ac-18M_assessment Blocks → AC-18(01) [M] Authentication and Encryption [applied] NIST-SP800-53M-rev5_ac-18.1M_assessment Blocks → AC-18(03) [M] Disable Wireless Networking [applied] NIST-SP800-53M-rev5_ac-18.3M_assessment Blocks → AC-19 [M] Access Control for Mobile Devices [applied] NIST-SP800-53M-rev5_ac-19M_assessment Blocks → AC-19(05) [M] Full Device or Container-based Encryption [applied] NIST-SP800-53M-rev5_ac-19.5M_assessment Blocks → AC-20 [M] Use of External Systems [applied] NIST-SP800-53M-rev5_ac-20M_assessment Blocks → AC-20(01) [M] Limits on Authorized Use [applied] NIST-SP800-53M-rev5_ac-20.1M_assessment Blocks → AC-20(02) [M] Portable Storage Devices — Restricted Use [applied] NIST-SP800-53M-rev5_ac-20.2M_assessment Blocks → AC-21 [M] Information Sharing [applied] NIST-SP800-53M-rev5_ac-21M_assessment Blocks → AC-22 [M] Publicly Accessible Content [applied] NIST-SP800-53M-rev5_ac-22M_assessment Blocks → AT-01 [M] Policy and Procedures [applied] NIST-SP800-53M-rev5_at-1M_assessment Blocks → AT-02 [M] Literacy Training and Awareness [applied] NIST-SP800-53M-rev5_at-2M_assessment Blocks → AT-02(02) [M] Insider Threat [applied] NIST-SP800-53M-rev5_at-2.2M_assessment Blocks → AT-02(03) [M] Social Engineering and Mining [applied] NIST-SP800-53M-rev5_at-2.3M_assessment Blocks → AT-03 [M] Role-based Training [applied] NIST-SP800-53M-rev5_at-3M_assessment Blocks → AT-04 [M] Training Records [applied] NIST-SP800-53M-rev5_at-4M_assessment Blocks → AU-01 [M] Policy and Procedures [applied] NIST-SP800-53M-rev5_au-1M_assessment Blocks → AU-02 [M] Event Logging [applied] NIST-SP800-53M-rev5_au-2M_assessment Blocks → AU-03 [M] Content of Audit Records [applied] NIST-SP800-53M-rev5_au-3M_assessment Blocks → AU-03(01) [M] Additional Audit Information [applied] NIST-SP800-53M-rev5_au-3.1M_assessment Blocks → AU-04 [M] Audit Log Storage Capacity [applied] NIST-SP800-53M-rev5_au-4M_assessment Blocks → AU-05 [M] Response to Audit Logging Process Failures [applied] NIST-SP800-53M-rev5_au-5M_assessment Blocks → AU-06 [M] Audit Record Review, Analysis, and Reporting [applied] NIST-SP800-53M-rev5_au-6M_assessment Blocks → AU-06(01) [M] Automated Process Integration [applied] NIST-SP800-53M-rev5_au-6.1M_assessment Blocks → AU-06(03) [M] Correlate Audit Record Repositories [applied] NIST-SP800-53M-rev5_au-6.3M_assessment Blocks → AU-07 [M] Audit Record Reduction and Report Generation [applied] NIST-SP800-53M-rev5_au-7M_assessment Blocks → AU-07(01) [M] Automatic Processing [applied] NIST-SP800-53M-rev5_au-7.1M_assessment Blocks → AU-08 [M] Time Stamps [applied] NIST-SP800-53M-rev5_au-8M_assessment Blocks → AU-09 [M] Protection of Audit Information [applied] NIST-SP800-53M-rev5_au-9M_assessment Blocks → AU-09(04) [M] Access by Subset of Privileged Users [applied] NIST-SP800-53M-rev5_au-9.4M_assessment Blocks → AU-11 [M] Audit Record Retention [applied] NIST-SP800-53M-rev5_au-11M_assessment Blocks → AU-12 [M] Audit Record Generation [applied] NIST-SP800-53M-rev5_au-12M_assessment Blocks → CA-01 [M] Policy and Procedures [applied] NIST-SP800-53M-rev5_ca-1M_assessment Blocks → CA-02 [M] Control Assessments [applied] NIST-SP800-53M-rev5_ca-2M_assessment Blocks → CA-02(01) [M] Independent Assessors [applied] NIST-SP800-53M-rev5_ca-2.1M_assessment Blocks → CA-03 [M] Information Exchange [applied] NIST-SP800-53M-rev5_ca-3M_assessment Blocks → CA-05 [M] Plan of Action and Milestones [applied] NIST-SP800-53M-rev5_ca-5M_assessment Blocks → CA-06 [M] Authorization [applied] NIST-SP800-53M-rev5_ca-6M_assessment Blocks → CA-07 [M] Continuous Monitoring [applied] NIST-SP800-53M-rev5_ca-7M_assessment Blocks → CA-07(01) [M] Independent Assessment [applied] NIST-SP800-53M-rev5_ca-7.1M_assessment Blocks → CA-07(04) [M] Risk Monitoring [applied] NIST-SP800-53M-rev5_ca-7.4M_assessment Blocks → CA-09 [M] Internal System Connections [applied] NIST-SP800-53M-rev5_ca-9M_assessment Blocks → CM-01 [M] Policy and Procedures [applied] NIST-SP800-53M-rev5_cm-1M_assessment Blocks → CM-02 [M] Baseline Configuration [applied] NIST-SP800-53M-rev5_cm-2M_assessment Blocks → CM-02(02) [M] Automation Support for Accuracy and Currency [applied] NIST-SP800-53M-rev5_cm-2.2M_assessment Blocks → CM-02(03) [M] Retention of Previous Configurations [applied] NIST-SP800-53M-rev5_cm-2.3M_assessment Blocks → CM-02(07) [M] Configure Systems and Components for High-risk Areas [applied] NIST-SP800-53M-rev5_cm-2.7M_assessment Blocks → CM-03 [M] Configuration Change Control [applied] NIST-SP800-53M-rev5_cm-3M_assessment Blocks → CM-03(02) [M] Testing, Validation, and Documentation of Changes [applied] NIST-SP800-53M-rev5_cm-3.2M_assessment Blocks → CM-03(04) [M] Security and Privacy Representatives [applied] NIST-SP800-53M-rev5_cm-3.4M_assessment Blocks → CM-04 [M] Impact Analyses [applied] NIST-SP800-53M-rev5_cm-4M_assessment Blocks → CM-04(02) [M] Verification of Controls [applied] NIST-SP800-53M-rev5_cm-4.2M_assessment Blocks → CM-05 [M] Access Restrictions for Change [applied] NIST-SP800-53M-rev5_cm-5M_assessment Blocks → CM-06 [M] Configuration Settings [applied] NIST-SP800-53M-rev5_cm-6M_assessment Blocks → CM-07 [M] Least Functionality [applied] NIST-SP800-53M-rev5_cm-7M_assessment Blocks → CM-07(01) [M] Periodic Review [applied] NIST-SP800-53M-rev5_cm-7.1M_assessment Blocks → CM-07(02) [M] Prevent Program Execution [applied] NIST-SP800-53M-rev5_cm-7.2M_assessment Blocks → CM-07(05) [M] Authorized Software — Allow-by-exception [applied] NIST-SP800-53M-rev5_cm-7.5M_assessment Blocks → CM-08 [M] System Component Inventory [applied] NIST-SP800-53M-rev5_cm-8M_assessment Blocks → CM-08(01) [M] Updates During Installation and Removal [applied] NIST-SP800-53M-rev5_cm-8.1M_assessment Blocks → CM-08(03) [M] Automated Unauthorized Component Detection [applied] NIST-SP800-53M-rev5_cm-8.3M_assessment Blocks → CM-09 [M] Configuration Management Plan [applied] NIST-SP800-53M-rev5_cm-9M_assessment Blocks → CM-10 [M] Software Usage Restrictions [applied] NIST-SP800-53M-rev5_cm-10M_assessment Blocks → CM-11 [M] User-installed Software [applied] NIST-SP800-53M-rev5_cm-11M_assessment Blocks → CM-12 [M] Information Location [applied] NIST-SP800-53M-rev5_cm-12M_assessment Blocks → CM-12(01) [M] Automated Tools to Support Information Location [applied] NIST-SP800-53M-rev5_cm-12.1M_assessment Blocks → CP-01 [M] Policy and Procedures [applied] NIST-SP800-53M-rev5_cp-1M_assessment Blocks → CP-02 [M] Contingency Plan [applied] NIST-SP800-53M-rev5_cp-2M_assessment Blocks → CP-02(01) [M] Coordinate with Related Plans [applied] NIST-SP800-53M-rev5_cp-2.1M_assessment Blocks → CP-02(03) [M] Resume Mission and Business Functions [applied] NIST-SP800-53M-rev5_cp-2.3M_assessment Blocks → CP-02(08) [M] Identify Critical Assets [applied] NIST-SP800-53M-rev5_cp-2.8M_assessment Blocks → CP-03 [M] Contingency Training [applied] NIST-SP800-53M-rev5_cp-3M_assessment Blocks → CP-04 [M] Contingency Plan Testing [applied] NIST-SP800-53M-rev5_cp-4M_assessment Blocks → CP-04(01) [M] Coordinate with Related Plans [applied] NIST-SP800-53M-rev5_cp-4.1M_assessment Blocks → CP-06 [M] Alternate Storage Site [applied] NIST-SP800-53M-rev5_cp-6M_assessment Blocks → CP-06(01) [M] Separation from Primary Site [applied] NIST-SP800-53M-rev5_cp-6.1M_assessment Blocks → CP-06(03) [M] Accessibility [applied] NIST-SP800-53M-rev5_cp-6.3M_assessment Blocks → CP-07 [M] Alternate Processing Site [applied] NIST-SP800-53M-rev5_cp-7M_assessment Blocks → CP-07(01) [M] Separation from Primary Site [applied] NIST-SP800-53M-rev5_cp-7.1M_assessment Blocks → CP-07(02) [M] Accessibility [applied] NIST-SP800-53M-rev5_cp-7.2M_assessment Blocks → CP-07(03) [M] Priority of Service [applied] NIST-SP800-53M-rev5_cp-7.3M_assessment Blocks → CP-08 [M] Telecommunications Services [applied] NIST-SP800-53M-rev5_cp-8M_assessment Blocks → CP-08(01) [M] Priority of Service Provisions [applied] NIST-SP800-53M-rev5_cp-8.1M_assessment Blocks → CP-08(02) [M] Single Points of Failure [applied] NIST-SP800-53M-rev5_cp-8.2M_assessment Blocks → CP-09 [M] System Backup [applied] NIST-SP800-53M-rev5_cp-9M_assessment Blocks → CP-09(01) [M] Testing for Reliability and Integrity [applied] NIST-SP800-53M-rev5_cp-9.1M_assessment Blocks → CP-09(08) [M] Cryptographic Protection [applied] NIST-SP800-53M-rev5_cp-9.8M_assessment Blocks → CP-10 [M] System Recovery and Reconstitution [applied] NIST-SP800-53M-rev5_cp-10M_assessment Blocks → CP-10(02) [M] Transaction Recovery [applied] NIST-SP800-53M-rev5_cp-10.2M_assessment Blocks → IA-01 [M] Policy and Procedures [applied] NIST-SP800-53M-rev5_ia-1M_assessment Blocks → IA-02 [M] Identification and Authentication (Organizational Users) [applied] NIST-SP800-53M-rev5_ia-2M_assessment Blocks → IA-02(01) [M] Multi-factor Authentication to Privileged Accounts [applied] NIST-SP800-53M-rev5_ia-2.1M_assessment Blocks → IA-02(02) [M] Multi-factor Authentication to Non-privileged Accounts [applied] NIST-SP800-53M-rev5_ia-2.2M_assessment Blocks → IA-02(08) [M] Access to Accounts — Replay Resistant [applied] NIST-SP800-53M-rev5_ia-2.8M_assessment Blocks → IA-02(12) [M] Acceptance of PIV Credentials [applied] NIST-SP800-53M-rev5_ia-2.12M_assessment Blocks → IA-03 [M] Device Identification and Authentication [applied] NIST-SP800-53M-rev5_ia-3M_assessment Blocks → IA-04 [M] Identifier Management [applied] NIST-SP800-53M-rev5_ia-4M_assessment Blocks → IA-04(04) [M] Identify User Status [applied] NIST-SP800-53M-rev5_ia-4.4M_assessment Blocks → IA-05 [M] Authenticator Management [applied] NIST-SP800-53M-rev5_ia-5M_assessment Blocks → IA-05(01) [M] Password-based Authentication [applied] NIST-SP800-53M-rev5_ia-5.1M_assessment Blocks → IA-05(02) [M] Public Key-based Authentication [applied] NIST-SP800-53M-rev5_ia-5.2M_assessment Blocks → IA-05(06) [M] Protection of Authenticators [applied] NIST-SP800-53M-rev5_ia-5.6M_assessment Blocks → IA-06 [M] Authentication Feedback [applied] NIST-SP800-53M-rev5_ia-6M_assessment Blocks → IA-07 [M] Cryptographic Module Authentication [applied] NIST-SP800-53M-rev5_ia-7M_assessment Blocks → IA-08 [M] Identification and Authentication (Non-organizational Users) [applied] NIST-SP800-53M-rev5_ia-8M_assessment Blocks → IA-08(01) [M] Acceptance of PIV Credentials from Other Agencies [applied] NIST-SP800-53M-rev5_ia-8.1M_assessment Blocks → IA-08(02) [M] Acceptance of External Authenticators [applied] NIST-SP800-53M-rev5_ia-8.2M_assessment Blocks → IA-08(04) [M] Use of Defined Profiles [applied] NIST-SP800-53M-rev5_ia-8.4M_assessment Blocks → IA-11 [M] Re-authentication [applied] NIST-SP800-53M-rev5_ia-11M_assessment Blocks → IA-12 [M] Identity Proofing [applied] NIST-SP800-53M-rev5_ia-12M_assessment Blocks → IA-12(02) [M] Identity Evidence [applied] NIST-SP800-53M-rev5_ia-12.2M_assessment Blocks → IA-12(03) [M] Identity Evidence Validation and Verification [applied] NIST-SP800-53M-rev5_ia-12.3M_assessment Blocks → IA-12(05) [M] Address Confirmation [applied] NIST-SP800-53M-rev5_ia-12.5M_assessment Blocks → IR-01 [M] Policy and Procedures [applied] NIST-SP800-53M-rev5_ir-1M_assessment Blocks → IR-02 [M] Incident Response Training [applied] NIST-SP800-53M-rev5_ir-2M_assessment Blocks → IR-03 [M] Incident Response Testing [applied] NIST-SP800-53M-rev5_ir-3M_assessment Blocks → IR-03(02) [M] Coordination with Related Plans [applied] NIST-SP800-53M-rev5_ir-3.2M_assessment Blocks → IR-04 [M] Incident Handling [applied] NIST-SP800-53M-rev5_ir-4M_assessment Blocks → IR-04(01) [M] Automated Incident Handling Processes [applied] NIST-SP800-53M-rev5_ir-4.1M_assessment Blocks → IR-05 [M] Incident Monitoring [applied] NIST-SP800-53M-rev5_ir-5M_assessment Blocks → IR-06 [M] Incident Reporting [applied] NIST-SP800-53M-rev5_ir-6M_assessment Blocks → IR-06(01) [M] Automated Reporting [applied] NIST-SP800-53M-rev5_ir-6.1M_assessment Blocks → IR-06(03) [M] Supply Chain Coordination [applied] NIST-SP800-53M-rev5_ir-6.3M_assessment Blocks → IR-07 [M] Incident Response Assistance [applied] NIST-SP800-53M-rev5_ir-7M_assessment Blocks → IR-07(01) [M] Automation Support for Availability of Information and Support [applied] NIST-SP800-53M-rev5_ir-7.1M_assessment Blocks → IR-08 [M] Incident Response Plan [applied] NIST-SP800-53M-rev5_ir-8M_assessment Blocks → MA-01 [M] Policy and Procedures [applied] NIST-SP800-53M-rev5_ma-1M_assessment Blocks → MA-02 [M] Controlled Maintenance [applied] NIST-SP800-53M-rev5_ma-2M_assessment Blocks → MA-03 [M] Maintenance Tools [applied] NIST-SP800-53M-rev5_ma-3M_assessment Blocks → MA-03(01) [M] Inspect Tools [applied] NIST-SP800-53M-rev5_ma-3.1M_assessment Blocks → MA-03(02) [M] Inspect Media [applied] NIST-SP800-53M-rev5_ma-3.2M_assessment Blocks → MA-03(03) [M] Prevent Unauthorized Removal [applied] NIST-SP800-53M-rev5_ma-3.3M_assessment Blocks → MA-04 [M] Nonlocal Maintenance [applied] NIST-SP800-53M-rev5_ma-4M_assessment Blocks → MA-05 [M] Maintenance Personnel [applied] NIST-SP800-53M-rev5_ma-5M_assessment Blocks → MA-06 [M] Timely Maintenance [applied] NIST-SP800-53M-rev5_ma-6M_assessment Blocks → MP-01 [M] Policy and Procedures [applied] NIST-SP800-53M-rev5_mp-1M_assessment Blocks → MP-02 [M] Media Access [applied] NIST-SP800-53M-rev5_mp-2M_assessment Blocks → MP-03 [M] Media Marking [applied] NIST-SP800-53M-rev5_mp-3M_assessment Blocks → MP-04 [M] Media Storage [applied] NIST-SP800-53M-rev5_mp-4M_assessment Blocks → MP-05 [M] Media Transport [applied] NIST-SP800-53M-rev5_mp-5M_assessment Blocks → MP-06 [M] Media Sanitization [applied] NIST-SP800-53M-rev5_mp-6M_assessment Blocks → MP-07 [M] Media Use [applied] NIST-SP800-53M-rev5_mp-7M_assessment Blocks → PE-01 [M] Policy and Procedures [applied] NIST-SP800-53M-rev5_pe-1M_assessment Blocks → PE-02 [M] Physical Access Authorizations [applied] NIST-SP800-53M-rev5_pe-2M_assessment Blocks → PE-03 [M] Physical Access Control [applied] NIST-SP800-53M-rev5_pe-3M_assessment Blocks → PE-04 [M] Access Control for Transmission [applied] NIST-SP800-53M-rev5_pe-4M_assessment Blocks → PE-05 [M] Access Control for Output Devices [applied] NIST-SP800-53M-rev5_pe-5M_assessment Blocks → PE-06 [M] Monitoring Physical Access [applied] NIST-SP800-53M-rev5_pe-6M_assessment Blocks → PE-06(01) [M] Intrusion Alarms and Surveillance Equipment [applied] NIST-SP800-53M-rev5_pe-6.1M_assessment Blocks → PE-08 [M] Visitor Access Records [applied] NIST-SP800-53M-rev5_pe-8M_assessment Blocks → PE-09 [M] Power Equipment and Cabling [applied] NIST-SP800-53M-rev5_pe-9M_assessment Blocks → PE-10 [M] Emergency Shutoff [applied] NIST-SP800-53M-rev5_pe-10M_assessment Blocks → PE-11 [M] Emergency Power [applied] NIST-SP800-53M-rev5_pe-11M_assessment Blocks → PE-12 [M] Emergency Lighting [applied] NIST-SP800-53M-rev5_pe-12M_assessment Blocks → PE-13 [M] Fire Protection [applied] NIST-SP800-53M-rev5_pe-13M_assessment Blocks → PE-13(01) [M] Detection Systems — Automatic Activation and Notification [applied] NIST-SP800-53M-rev5_pe-13.1M_assessment Blocks → PE-14 [M] Environmental Controls [applied] NIST-SP800-53M-rev5_pe-14M_assessment Blocks → PE-15 [M] Water Damage Protection [applied] NIST-SP800-53M-rev5_pe-15M_assessment Blocks → PE-16 [M] Delivery and Removal [applied] NIST-SP800-53M-rev5_pe-16M_assessment Blocks → PE-17 [M] Alternate Work Site [applied] NIST-SP800-53M-rev5_pe-17M_assessment Blocks → PL-01 [M] Policy and Procedures [applied] NIST-SP800-53M-rev5_pl-1M_assessment Blocks → PL-02 [M] System Security and Privacy Plans [applied] NIST-SP800-53M-rev5_pl-2M_assessment Blocks → PL-04 [M] Rules of Behavior [applied] NIST-SP800-53M-rev5_pl-4M_assessment Blocks → PL-04(01) [M] Social Media and External Site/Application Usage Restrictions [applied] NIST-SP800-53M-rev5_pl-4.1M_assessment Blocks → PL-08 [M] Security and Privacy Architectures [applied] NIST-SP800-53M-rev5_pl-8M_assessment Blocks → PL-10 [M] Baseline Selection [applied] NIST-SP800-53M-rev5_pl-10M_assessment Blocks → PL-11 [M] Baseline Tailoring [applied] NIST-SP800-53M-rev5_pl-11M_assessment Blocks → PS-01 [M] Policy and Procedures [applied] NIST-SP800-53M-rev5_ps-1M_assessment Blocks → PS-02 [M] Position Risk Designation [applied] NIST-SP800-53M-rev5_ps-2M_assessment Blocks → PS-03 [M] Personnel Screening [applied] NIST-SP800-53M-rev5_ps-3M_assessment Blocks → PS-04 [M] Personnel Termination [applied] NIST-SP800-53M-rev5_ps-4M_assessment … and 87 more
New version: NIST SP 800-53 Rev. 5 LOW Baseline (v1.5.0-941e5bcdce) – 150 new, 0 changed, 0 removed, 149 links	New version: NIST SP 800-53 Rev. 5 LOW Baseline (v1.5.0-941e5bcdce) – 150 new, 0 changed, 0 removed, 149 links Document: NIST SP 800-53 Rev. 5 LOW Baseline (https://raw.githubusercontent.com/usnistgov/oscal-content/v1.5.0/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_LOW-baseline-resolved-profile_catalog.json) Version: v1.5.0-941e5bcdce Project: NIST Import: #644, 20.10.2026 21:17, nist The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes). Review: 0 open, 299 applied, 0 rejected. New sections (150) NIST SP 800-53 Rev. 5 LOW Baseline – Assessment Procedures [applied] NIST-SP800-53L-rev5_assessment-procedures AC-01 [L] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53L-rev5_ac-1L_assessment AC-02 [L] Account Management – Assessment Procedure [applied] NIST-SP800-53L-rev5_ac-2L_assessment AC-03 [L] Access Enforcement – Assessment Procedure [applied] NIST-SP800-53L-rev5_ac-3L_assessment AC-07 [L] Unsuccessful Logon Attempts – Assessment Procedure [applied] NIST-SP800-53L-rev5_ac-7L_assessment AC-08 [L] System Use Notification – Assessment Procedure [applied] NIST-SP800-53L-rev5_ac-8L_assessment AC-14 [L] Permitted Actions Without Identification or Authentication – Assessment Procedure [applied] NIST-SP800-53L-rev5_ac-14L_assessment AC-17 [L] Remote Access – Assessment Procedure [applied] NIST-SP800-53L-rev5_ac-17L_assessment AC-18 [L] Wireless Access – Assessment Procedure [applied] NIST-SP800-53L-rev5_ac-18L_assessment AC-19 [L] Access Control for Mobile Devices – Assessment Procedure [applied] NIST-SP800-53L-rev5_ac-19L_assessment AC-20 [L] Use of External Systems – Assessment Procedure [applied] NIST-SP800-53L-rev5_ac-20L_assessment AC-22 [L] Publicly Accessible Content – Assessment Procedure [applied] NIST-SP800-53L-rev5_ac-22L_assessment AT-01 [L] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53L-rev5_at-1L_assessment AT-02 [L] Literacy Training and Awareness – Assessment Procedure [applied] NIST-SP800-53L-rev5_at-2L_assessment AT-02(02) [L] Insider Threat – Assessment Procedure [applied] NIST-SP800-53L-rev5_at-2.2L_assessment AT-03 [L] Role-based Training – Assessment Procedure [applied] NIST-SP800-53L-rev5_at-3L_assessment AT-04 [L] Training Records – Assessment Procedure [applied] NIST-SP800-53L-rev5_at-4L_assessment AU-01 [L] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53L-rev5_au-1L_assessment AU-02 [L] Event Logging – Assessment Procedure [applied] NIST-SP800-53L-rev5_au-2L_assessment AU-03 [L] Content of Audit Records – Assessment Procedure [applied] NIST-SP800-53L-rev5_au-3L_assessment AU-04 [L] Audit Log Storage Capacity – Assessment Procedure [applied] NIST-SP800-53L-rev5_au-4L_assessment AU-05 [L] Response to Audit Logging Process Failures – Assessment Procedure [applied] NIST-SP800-53L-rev5_au-5L_assessment AU-06 [L] Audit Record Review, Analysis, and Reporting – Assessment Procedure [applied] NIST-SP800-53L-rev5_au-6L_assessment AU-08 [L] Time Stamps – Assessment Procedure [applied] NIST-SP800-53L-rev5_au-8L_assessment AU-09 [L] Protection of Audit Information – Assessment Procedure [applied] NIST-SP800-53L-rev5_au-9L_assessment AU-11 [L] Audit Record Retention – Assessment Procedure [applied] NIST-SP800-53L-rev5_au-11L_assessment AU-12 [L] Audit Record Generation – Assessment Procedure [applied] NIST-SP800-53L-rev5_au-12L_assessment CA-01 [L] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53L-rev5_ca-1L_assessment CA-02 [L] Control Assessments – Assessment Procedure [applied] NIST-SP800-53L-rev5_ca-2L_assessment CA-03 [L] Information Exchange – Assessment Procedure [applied] NIST-SP800-53L-rev5_ca-3L_assessment CA-05 [L] Plan of Action and Milestones – Assessment Procedure [applied] NIST-SP800-53L-rev5_ca-5L_assessment CA-06 [L] Authorization – Assessment Procedure [applied] NIST-SP800-53L-rev5_ca-6L_assessment CA-07 [L] Continuous Monitoring – Assessment Procedure [applied] NIST-SP800-53L-rev5_ca-7L_assessment CA-07(04) [L] Risk Monitoring – Assessment Procedure [applied] NIST-SP800-53L-rev5_ca-7.4L_assessment CA-09 [L] Internal System Connections – Assessment Procedure [applied] NIST-SP800-53L-rev5_ca-9L_assessment CM-01 [L] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53L-rev5_cm-1L_assessment CM-02 [L] Baseline Configuration – Assessment Procedure [applied] NIST-SP800-53L-rev5_cm-2L_assessment CM-04 [L] Impact Analyses – Assessment Procedure [applied] NIST-SP800-53L-rev5_cm-4L_assessment CM-05 [L] Access Restrictions for Change – Assessment Procedure [applied] NIST-SP800-53L-rev5_cm-5L_assessment CM-06 [L] Configuration Settings – Assessment Procedure [applied] NIST-SP800-53L-rev5_cm-6L_assessment CM-07 [L] Least Functionality – Assessment Procedure [applied] NIST-SP800-53L-rev5_cm-7L_assessment CM-08 [L] System Component Inventory – Assessment Procedure [applied] NIST-SP800-53L-rev5_cm-8L_assessment CM-10 [L] Software Usage Restrictions – Assessment Procedure [applied] NIST-SP800-53L-rev5_cm-10L_assessment CM-11 [L] User-installed Software – Assessment Procedure [applied] NIST-SP800-53L-rev5_cm-11L_assessment CP-01 [L] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53L-rev5_cp-1L_assessment CP-02 [L] Contingency Plan – Assessment Procedure [applied] NIST-SP800-53L-rev5_cp-2L_assessment CP-03 [L] Contingency Training – Assessment Procedure [applied] NIST-SP800-53L-rev5_cp-3L_assessment CP-04 [L] Contingency Plan Testing – Assessment Procedure [applied] NIST-SP800-53L-rev5_cp-4L_assessment CP-09 [L] System Backup – Assessment Procedure [applied] NIST-SP800-53L-rev5_cp-9L_assessment CP-10 [L] System Recovery and Reconstitution – Assessment Procedure [applied] NIST-SP800-53L-rev5_cp-10L_assessment IA-01 [L] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53L-rev5_ia-1L_assessment IA-02 [L] Identification and Authentication (Organizational Users) – Assessment Procedure [applied] NIST-SP800-53L-rev5_ia-2L_assessment IA-02(01) [L] Multi-factor Authentication to Privileged Accounts – Assessment Procedure [applied] NIST-SP800-53L-rev5_ia-2.1L_assessment IA-02(02) [L] Multi-factor Authentication to Non-privileged Accounts – Assessment Procedure [applied] NIST-SP800-53L-rev5_ia-2.2L_assessment IA-02(08) [L] Access to Accounts — Replay Resistant – Assessment Procedure [applied] NIST-SP800-53L-rev5_ia-2.8L_assessment IA-02(12) [L] Acceptance of PIV Credentials – Assessment Procedure [applied] NIST-SP800-53L-rev5_ia-2.12L_assessment IA-04 [L] Identifier Management – Assessment Procedure [applied] NIST-SP800-53L-rev5_ia-4L_assessment IA-05 [L] Authenticator Management – Assessment Procedure [applied] NIST-SP800-53L-rev5_ia-5L_assessment IA-05(01) [L] Password-based Authentication – Assessment Procedure [applied] NIST-SP800-53L-rev5_ia-5.1L_assessment IA-06 [L] Authentication Feedback – Assessment Procedure [applied] NIST-SP800-53L-rev5_ia-6L_assessment IA-07 [L] Cryptographic Module Authentication – Assessment Procedure [applied] NIST-SP800-53L-rev5_ia-7L_assessment IA-08 [L] Identification and Authentication (Non-organizational Users) – Assessment Procedure [applied] NIST-SP800-53L-rev5_ia-8L_assessment IA-08(01) [L] Acceptance of PIV Credentials from Other Agencies – Assessment Procedure [applied] NIST-SP800-53L-rev5_ia-8.1L_assessment IA-08(02) [L] Acceptance of External Authenticators – Assessment Procedure [applied] NIST-SP800-53L-rev5_ia-8.2L_assessment IA-08(04) [L] Use of Defined Profiles – Assessment Procedure [applied] NIST-SP800-53L-rev5_ia-8.4L_assessment IA-11 [L] Re-authentication – Assessment Procedure [applied] NIST-SP800-53L-rev5_ia-11L_assessment IR-01 [L] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53L-rev5_ir-1L_assessment IR-02 [L] Incident Response Training – Assessment Procedure [applied] NIST-SP800-53L-rev5_ir-2L_assessment IR-04 [L] Incident Handling – Assessment Procedure [applied] NIST-SP800-53L-rev5_ir-4L_assessment IR-05 [L] Incident Monitoring – Assessment Procedure [applied] NIST-SP800-53L-rev5_ir-5L_assessment IR-06 [L] Incident Reporting – Assessment Procedure [applied] NIST-SP800-53L-rev5_ir-6L_assessment IR-07 [L] Incident Response Assistance – Assessment Procedure [applied] NIST-SP800-53L-rev5_ir-7L_assessment IR-08 [L] Incident Response Plan – Assessment Procedure [applied] NIST-SP800-53L-rev5_ir-8L_assessment MA-01 [L] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53L-rev5_ma-1L_assessment MA-02 [L] Controlled Maintenance – Assessment Procedure [applied] NIST-SP800-53L-rev5_ma-2L_assessment MA-04 [L] Nonlocal Maintenance – Assessment Procedure [applied] NIST-SP800-53L-rev5_ma-4L_assessment MA-05 [L] Maintenance Personnel – Assessment Procedure [applied] NIST-SP800-53L-rev5_ma-5L_assessment MP-01 [L] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53L-rev5_mp-1L_assessment MP-02 [L] Media Access – Assessment Procedure [applied] NIST-SP800-53L-rev5_mp-2L_assessment MP-06 [L] Media Sanitization – Assessment Procedure [applied] NIST-SP800-53L-rev5_mp-6L_assessment MP-07 [L] Media Use – Assessment Procedure [applied] NIST-SP800-53L-rev5_mp-7L_assessment PE-01 [L] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53L-rev5_pe-1L_assessment PE-02 [L] Physical Access Authorizations – Assessment Procedure [applied] NIST-SP800-53L-rev5_pe-2L_assessment PE-03 [L] Physical Access Control – Assessment Procedure [applied] NIST-SP800-53L-rev5_pe-3L_assessment PE-06 [L] Monitoring Physical Access – Assessment Procedure [applied] NIST-SP800-53L-rev5_pe-6L_assessment PE-08 [L] Visitor Access Records – Assessment Procedure [applied] NIST-SP800-53L-rev5_pe-8L_assessment PE-12 [L] Emergency Lighting – Assessment Procedure [applied] NIST-SP800-53L-rev5_pe-12L_assessment PE-13 [L] Fire Protection – Assessment Procedure [applied] NIST-SP800-53L-rev5_pe-13L_assessment PE-14 [L] Environmental Controls – Assessment Procedure [applied] NIST-SP800-53L-rev5_pe-14L_assessment PE-15 [L] Water Damage Protection – Assessment Procedure [applied] NIST-SP800-53L-rev5_pe-15L_assessment PE-16 [L] Delivery and Removal – Assessment Procedure [applied] NIST-SP800-53L-rev5_pe-16L_assessment PL-01 [L] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53L-rev5_pl-1L_assessment PL-02 [L] System Security and Privacy Plans – Assessment Procedure [applied] NIST-SP800-53L-rev5_pl-2L_assessment PL-04 [L] Rules of Behavior – Assessment Procedure [applied] NIST-SP800-53L-rev5_pl-4L_assessment PL-04(01) [L] Social Media and External Site/Application Usage Restrictions – Assessment Procedure [applied] NIST-SP800-53L-rev5_pl-4.1L_assessment PL-10 [L] Baseline Selection – Assessment Procedure [applied] NIST-SP800-53L-rev5_pl-10L_assessment PL-11 [L] Baseline Tailoring – Assessment Procedure [applied] NIST-SP800-53L-rev5_pl-11L_assessment PS-01 [L] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53L-rev5_ps-1L_assessment PS-02 [L] Position Risk Designation – Assessment Procedure [applied] NIST-SP800-53L-rev5_ps-2L_assessment PS-03 [L] Personnel Screening – Assessment Procedure [applied] NIST-SP800-53L-rev5_ps-3L_assessment PS-04 [L] Personnel Termination – Assessment Procedure [applied] NIST-SP800-53L-rev5_ps-4L_assessment PS-05 [L] Personnel Transfer – Assessment Procedure [applied] NIST-SP800-53L-rev5_ps-5L_assessment PS-06 [L] Access Agreements – Assessment Procedure [applied] NIST-SP800-53L-rev5_ps-6L_assessment PS-07 [L] External Personnel Security – Assessment Procedure [applied] NIST-SP800-53L-rev5_ps-7L_assessment PS-08 [L] Personnel Sanctions – Assessment Procedure [applied] NIST-SP800-53L-rev5_ps-8L_assessment PS-09 [L] Position Descriptions – Assessment Procedure [applied] NIST-SP800-53L-rev5_ps-9L_assessment RA-01 [L] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53L-rev5_ra-1L_assessment RA-02 [L] Security Categorization – Assessment Procedure [applied] NIST-SP800-53L-rev5_ra-2L_assessment RA-03 [L] Risk Assessment – Assessment Procedure [applied] NIST-SP800-53L-rev5_ra-3L_assessment RA-03(01) [L] Supply Chain Risk Assessment – Assessment Procedure [applied] NIST-SP800-53L-rev5_ra-3.1L_assessment RA-05 [L] Vulnerability Monitoring and Scanning – Assessment Procedure [applied] NIST-SP800-53L-rev5_ra-5L_assessment RA-05(02) [L] Update Vulnerabilities to Be Scanned – Assessment Procedure [applied] NIST-SP800-53L-rev5_ra-5.2L_assessment RA-05(11) [L] Public Disclosure Program – Assessment Procedure [applied] NIST-SP800-53L-rev5_ra-5.11L_assessment RA-07 [L] Risk Response – Assessment Procedure [applied] NIST-SP800-53L-rev5_ra-7L_assessment SA-01 [L] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53L-rev5_sa-1L_assessment SA-02 [L] Allocation of Resources – Assessment Procedure [applied] NIST-SP800-53L-rev5_sa-2L_assessment SA-03 [L] System Development Life Cycle – Assessment Procedure [applied] NIST-SP800-53L-rev5_sa-3L_assessment SA-04 [L] Acquisition Process – Assessment Procedure [applied] NIST-SP800-53L-rev5_sa-4L_assessment SA-04(10) [L] Use of Approved PIV Products – Assessment Procedure [applied] NIST-SP800-53L-rev5_sa-4.10L_assessment SA-05 [L] System Documentation – Assessment Procedure [applied] NIST-SP800-53L-rev5_sa-5L_assessment SA-08 [L] Security and Privacy Engineering Principles – Assessment Procedure [applied] NIST-SP800-53L-rev5_sa-8L_assessment SA-09 [L] External System Services – Assessment Procedure [applied] NIST-SP800-53L-rev5_sa-9L_assessment SA-22 [L] Unsupported System Components – Assessment Procedure [applied] NIST-SP800-53L-rev5_sa-22L_assessment SC-01 [L] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53L-rev5_sc-1L_assessment SC-05 [L] Denial-of-service Protection – Assessment Procedure [applied] NIST-SP800-53L-rev5_sc-5L_assessment SC-07 [L] Boundary Protection – Assessment Procedure [applied] NIST-SP800-53L-rev5_sc-7L_assessment SC-12 [L] Cryptographic Key Establishment and Management – Assessment Procedure [applied] NIST-SP800-53L-rev5_sc-12L_assessment SC-13 [L] Cryptographic Protection – Assessment Procedure [applied] NIST-SP800-53L-rev5_sc-13L_assessment SC-15 [L] Collaborative Computing Devices and Applications – Assessment Procedure [applied] NIST-SP800-53L-rev5_sc-15L_assessment SC-20 [L] Secure Name/Address Resolution Service (Authoritative Source) – Assessment Procedure [applied] NIST-SP800-53L-rev5_sc-20L_assessment SC-21 [L] Secure Name/Address Resolution Service (Recursive or Caching Resolver) – Assessment Procedure [applied] NIST-SP800-53L-rev5_sc-21L_assessment SC-22 [L] Architecture and Provisioning for Name/Address Resolution Service – Assessment Procedure [applied] NIST-SP800-53L-rev5_sc-22L_assessment SC-39 [L] Process Isolation – Assessment Procedure [applied] NIST-SP800-53L-rev5_sc-39L_assessment SI-01 [L] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53L-rev5_si-1L_assessment SI-02 [L] Flaw Remediation – Assessment Procedure [applied] NIST-SP800-53L-rev5_si-2L_assessment SI-03 [L] Malicious Code Protection – Assessment Procedure [applied] NIST-SP800-53L-rev5_si-3L_assessment SI-04 [L] System Monitoring – Assessment Procedure [applied] NIST-SP800-53L-rev5_si-4L_assessment SI-05 [L] Security Alerts, Advisories, and Directives – Assessment Procedure [applied] NIST-SP800-53L-rev5_si-5L_assessment SI-12 [L] Information Management and Retention – Assessment Procedure [applied] NIST-SP800-53L-rev5_si-12L_assessment SR-01 [L] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53L-rev5_sr-1L_assessment SR-02 [L] Supply Chain Risk Management Plan – Assessment Procedure [applied] NIST-SP800-53L-rev5_sr-2L_assessment SR-02(01) [L] Establish SCRM Team – Assessment Procedure [applied] NIST-SP800-53L-rev5_sr-2.1L_assessment SR-03 [L] Supply Chain Controls and Processes – Assessment Procedure [applied] NIST-SP800-53L-rev5_sr-3L_assessment SR-05 [L] Acquisition Strategies, Tools, and Methods – Assessment Procedure [applied] NIST-SP800-53L-rev5_sr-5L_assessment SR-08 [L] Notification Agreements – Assessment Procedure [applied] NIST-SP800-53L-rev5_sr-8L_assessment SR-10 [L] Inspection of Systems or Components – Assessment Procedure [applied] NIST-SP800-53L-rev5_sr-10L_assessment SR-11 [L] Component Authenticity – Assessment Procedure [applied] NIST-SP800-53L-rev5_sr-11L_assessment SR-11(01) [L] Anti-counterfeit Training – Assessment Procedure [applied] NIST-SP800-53L-rev5_sr-11.1L_assessment SR-11(02) [L] Configuration Control for Component Service and Repair – Assessment Procedure [applied] NIST-SP800-53L-rev5_sr-11.2L_assessment SR-12 [L] Component Disposal – Assessment Procedure [applied] NIST-SP800-53L-rev5_sr-12L_assessment New links (149) Blocks → AC-01 [L] Policy and Procedures [applied] NIST-SP800-53L-rev5_ac-1L_assessment Blocks → AC-02 [L] Account Management [applied] NIST-SP800-53L-rev5_ac-2L_assessment Blocks → AC-03 [L] Access Enforcement [applied] NIST-SP800-53L-rev5_ac-3L_assessment Blocks → AC-07 [L] Unsuccessful Logon Attempts [applied] NIST-SP800-53L-rev5_ac-7L_assessment Blocks → AC-08 [L] System Use Notification [applied] NIST-SP800-53L-rev5_ac-8L_assessment Blocks → AC-14 [L] Permitted Actions Without Identification or Authentication [applied] NIST-SP800-53L-rev5_ac-14L_assessment Blocks → AC-17 [L] Remote Access [applied] NIST-SP800-53L-rev5_ac-17L_assessment Blocks → AC-18 [L] Wireless Access [applied] NIST-SP800-53L-rev5_ac-18L_assessment Blocks → AC-19 [L] Access Control for Mobile Devices [applied] NIST-SP800-53L-rev5_ac-19L_assessment Blocks → AC-20 [L] Use of External Systems [applied] NIST-SP800-53L-rev5_ac-20L_assessment Blocks → AC-22 [L] Publicly Accessible Content [applied] NIST-SP800-53L-rev5_ac-22L_assessment Blocks → AT-01 [L] Policy and Procedures [applied] NIST-SP800-53L-rev5_at-1L_assessment Blocks → AT-02 [L] Literacy Training and Awareness [applied] NIST-SP800-53L-rev5_at-2L_assessment Blocks → AT-02(02) [L] Insider Threat [applied] NIST-SP800-53L-rev5_at-2.2L_assessment Blocks → AT-03 [L] Role-based Training [applied] NIST-SP800-53L-rev5_at-3L_assessment Blocks → AT-04 [L] Training Records [applied] NIST-SP800-53L-rev5_at-4L_assessment Blocks → AU-01 [L] Policy and Procedures [applied] NIST-SP800-53L-rev5_au-1L_assessment Blocks → AU-02 [L] Event Logging [applied] NIST-SP800-53L-rev5_au-2L_assessment Blocks → AU-03 [L] Content of Audit Records [applied] NIST-SP800-53L-rev5_au-3L_assessment Blocks → AU-04 [L] Audit Log Storage Capacity [applied] NIST-SP800-53L-rev5_au-4L_assessment Blocks → AU-05 [L] Response to Audit Logging Process Failures [applied] NIST-SP800-53L-rev5_au-5L_assessment Blocks → AU-06 [L] Audit Record Review, Analysis, and Reporting [applied] NIST-SP800-53L-rev5_au-6L_assessment Blocks → AU-08 [L] Time Stamps [applied] NIST-SP800-53L-rev5_au-8L_assessment Blocks → AU-09 [L] Protection of Audit Information [applied] NIST-SP800-53L-rev5_au-9L_assessment Blocks → AU-11 [L] Audit Record Retention [applied] NIST-SP800-53L-rev5_au-11L_assessment Blocks → AU-12 [L] Audit Record Generation [applied] NIST-SP800-53L-rev5_au-12L_assessment Blocks → CA-01 [L] Policy and Procedures [applied] NIST-SP800-53L-rev5_ca-1L_assessment Blocks → CA-02 [L] Control Assessments [applied] NIST-SP800-53L-rev5_ca-2L_assessment Blocks → CA-03 [L] Information Exchange [applied] NIST-SP800-53L-rev5_ca-3L_assessment Blocks → CA-05 [L] Plan of Action and Milestones [applied] NIST-SP800-53L-rev5_ca-5L_assessment Blocks → CA-06 [L] Authorization [applied] NIST-SP800-53L-rev5_ca-6L_assessment Blocks → CA-07 [L] Continuous Monitoring [applied] NIST-SP800-53L-rev5_ca-7L_assessment Blocks → CA-07(04) [L] Risk Monitoring [applied] NIST-SP800-53L-rev5_ca-7.4L_assessment Blocks → CA-09 [L] Internal System Connections [applied] NIST-SP800-53L-rev5_ca-9L_assessment Blocks → CM-01 [L] Policy and Procedures [applied] NIST-SP800-53L-rev5_cm-1L_assessment Blocks → CM-02 [L] Baseline Configuration [applied] NIST-SP800-53L-rev5_cm-2L_assessment Blocks → CM-04 [L] Impact Analyses [applied] NIST-SP800-53L-rev5_cm-4L_assessment Blocks → CM-05 [L] Access Restrictions for Change [applied] NIST-SP800-53L-rev5_cm-5L_assessment Blocks → CM-06 [L] Configuration Settings [applied] NIST-SP800-53L-rev5_cm-6L_assessment Blocks → CM-07 [L] Least Functionality [applied] NIST-SP800-53L-rev5_cm-7L_assessment Blocks → CM-08 [L] System Component Inventory [applied] NIST-SP800-53L-rev5_cm-8L_assessment Blocks → CM-10 [L] Software Usage Restrictions [applied] NIST-SP800-53L-rev5_cm-10L_assessment Blocks → CM-11 [L] User-installed Software [applied] NIST-SP800-53L-rev5_cm-11L_assessment Blocks → CP-01 [L] Policy and Procedures [applied] NIST-SP800-53L-rev5_cp-1L_assessment Blocks → CP-02 [L] Contingency Plan [applied] NIST-SP800-53L-rev5_cp-2L_assessment Blocks → CP-03 [L] Contingency Training [applied] NIST-SP800-53L-rev5_cp-3L_assessment Blocks → CP-04 [L] Contingency Plan Testing [applied] NIST-SP800-53L-rev5_cp-4L_assessment Blocks → CP-09 [L] System Backup [applied] NIST-SP800-53L-rev5_cp-9L_assessment Blocks → CP-10 [L] System Recovery and Reconstitution [applied] NIST-SP800-53L-rev5_cp-10L_assessment Blocks → IA-01 [L] Policy and Procedures [applied] NIST-SP800-53L-rev5_ia-1L_assessment Blocks → IA-02 [L] Identification and Authentication (Organizational Users) [applied] NIST-SP800-53L-rev5_ia-2L_assessment Blocks → IA-02(01) [L] Multi-factor Authentication to Privileged Accounts [applied] NIST-SP800-53L-rev5_ia-2.1L_assessment Blocks → IA-02(02) [L] Multi-factor Authentication to Non-privileged Accounts [applied] NIST-SP800-53L-rev5_ia-2.2L_assessment Blocks → IA-02(08) [L] Access to Accounts — Replay Resistant [applied] NIST-SP800-53L-rev5_ia-2.8L_assessment Blocks → IA-02(12) [L] Acceptance of PIV Credentials [applied] NIST-SP800-53L-rev5_ia-2.12L_assessment Blocks → IA-04 [L] Identifier Management [applied] NIST-SP800-53L-rev5_ia-4L_assessment Blocks → IA-05 [L] Authenticator Management [applied] NIST-SP800-53L-rev5_ia-5L_assessment Blocks → IA-05(01) [L] Password-based Authentication [applied] NIST-SP800-53L-rev5_ia-5.1L_assessment Blocks → IA-06 [L] Authentication Feedback [applied] NIST-SP800-53L-rev5_ia-6L_assessment Blocks → IA-07 [L] Cryptographic Module Authentication [applied] NIST-SP800-53L-rev5_ia-7L_assessment Blocks → IA-08 [L] Identification and Authentication (Non-organizational Users) [applied] NIST-SP800-53L-rev5_ia-8L_assessment Blocks → IA-08(01) [L] Acceptance of PIV Credentials from Other Agencies [applied] NIST-SP800-53L-rev5_ia-8.1L_assessment Blocks → IA-08(02) [L] Acceptance of External Authenticators [applied] NIST-SP800-53L-rev5_ia-8.2L_assessment Blocks → IA-08(04) [L] Use of Defined Profiles [applied] NIST-SP800-53L-rev5_ia-8.4L_assessment Blocks → IA-11 [L] Re-authentication [applied] NIST-SP800-53L-rev5_ia-11L_assessment Blocks → IR-01 [L] Policy and Procedures [applied] NIST-SP800-53L-rev5_ir-1L_assessment Blocks → IR-02 [L] Incident Response Training [applied] NIST-SP800-53L-rev5_ir-2L_assessment Blocks → IR-04 [L] Incident Handling [applied] NIST-SP800-53L-rev5_ir-4L_assessment Blocks → IR-05 [L] Incident Monitoring [applied] NIST-SP800-53L-rev5_ir-5L_assessment Blocks → IR-06 [L] Incident Reporting [applied] NIST-SP800-53L-rev5_ir-6L_assessment Blocks → IR-07 [L] Incident Response Assistance [applied] NIST-SP800-53L-rev5_ir-7L_assessment Blocks → IR-08 [L] Incident Response Plan [applied] NIST-SP800-53L-rev5_ir-8L_assessment Blocks → MA-01 [L] Policy and Procedures [applied] NIST-SP800-53L-rev5_ma-1L_assessment Blocks → MA-02 [L] Controlled Maintenance [applied] NIST-SP800-53L-rev5_ma-2L_assessment Blocks → MA-04 [L] Nonlocal Maintenance [applied] NIST-SP800-53L-rev5_ma-4L_assessment Blocks → MA-05 [L] Maintenance Personnel [applied] NIST-SP800-53L-rev5_ma-5L_assessment Blocks → MP-01 [L] Policy and Procedures [applied] NIST-SP800-53L-rev5_mp-1L_assessment Blocks → MP-02 [L] Media Access [applied] NIST-SP800-53L-rev5_mp-2L_assessment Blocks → MP-06 [L] Media Sanitization [applied] NIST-SP800-53L-rev5_mp-6L_assessment Blocks → MP-07 [L] Media Use [applied] NIST-SP800-53L-rev5_mp-7L_assessment Blocks → PE-01 [L] Policy and Procedures [applied] NIST-SP800-53L-rev5_pe-1L_assessment Blocks → PE-02 [L] Physical Access Authorizations [applied] NIST-SP800-53L-rev5_pe-2L_assessment Blocks → PE-03 [L] Physical Access Control [applied] NIST-SP800-53L-rev5_pe-3L_assessment Blocks → PE-06 [L] Monitoring Physical Access [applied] NIST-SP800-53L-rev5_pe-6L_assessment Blocks → PE-08 [L] Visitor Access Records [applied] NIST-SP800-53L-rev5_pe-8L_assessment Blocks → PE-12 [L] Emergency Lighting [applied] NIST-SP800-53L-rev5_pe-12L_assessment Blocks → PE-13 [L] Fire Protection [applied] NIST-SP800-53L-rev5_pe-13L_assessment Blocks → PE-14 [L] Environmental Controls [applied] NIST-SP800-53L-rev5_pe-14L_assessment Blocks → PE-15 [L] Water Damage Protection [applied] NIST-SP800-53L-rev5_pe-15L_assessment Blocks → PE-16 [L] Delivery and Removal [applied] NIST-SP800-53L-rev5_pe-16L_assessment Blocks → PL-01 [L] Policy and Procedures [applied] NIST-SP800-53L-rev5_pl-1L_assessment Blocks → PL-02 [L] System Security and Privacy Plans [applied] NIST-SP800-53L-rev5_pl-2L_assessment Blocks → PL-04 [L] Rules of Behavior [applied] NIST-SP800-53L-rev5_pl-4L_assessment Blocks → PL-04(01) [L] Social Media and External Site/Application Usage Restrictions [applied] NIST-SP800-53L-rev5_pl-4.1L_assessment Blocks → PL-10 [L] Baseline Selection [applied] NIST-SP800-53L-rev5_pl-10L_assessment Blocks → PL-11 [L] Baseline Tailoring [applied] NIST-SP800-53L-rev5_pl-11L_assessment Blocks → PS-01 [L] Policy and Procedures [applied] NIST-SP800-53L-rev5_ps-1L_assessment Blocks → PS-02 [L] Position Risk Designation [applied] NIST-SP800-53L-rev5_ps-2L_assessment Blocks → PS-03 [L] Personnel Screening [applied] NIST-SP800-53L-rev5_ps-3L_assessment Blocks → PS-04 [L] Personnel Termination [applied] NIST-SP800-53L-rev5_ps-4L_assessment Blocks → PS-05 [L] Personnel Transfer [applied] NIST-SP800-53L-rev5_ps-5L_assessment Blocks → PS-06 [L] Access Agreements [applied] NIST-SP800-53L-rev5_ps-6L_assessment Blocks → PS-07 [L] External Personnel Security [applied] NIST-SP800-53L-rev5_ps-7L_assessment Blocks → PS-08 [L] Personnel Sanctions [applied] NIST-SP800-53L-rev5_ps-8L_assessment Blocks → PS-09 [L] Position Descriptions [applied] NIST-SP800-53L-rev5_ps-9L_assessment Blocks → RA-01 [L] Policy and Procedures [applied] NIST-SP800-53L-rev5_ra-1L_assessment Blocks → RA-02 [L] Security Categorization [applied] NIST-SP800-53L-rev5_ra-2L_assessment Blocks → RA-03 [L] Risk Assessment [applied] NIST-SP800-53L-rev5_ra-3L_assessment Blocks → RA-03(01) [L] Supply Chain Risk Assessment [applied] NIST-SP800-53L-rev5_ra-3.1L_assessment Blocks → RA-05 [L] Vulnerability Monitoring and Scanning [applied] NIST-SP800-53L-rev5_ra-5L_assessment Blocks → RA-05(02) [L] Update Vulnerabilities to Be Scanned [applied] NIST-SP800-53L-rev5_ra-5.2L_assessment Blocks → RA-05(11) [L] Public Disclosure Program [applied] NIST-SP800-53L-rev5_ra-5.11L_assessment Blocks → RA-07 [L] Risk Response [applied] NIST-SP800-53L-rev5_ra-7L_assessment Blocks → SA-01 [L] Policy and Procedures [applied] NIST-SP800-53L-rev5_sa-1L_assessment Blocks → SA-02 [L] Allocation of Resources [applied] NIST-SP800-53L-rev5_sa-2L_assessment Blocks → SA-03 [L] System Development Life Cycle [applied] NIST-SP800-53L-rev5_sa-3L_assessment Blocks → SA-04 [L] Acquisition Process [applied] NIST-SP800-53L-rev5_sa-4L_assessment Blocks → SA-04(10) [L] Use of Approved PIV Products [applied] NIST-SP800-53L-rev5_sa-4.10L_assessment Blocks → SA-05 [L] System Documentation [applied] NIST-SP800-53L-rev5_sa-5L_assessment Blocks → SA-08 [L] Security and Privacy Engineering Principles [applied] NIST-SP800-53L-rev5_sa-8L_assessment Blocks → SA-09 [L] External System Services [applied] NIST-SP800-53L-rev5_sa-9L_assessment Blocks → SA-22 [L] Unsupported System Components [applied] NIST-SP800-53L-rev5_sa-22L_assessment Blocks → SC-01 [L] Policy and Procedures [applied] NIST-SP800-53L-rev5_sc-1L_assessment Blocks → SC-05 [L] Denial-of-service Protection [applied] NIST-SP800-53L-rev5_sc-5L_assessment Blocks → SC-07 [L] Boundary Protection [applied] NIST-SP800-53L-rev5_sc-7L_assessment Blocks → SC-12 [L] Cryptographic Key Establishment and Management [applied] NIST-SP800-53L-rev5_sc-12L_assessment Blocks → SC-13 [L] Cryptographic Protection [applied] NIST-SP800-53L-rev5_sc-13L_assessment Blocks → SC-15 [L] Collaborative Computing Devices and Applications [applied] NIST-SP800-53L-rev5_sc-15L_assessment Blocks → SC-20 [L] Secure Name/Address Resolution Service (Authoritative Source) [applied] NIST-SP800-53L-rev5_sc-20L_assessment Blocks → SC-21 [L] Secure Name/Address Resolution Service (Recursive or Caching Resolver) [applied] NIST-SP800-53L-rev5_sc-21L_assessment Blocks → SC-22 [L] Architecture and Provisioning for Name/Address Resolution Service [applied] NIST-SP800-53L-rev5_sc-22L_assessment Blocks → SC-39 [L] Process Isolation [applied] NIST-SP800-53L-rev5_sc-39L_assessment Blocks → SI-01 [L] Policy and Procedures [applied] NIST-SP800-53L-rev5_si-1L_assessment Blocks → SI-02 [L] Flaw Remediation [applied] NIST-SP800-53L-rev5_si-2L_assessment Blocks → SI-03 [L] Malicious Code Protection [applied] NIST-SP800-53L-rev5_si-3L_assessment Blocks → SI-04 [L] System Monitoring [applied] NIST-SP800-53L-rev5_si-4L_assessment Blocks → SI-05 [L] Security Alerts, Advisories, and Directives [applied] NIST-SP800-53L-rev5_si-5L_assessment Blocks → SI-12 [L] Information Management and Retention [applied] NIST-SP800-53L-rev5_si-12L_assessment Blocks → SR-01 [L] Policy and Procedures [applied] NIST-SP800-53L-rev5_sr-1L_assessment Blocks → SR-02 [L] Supply Chain Risk Management Plan [applied] NIST-SP800-53L-rev5_sr-2L_assessment Blocks → SR-02(01) [L] Establish SCRM Team [applied] NIST-SP800-53L-rev5_sr-2.1L_assessment Blocks → SR-03 [L] Supply Chain Controls and Processes [applied] NIST-SP800-53L-rev5_sr-3L_assessment Blocks → SR-05 [L] Acquisition Strategies, Tools, and Methods [applied] NIST-SP800-53L-rev5_sr-5L_assessment Blocks → SR-08 [L] Notification Agreements [applied] NIST-SP800-53L-rev5_sr-8L_assessment Blocks → SR-10 [L] Inspection of Systems or Components [applied] NIST-SP800-53L-rev5_sr-10L_assessment Blocks → SR-11 [L] Component Authenticity [applied] NIST-SP800-53L-rev5_sr-11L_assessment Blocks → SR-11(01) [L] Anti-counterfeit Training [applied] NIST-SP800-53L-rev5_sr-11.1L_assessment Blocks → SR-11(02) [L] Configuration Control for Component Service and Repair [applied] NIST-SP800-53L-rev5_sr-11.2L_assessment Blocks → SR-12 [L] Component Disposal [applied] NIST-SP800-53L-rev5_sr-12L_assessment
New version: NIST SP 800-53 Rev. 5 PRIVACY Baseline (v1.5.0-09ec05c6b7) – 97 new, 0 changed, 0 removed, 96 links	New version: NIST SP 800-53 Rev. 5 PRIVACY Baseline (v1.5.0-09ec05c6b7) – 97 new, 0 changed, 0 removed, 96 links Document: NIST SP 800-53 Rev. 5 PRIVACY Baseline (https://raw.githubusercontent.com/usnistgov/oscal-content/v1.5.0/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_PRIVACY-baseline-resolved-profile_catalog.json) Version: v1.5.0-09ec05c6b7 Project: NIST Import: #645, 20.10.2026 21:17, nist The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes). Review: 0 open, 193 applied, 0 rejected. New sections (97) NIST SP 800-53 Rev. 5 PRIVACY Baseline – Assessment Procedures [applied] NIST-SP800-53P-rev5_assessment-procedures AC-01 [P] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53P-rev5_ac-1P_assessment AC-03(14) [P] Individual Access – Assessment Procedure [applied] NIST-SP800-53P-rev5_ac-3.14P_assessment AT-01 [P] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53P-rev5_at-1P_assessment AT-02 [P] Literacy Training and Awareness – Assessment Procedure [applied] NIST-SP800-53P-rev5_at-2P_assessment AT-03 [P] Role-based Training – Assessment Procedure [applied] NIST-SP800-53P-rev5_at-3P_assessment AT-03(05) [P] Processing Personally Identifiable Information – Assessment Procedure [applied] NIST-SP800-53P-rev5_at-3.5P_assessment AT-04 [P] Training Records – Assessment Procedure [applied] NIST-SP800-53P-rev5_at-4P_assessment AU-01 [P] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53P-rev5_au-1P_assessment AU-02 [P] Event Logging – Assessment Procedure [applied] NIST-SP800-53P-rev5_au-2P_assessment AU-03(03) [P] Limit Personally Identifiable Information Elements – Assessment Procedure [applied] NIST-SP800-53P-rev5_au-3.3P_assessment AU-11 [P] Audit Record Retention – Assessment Procedure [applied] NIST-SP800-53P-rev5_au-11P_assessment CA-01 [P] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53P-rev5_ca-1P_assessment CA-02 [P] Control Assessments – Assessment Procedure [applied] NIST-SP800-53P-rev5_ca-2P_assessment CA-05 [P] Plan of Action and Milestones – Assessment Procedure [applied] NIST-SP800-53P-rev5_ca-5P_assessment CA-06 [P] Authorization – Assessment Procedure [applied] NIST-SP800-53P-rev5_ca-6P_assessment CA-07 [P] Continuous Monitoring – Assessment Procedure [applied] NIST-SP800-53P-rev5_ca-7P_assessment CA-07(04) [P] Risk Monitoring – Assessment Procedure [applied] NIST-SP800-53P-rev5_ca-7.4P_assessment CM-01 [P] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53P-rev5_cm-1P_assessment CM-04 [P] Impact Analyses – Assessment Procedure [applied] NIST-SP800-53P-rev5_cm-4P_assessment IR-01 [P] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53P-rev5_ir-1P_assessment IR-02 [P] Incident Response Training – Assessment Procedure [applied] NIST-SP800-53P-rev5_ir-2P_assessment IR-02(03) [P] Breach – Assessment Procedure [applied] NIST-SP800-53P-rev5_ir-2.3P_assessment IR-03 [P] Incident Response Testing – Assessment Procedure [applied] NIST-SP800-53P-rev5_ir-3P_assessment IR-04 [P] Incident Handling – Assessment Procedure [applied] NIST-SP800-53P-rev5_ir-4P_assessment IR-05 [P] Incident Monitoring – Assessment Procedure [applied] NIST-SP800-53P-rev5_ir-5P_assessment IR-06 [P] Incident Reporting – Assessment Procedure [applied] NIST-SP800-53P-rev5_ir-6P_assessment IR-07 [P] Incident Response Assistance – Assessment Procedure [applied] NIST-SP800-53P-rev5_ir-7P_assessment IR-08 [P] Incident Response Plan – Assessment Procedure [applied] NIST-SP800-53P-rev5_ir-8P_assessment IR-08(01) [P] Breaches – Assessment Procedure [applied] NIST-SP800-53P-rev5_ir-8.1P_assessment MP-01 [P] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53P-rev5_mp-1P_assessment MP-06 [P] Media Sanitization – Assessment Procedure [applied] NIST-SP800-53P-rev5_mp-6P_assessment PE-08(03) [P] Limit Personally Identifiable Information Elements – Assessment Procedure [applied] NIST-SP800-53P-rev5_pe-8.3P_assessment PL-01 [P] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53P-rev5_pl-1P_assessment PL-02 [P] System Security and Privacy Plans – Assessment Procedure [applied] NIST-SP800-53P-rev5_pl-2P_assessment PL-04 [P] Rules of Behavior – Assessment Procedure [applied] NIST-SP800-53P-rev5_pl-4P_assessment PL-04(01) [P] Social Media and External Site/Application Usage Restrictions – Assessment Procedure [applied] NIST-SP800-53P-rev5_pl-4.1P_assessment PL-08 [P] Security and Privacy Architectures – Assessment Procedure [applied] NIST-SP800-53P-rev5_pl-8P_assessment PL-09 [P] Central Management – Assessment Procedure [applied] NIST-SP800-53P-rev5_pl-9P_assessment PM-03 [P] Information Security and Privacy Resources – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-3P_assessment PM-04 [P] Plan of Action and Milestones Process – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-4P_assessment PM-05(01) [P] Inventory of Personally Identifiable Information – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-5.1P_assessment PM-06 [P] Measures of Performance – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-6P_assessment PM-07 [P] Enterprise Architecture – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-7P_assessment PM-08 [P] Critical Infrastructure Plan – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-8P_assessment PM-09 [P] Risk Management Strategy – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-9P_assessment PM-10 [P] Authorization Process – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-10P_assessment PM-11 [P] Mission and Business Process Definition – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-11P_assessment PM-13 [P] Security and Privacy Workforce – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-13P_assessment PM-14 [P] Testing, Training, and Monitoring – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-14P_assessment PM-17 [P] Protecting Controlled Unclassified Information on External Systems – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-17P_assessment PM-18 [P] Privacy Program Plan – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-18P_assessment PM-19 [P] Privacy Program Leadership Role – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-19P_assessment PM-20 [P] Dissemination of Privacy Program Information – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-20P_assessment PM-20(01) [P] Privacy Policies on Websites, Applications, and Digital Services – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-20.1P_assessment PM-21 [P] Accounting of Disclosures – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-21P_assessment PM-22 [P] Personally Identifiable Information Quality Management – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-22P_assessment PM-24 [P] Data Integrity Board – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-24P_assessment PM-25 [P] Minimization of Personally Identifiable Information Used in Testing, Training, and Research – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-25P_assessment PM-26 [P] Complaint Management – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-26P_assessment PM-27 [P] Privacy Reporting – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-27P_assessment PM-28 [P] Risk Framing – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-28P_assessment PM-31 [P] Continuous Monitoring Strategy – Assessment Procedure [applied] NIST-SP800-53P-rev5_pm-31P_assessment PS-06 [P] Access Agreements – Assessment Procedure [applied] NIST-SP800-53P-rev5_ps-6P_assessment PT-01 [P] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53P-rev5_pt-1P_assessment PT-02 [P] Authority to Process Personally Identifiable Information – Assessment Procedure [applied] NIST-SP800-53P-rev5_pt-2P_assessment PT-03 [P] Personally Identifiable Information Processing Purposes – Assessment Procedure [applied] NIST-SP800-53P-rev5_pt-3P_assessment PT-04 [P] Consent – Assessment Procedure [applied] NIST-SP800-53P-rev5_pt-4P_assessment PT-05 [P] Privacy Notice – Assessment Procedure [applied] NIST-SP800-53P-rev5_pt-5P_assessment PT-05(02) [P] Privacy Act Statements – Assessment Procedure [applied] NIST-SP800-53P-rev5_pt-5.2P_assessment PT-06 [P] System of Records Notice – Assessment Procedure [applied] NIST-SP800-53P-rev5_pt-6P_assessment PT-06(01) [P] Routine Uses – Assessment Procedure [applied] NIST-SP800-53P-rev5_pt-6.1P_assessment PT-06(02) [P] Exemption Rules – Assessment Procedure [applied] NIST-SP800-53P-rev5_pt-6.2P_assessment PT-07 [P] Specific Categories of Personally Identifiable Information – Assessment Procedure [applied] NIST-SP800-53P-rev5_pt-7P_assessment PT-07(01) [P] Social Security Numbers – Assessment Procedure [applied] NIST-SP800-53P-rev5_pt-7.1P_assessment PT-07(02) [P] First Amendment Information – Assessment Procedure [applied] NIST-SP800-53P-rev5_pt-7.2P_assessment PT-08 [P] Computer Matching Requirements – Assessment Procedure [applied] NIST-SP800-53P-rev5_pt-8P_assessment RA-01 [P] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53P-rev5_ra-1P_assessment RA-03 [P] Risk Assessment – Assessment Procedure [applied] NIST-SP800-53P-rev5_ra-3P_assessment RA-07 [P] Risk Response – Assessment Procedure [applied] NIST-SP800-53P-rev5_ra-7P_assessment RA-08 [P] Privacy Impact Assessments – Assessment Procedure [applied] NIST-SP800-53P-rev5_ra-8P_assessment SA-01 [P] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53P-rev5_sa-1P_assessment SA-02 [P] Allocation of Resources – Assessment Procedure [applied] NIST-SP800-53P-rev5_sa-2P_assessment SA-03 [P] System Development Life Cycle – Assessment Procedure [applied] NIST-SP800-53P-rev5_sa-3P_assessment SA-04 [P] Acquisition Process – Assessment Procedure [applied] NIST-SP800-53P-rev5_sa-4P_assessment SA-08(33) [P] Minimization – Assessment Procedure [applied] NIST-SP800-53P-rev5_sa-8.33P_assessment SA-09 [P] External System Services – Assessment Procedure [applied] NIST-SP800-53P-rev5_sa-9P_assessment SA-11 [P] Developer Testing and Evaluation – Assessment Procedure [applied] NIST-SP800-53P-rev5_sa-11P_assessment SC-07(24) [P] Personally Identifiable Information – Assessment Procedure [applied] NIST-SP800-53P-rev5_sc-7.24P_assessment SI-01 [P] Policy and Procedures – Assessment Procedure [applied] NIST-SP800-53P-rev5_si-1P_assessment SI-12 [P] Information Management and Retention – Assessment Procedure [applied] NIST-SP800-53P-rev5_si-12P_assessment SI-12(01) [P] Limit Personally Identifiable Information Elements – Assessment Procedure [applied] NIST-SP800-53P-rev5_si-12.1P_assessment SI-12(02) [P] Minimize Personally Identifiable Information in Testing, Training, and Research – Assessment Procedure [applied] NIST-SP800-53P-rev5_si-12.2P_assessment SI-12(03) [P] Information Disposal – Assessment Procedure [applied] NIST-SP800-53P-rev5_si-12.3P_assessment SI-18 [P] Personally Identifiable Information Quality Operations – Assessment Procedure [applied] NIST-SP800-53P-rev5_si-18P_assessment SI-18(04) [P] Individual Requests – Assessment Procedure [applied] NIST-SP800-53P-rev5_si-18.4P_assessment SI-19 [P] De-identification – Assessment Procedure [applied] NIST-SP800-53P-rev5_si-19P_assessment New links (96) Blocks → AC-01 [P] Policy and Procedures [applied] NIST-SP800-53P-rev5_ac-1P_assessment Blocks → AC-03(14) [P] Individual Access [applied] NIST-SP800-53P-rev5_ac-3.14P_assessment Blocks → AT-01 [P] Policy and Procedures [applied] NIST-SP800-53P-rev5_at-1P_assessment Blocks → AT-02 [P] Literacy Training and Awareness [applied] NIST-SP800-53P-rev5_at-2P_assessment Blocks → AT-03 [P] Role-based Training [applied] NIST-SP800-53P-rev5_at-3P_assessment Blocks → AT-03(05) [P] Processing Personally Identifiable Information [applied] NIST-SP800-53P-rev5_at-3.5P_assessment Blocks → AT-04 [P] Training Records [applied] NIST-SP800-53P-rev5_at-4P_assessment Blocks → AU-01 [P] Policy and Procedures [applied] NIST-SP800-53P-rev5_au-1P_assessment Blocks → AU-02 [P] Event Logging [applied] NIST-SP800-53P-rev5_au-2P_assessment Blocks → AU-03(03) [P] Limit Personally Identifiable Information Elements [applied] NIST-SP800-53P-rev5_au-3.3P_assessment Blocks → AU-11 [P] Audit Record Retention [applied] NIST-SP800-53P-rev5_au-11P_assessment Blocks → CA-01 [P] Policy and Procedures [applied] NIST-SP800-53P-rev5_ca-1P_assessment Blocks → CA-02 [P] Control Assessments [applied] NIST-SP800-53P-rev5_ca-2P_assessment Blocks → CA-05 [P] Plan of Action and Milestones [applied] NIST-SP800-53P-rev5_ca-5P_assessment Blocks → CA-06 [P] Authorization [applied] NIST-SP800-53P-rev5_ca-6P_assessment Blocks → CA-07 [P] Continuous Monitoring [applied] NIST-SP800-53P-rev5_ca-7P_assessment Blocks → CA-07(04) [P] Risk Monitoring [applied] NIST-SP800-53P-rev5_ca-7.4P_assessment Blocks → CM-01 [P] Policy and Procedures [applied] NIST-SP800-53P-rev5_cm-1P_assessment Blocks → CM-04 [P] Impact Analyses [applied] NIST-SP800-53P-rev5_cm-4P_assessment Blocks → IR-01 [P] Policy and Procedures [applied] NIST-SP800-53P-rev5_ir-1P_assessment Blocks → IR-02 [P] Incident Response Training [applied] NIST-SP800-53P-rev5_ir-2P_assessment Blocks → IR-02(03) [P] Breach [applied] NIST-SP800-53P-rev5_ir-2.3P_assessment Blocks → IR-03 [P] Incident Response Testing [applied] NIST-SP800-53P-rev5_ir-3P_assessment Blocks → IR-04 [P] Incident Handling [applied] NIST-SP800-53P-rev5_ir-4P_assessment Blocks → IR-05 [P] Incident Monitoring [applied] NIST-SP800-53P-rev5_ir-5P_assessment Blocks → IR-06 [P] Incident Reporting [applied] NIST-SP800-53P-rev5_ir-6P_assessment Blocks → IR-07 [P] Incident Response Assistance [applied] NIST-SP800-53P-rev5_ir-7P_assessment Blocks → IR-08 [P] Incident Response Plan [applied] NIST-SP800-53P-rev5_ir-8P_assessment Blocks → IR-08(01) [P] Breaches [applied] NIST-SP800-53P-rev5_ir-8.1P_assessment Blocks → MP-01 [P] Policy and Procedures [applied] NIST-SP800-53P-rev5_mp-1P_assessment Blocks → MP-06 [P] Media Sanitization [applied] NIST-SP800-53P-rev5_mp-6P_assessment Blocks → PE-08(03) [P] Limit Personally Identifiable Information Elements [applied] NIST-SP800-53P-rev5_pe-8.3P_assessment Blocks → PL-01 [P] Policy and Procedures [applied] NIST-SP800-53P-rev5_pl-1P_assessment Blocks → PL-02 [P] System Security and Privacy Plans [applied] NIST-SP800-53P-rev5_pl-2P_assessment Blocks → PL-04 [P] Rules of Behavior [applied] NIST-SP800-53P-rev5_pl-4P_assessment Blocks → PL-04(01) [P] Social Media and External Site/Application Usage Restrictions [applied] NIST-SP800-53P-rev5_pl-4.1P_assessment Blocks → PL-08 [P] Security and Privacy Architectures [applied] NIST-SP800-53P-rev5_pl-8P_assessment Blocks → PL-09 [P] Central Management [applied] NIST-SP800-53P-rev5_pl-9P_assessment Blocks → PM-03 [P] Information Security and Privacy Resources [applied] NIST-SP800-53P-rev5_pm-3P_assessment Blocks → PM-04 [P] Plan of Action and Milestones Process [applied] NIST-SP800-53P-rev5_pm-4P_assessment Blocks → PM-05(01) [P] Inventory of Personally Identifiable Information [applied] NIST-SP800-53P-rev5_pm-5.1P_assessment Blocks → PM-06 [P] Measures of Performance [applied] NIST-SP800-53P-rev5_pm-6P_assessment Blocks → PM-07 [P] Enterprise Architecture [applied] NIST-SP800-53P-rev5_pm-7P_assessment Blocks → PM-08 [P] Critical Infrastructure Plan [applied] NIST-SP800-53P-rev5_pm-8P_assessment Blocks → PM-09 [P] Risk Management Strategy [applied] NIST-SP800-53P-rev5_pm-9P_assessment Blocks → PM-10 [P] Authorization Process [applied] NIST-SP800-53P-rev5_pm-10P_assessment Blocks → PM-11 [P] Mission and Business Process Definition [applied] NIST-SP800-53P-rev5_pm-11P_assessment Blocks → PM-13 [P] Security and Privacy Workforce [applied] NIST-SP800-53P-rev5_pm-13P_assessment Blocks → PM-14 [P] Testing, Training, and Monitoring [applied] NIST-SP800-53P-rev5_pm-14P_assessment Blocks → PM-17 [P] Protecting Controlled Unclassified Information on External Systems [applied] NIST-SP800-53P-rev5_pm-17P_assessment Blocks → PM-18 [P] Privacy Program Plan [applied] NIST-SP800-53P-rev5_pm-18P_assessment Blocks → PM-19 [P] Privacy Program Leadership Role [applied] NIST-SP800-53P-rev5_pm-19P_assessment Blocks → PM-20 [P] Dissemination of Privacy Program Information [applied] NIST-SP800-53P-rev5_pm-20P_assessment Blocks → PM-20(01) [P] Privacy Policies on Websites, Applications, and Digital Services [applied] NIST-SP800-53P-rev5_pm-20.1P_assessment Blocks → PM-21 [P] Accounting of Disclosures [applied] NIST-SP800-53P-rev5_pm-21P_assessment Blocks → PM-22 [P] Personally Identifiable Information Quality Management [applied] NIST-SP800-53P-rev5_pm-22P_assessment Blocks → PM-24 [P] Data Integrity Board [applied] NIST-SP800-53P-rev5_pm-24P_assessment Blocks → PM-25 [P] Minimization of Personally Identifiable Information Used in Testing, Training, and Research [applied] NIST-SP800-53P-rev5_pm-25P_assessment Blocks → PM-26 [P] Complaint Management [applied] NIST-SP800-53P-rev5_pm-26P_assessment Blocks → PM-27 [P] Privacy Reporting [applied] NIST-SP800-53P-rev5_pm-27P_assessment Blocks → PM-28 [P] Risk Framing [applied] NIST-SP800-53P-rev5_pm-28P_assessment Blocks → PM-31 [P] Continuous Monitoring Strategy [applied] NIST-SP800-53P-rev5_pm-31P_assessment Blocks → PS-06 [P] Access Agreements [applied] NIST-SP800-53P-rev5_ps-6P_assessment Blocks → PT-01 [P] Policy and Procedures [applied] NIST-SP800-53P-rev5_pt-1P_assessment Blocks → PT-02 [P] Authority to Process Personally Identifiable Information [applied] NIST-SP800-53P-rev5_pt-2P_assessment Blocks → PT-03 [P] Personally Identifiable Information Processing Purposes [applied] NIST-SP800-53P-rev5_pt-3P_assessment Blocks → PT-04 [P] Consent [applied] NIST-SP800-53P-rev5_pt-4P_assessment Blocks → PT-05 [P] Privacy Notice [applied] NIST-SP800-53P-rev5_pt-5P_assessment Blocks → PT-05(02) [P] Privacy Act Statements [applied] NIST-SP800-53P-rev5_pt-5.2P_assessment Blocks → PT-06 [P] System of Records Notice [applied] NIST-SP800-53P-rev5_pt-6P_assessment Blocks → PT-06(01) [P] Routine Uses [applied] NIST-SP800-53P-rev5_pt-6.1P_assessment Blocks → PT-06(02) [P] Exemption Rules [applied] NIST-SP800-53P-rev5_pt-6.2P_assessment Blocks → PT-07 [P] Specific Categories of Personally Identifiable Information [applied] NIST-SP800-53P-rev5_pt-7P_assessment Blocks → PT-07(01) [P] Social Security Numbers [applied] NIST-SP800-53P-rev5_pt-7.1P_assessment Blocks → PT-07(02) [P] First Amendment Information [applied] NIST-SP800-53P-rev5_pt-7.2P_assessment Blocks → PT-08 [P] Computer Matching Requirements [applied] NIST-SP800-53P-rev5_pt-8P_assessment Blocks → RA-01 [P] Policy and Procedures [applied] NIST-SP800-53P-rev5_ra-1P_assessment Blocks → RA-03 [P] Risk Assessment [applied] NIST-SP800-53P-rev5_ra-3P_assessment Blocks → RA-07 [P] Risk Response [applied] NIST-SP800-53P-rev5_ra-7P_assessment Blocks → RA-08 [P] Privacy Impact Assessments [applied] NIST-SP800-53P-rev5_ra-8P_assessment Blocks → SA-01 [P] Policy and Procedures [applied] NIST-SP800-53P-rev5_sa-1P_assessment Blocks → SA-02 [P] Allocation of Resources [applied] NIST-SP800-53P-rev5_sa-2P_assessment Blocks → SA-03 [P] System Development Life Cycle [applied] NIST-SP800-53P-rev5_sa-3P_assessment Blocks → SA-04 [P] Acquisition Process [applied] NIST-SP800-53P-rev5_sa-4P_assessment Blocks → SA-08(33) [P] Minimization [applied] NIST-SP800-53P-rev5_sa-8.33P_assessment Blocks → SA-09 [P] External System Services [applied] NIST-SP800-53P-rev5_sa-9P_assessment Blocks → SA-11 [P] Developer Testing and Evaluation [applied] NIST-SP800-53P-rev5_sa-11P_assessment Blocks → SC-07(24) [P] Personally Identifiable Information [applied] NIST-SP800-53P-rev5_sc-7.24P_assessment Blocks → SI-01 [P] Policy and Procedures [applied] NIST-SP800-53P-rev5_si-1P_assessment Blocks → SI-12 [P] Information Management and Retention [applied] NIST-SP800-53P-rev5_si-12P_assessment Blocks → SI-12(01) [P] Limit Personally Identifiable Information Elements [applied] NIST-SP800-53P-rev5_si-12.1P_assessment Blocks → SI-12(02) [P] Minimize Personally Identifiable Information in Testing, Training, and Research [applied] NIST-SP800-53P-rev5_si-12.2P_assessment Blocks → SI-12(03) [P] Information Disposal [applied] NIST-SP800-53P-rev5_si-12.3P_assessment Blocks → SI-18 [P] Personally Identifiable Information Quality Operations [applied] NIST-SP800-53P-rev5_si-18P_assessment Blocks → SI-18(04) [P] Individual Requests [applied] NIST-SP800-53P-rev5_si-18.4P_assessment Blocks → SI-19 [P] De-identification [applied] NIST-SP800-53P-rev5_si-19P_assessment
New version: NIST SP 800-171 Rev. 3 (v1.5.0-1bc9d5ab5f) – 98 new, 0 changed, 0 removed, 97 links	New version: NIST SP 800-171 Rev. 3 (v1.5.0-1bc9d5ab5f) – 98 new, 0 changed, 0 removed, 97 links Document: NIST SP 800-171 Rev. 3 (https://raw.githubusercontent.com/usnistgov/oscal-content/v1.5.0/nist.gov/SP800-171/rev3/json/NIST_SP800-171_rev3_catalog.json) Version: v1.5.0-1bc9d5ab5f Project: NIST Import: #647, 20.10.2026 21:17, nist The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes). Review: 0 open, 195 applied, 0 rejected. New sections (98) NIST SP 800-171 Rev. 3 – Assessment Procedures [applied] NIST-SP800-171-rev3_assessment-procedures 03.01.01 Account Management – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.01.01_assessment 03.01.02 Access Enforcement – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.01.02_assessment 03.01.03 Information Flow Enforcement – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.01.03_assessment 03.01.04 Separation of Duties – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.01.04_assessment 03.01.05 Least Privilege – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.01.05_assessment 03.01.06 Least Privilege – Privileged Accounts – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.01.06_assessment 03.01.07 Least Privilege – Privileged Functions – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.01.07_assessment 03.01.08 Unsuccessful Logon Attempts – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.01.08_assessment 03.01.09 System Use Notification – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.01.09_assessment 03.01.10 Device Lock – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.01.10_assessment 03.01.11 Session Termination – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.01.11_assessment 03.01.12 Remote Access – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.01.12_assessment 03.01.16 Wireless Access – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.01.16_assessment 03.01.18 Access Control for Mobile Devices – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.01.18_assessment 03.01.20 Use of External Systems – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.01.20_assessment 03.01.22 Publicly Accessible Content – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.01.22_assessment 03.02.01 Literacy Training and Awareness – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.02.01_assessment 03.02.02 Role-Based Training – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.02.02_assessment 03.03.01 Event Logging – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.03.01_assessment 03.03.02 Audit Record Content – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.03.02_assessment 03.03.03 Audit Record Generation – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.03.03_assessment 03.03.04 Response to Audit Logging Process Failures – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.03.04_assessment 03.03.05 Audit Record Review, Analysis, and Reporting – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.03.05_assessment 03.03.06 Audit Record Reduction and Report Generation – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.03.06_assessment 03.03.07 Time Stamps – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.03.07_assessment 03.03.08 Protection of Audit Information – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.03.08_assessment 03.04.01 Baseline Configuration – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.04.01_assessment 03.04.02 Configuration Settings – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.04.02_assessment 03.04.03 Configuration Change Control – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.04.03_assessment 03.04.04 Impact Analyses – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.04.04_assessment 03.04.05 Access Restrictions for Change – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.04.05_assessment 03.04.06 Least Functionality – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.04.06_assessment 03.04.08 Authorized Software – Allow by Exception – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.04.08_assessment 03.04.10 System Component Inventory – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.04.10_assessment 03.04.11 Information Location – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.04.11_assessment 03.04.12 System and Component Configuration for High-Risk Areas – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.04.12_assessment 03.05.01 User Identification and Authentication – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.05.01_assessment 03.05.02 Device Identification and Authentication – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.05.02_assessment 03.05.03 Multi-Factor Authentication – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.05.03_assessment 03.05.04 Replay-Resistant Authentication – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.05.04_assessment 03.05.05 Identifier Management – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.05.05_assessment 03.05.07 Password Management – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.05.07_assessment 03.05.11 Authentication Feedback – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.05.11_assessment 03.05.12 Authenticator Management – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.05.12_assessment 03.06.01 Incident Handling – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.06.01_assessment 03.06.02 Incident Monitoring, Reporting, and Response Assistance – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.06.02_assessment 03.06.03 Incident Response Testing – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.06.03_assessment 03.06.04 Incident Response Training – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.06.04_assessment 03.06.05 Incident Response Plan – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.06.05_assessment 03.07.04 Maintenance Tools – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.07.04_assessment 03.07.05 Nonlocal Maintenance – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.07.05_assessment 03.07.06 Maintenance Personnel – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.07.06_assessment 03.08.01 Media Storage – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.08.01_assessment 03.08.02 Media Access – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.08.02_assessment 03.08.03 Media Sanitization – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.08.03_assessment 03.08.04 Media Marking – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.08.04_assessment 03.08.05 Media Transport – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.08.05_assessment 03.08.07 Media Use – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.08.07_assessment 03.08.09 System Backup – Cryptographic Protection – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.08.09_assessment 03.09.01 Personnel Screening – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.09.01_assessment 03.09.02 Personnel Termination and Transfer – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.09.02_assessment 03.10.01 Physical Access Authorizations – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.10.01_assessment 03.10.02 Monitoring Physical Access – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.10.02_assessment 03.10.06 Alternate Work Site – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.10.06_assessment 03.10.07 Physical Access Control – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.10.07_assessment 03.10.08 Access Control for Transmission – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.10.08_assessment 03.11.01 Risk Assessment – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.11.01_assessment 03.11.02 Vulnerability Monitoring and Scanning – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.11.02_assessment 03.11.04 Risk Response – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.11.04_assessment 03.12.01 Security Assessment – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.12.01_assessment 03.12.02 Plan of Action and Milestones – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.12.02_assessment 03.12.03 Continuous Monitoring – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.12.03_assessment 03.12.05 Information Exchange – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.12.05_assessment 03.13.01 Boundary Protection – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.13.01_assessment 03.13.04 Information in Shared System Resources – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.13.04_assessment 03.13.06 Network Communications – Deny by Default – Allow by Exception – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.13.06_assessment 03.13.08 Transmission and Storage Confidentiality – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.13.08_assessment 03.13.09 Network Disconnect – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.13.09_assessment 03.13.10 Cryptographic Key Establishment and Management – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.13.10_assessment 03.13.11 Cryptographic Protection – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.13.11_assessment 03.13.12 Collaborative Computing Devices and Applications – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.13.12_assessment 03.13.13 Mobile Code – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.13.13_assessment 03.13.15 Session Authenticity – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.13.15_assessment 03.14.01 Flaw Remediation – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.14.01_assessment 03.14.02 Malicious Code Protection – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.14.02_assessment 03.14.03 Security Alerts, Advisories, and Directives – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.14.03_assessment 03.14.06 System Monitoring – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.14.06_assessment 03.14.08 Information Management and Retention – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.14.08_assessment 03.15.01 Policy and Procedures – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.15.01_assessment 03.15.02 System Security Plan – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.15.02_assessment 03.15.03 Rules of Behavior – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.15.03_assessment 03.16.01 Security Engineering Principles – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.16.01_assessment 03.16.02 Unsupported System Components – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.16.02_assessment 03.16.03 External System Services – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.16.03_assessment 03.17.01 Supply Chain Risk Management Plan – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.17.01_assessment 03.17.02 Acquisition Strategies, Tools, and Methods – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.17.02_assessment 03.17.03 Supply Chain Requirements and Processes – Assessment Procedure [applied] NIST-SP800-171-rev3_SP_800_171_03.17.03_assessment New links (97) Blocks → 03.01.01 Account Management [applied] NIST-SP800-171-rev3_SP_800_171_03.01.01_assessment Blocks → 03.01.02 Access Enforcement [applied] NIST-SP800-171-rev3_SP_800_171_03.01.02_assessment Blocks → 03.01.03 Information Flow Enforcement [applied] NIST-SP800-171-rev3_SP_800_171_03.01.03_assessment Blocks → 03.01.04 Separation of Duties [applied] NIST-SP800-171-rev3_SP_800_171_03.01.04_assessment Blocks → 03.01.05 Least Privilege [applied] NIST-SP800-171-rev3_SP_800_171_03.01.05_assessment Blocks → 03.01.06 Least Privilege – Privileged Accounts [applied] NIST-SP800-171-rev3_SP_800_171_03.01.06_assessment Blocks → 03.01.07 Least Privilege – Privileged Functions [applied] NIST-SP800-171-rev3_SP_800_171_03.01.07_assessment Blocks → 03.01.08 Unsuccessful Logon Attempts [applied] NIST-SP800-171-rev3_SP_800_171_03.01.08_assessment Blocks → 03.01.09 System Use Notification [applied] NIST-SP800-171-rev3_SP_800_171_03.01.09_assessment Blocks → 03.01.10 Device Lock [applied] NIST-SP800-171-rev3_SP_800_171_03.01.10_assessment Blocks → 03.01.11 Session Termination [applied] NIST-SP800-171-rev3_SP_800_171_03.01.11_assessment Blocks → 03.01.12 Remote Access [applied] NIST-SP800-171-rev3_SP_800_171_03.01.12_assessment Blocks → 03.01.16 Wireless Access [applied] NIST-SP800-171-rev3_SP_800_171_03.01.16_assessment Blocks → 03.01.18 Access Control for Mobile Devices [applied] NIST-SP800-171-rev3_SP_800_171_03.01.18_assessment Blocks → 03.01.20 Use of External Systems [applied] NIST-SP800-171-rev3_SP_800_171_03.01.20_assessment Blocks → 03.01.22 Publicly Accessible Content [applied] NIST-SP800-171-rev3_SP_800_171_03.01.22_assessment Blocks → 03.02.01 Literacy Training and Awareness [applied] NIST-SP800-171-rev3_SP_800_171_03.02.01_assessment Blocks → 03.02.02 Role-Based Training [applied] NIST-SP800-171-rev3_SP_800_171_03.02.02_assessment Blocks → 03.03.01 Event Logging [applied] NIST-SP800-171-rev3_SP_800_171_03.03.01_assessment Blocks → 03.03.02 Audit Record Content [applied] NIST-SP800-171-rev3_SP_800_171_03.03.02_assessment Blocks → 03.03.03 Audit Record Generation [applied] NIST-SP800-171-rev3_SP_800_171_03.03.03_assessment Blocks → 03.03.04 Response to Audit Logging Process Failures [applied] NIST-SP800-171-rev3_SP_800_171_03.03.04_assessment Blocks → 03.03.05 Audit Record Review, Analysis, and Reporting [applied] NIST-SP800-171-rev3_SP_800_171_03.03.05_assessment Blocks → 03.03.06 Audit Record Reduction and Report Generation [applied] NIST-SP800-171-rev3_SP_800_171_03.03.06_assessment Blocks → 03.03.07 Time Stamps [applied] NIST-SP800-171-rev3_SP_800_171_03.03.07_assessment Blocks → 03.03.08 Protection of Audit Information [applied] NIST-SP800-171-rev3_SP_800_171_03.03.08_assessment Blocks → 03.04.01 Baseline Configuration [applied] NIST-SP800-171-rev3_SP_800_171_03.04.01_assessment Blocks → 03.04.02 Configuration Settings [applied] NIST-SP800-171-rev3_SP_800_171_03.04.02_assessment Blocks → 03.04.03 Configuration Change Control [applied] NIST-SP800-171-rev3_SP_800_171_03.04.03_assessment Blocks → 03.04.04 Impact Analyses [applied] NIST-SP800-171-rev3_SP_800_171_03.04.04_assessment Blocks → 03.04.05 Access Restrictions for Change [applied] NIST-SP800-171-rev3_SP_800_171_03.04.05_assessment Blocks → 03.04.06 Least Functionality [applied] NIST-SP800-171-rev3_SP_800_171_03.04.06_assessment Blocks → 03.04.08 Authorized Software – Allow by Exception [applied] NIST-SP800-171-rev3_SP_800_171_03.04.08_assessment Blocks → 03.04.10 System Component Inventory [applied] NIST-SP800-171-rev3_SP_800_171_03.04.10_assessment Blocks → 03.04.11 Information Location [applied] NIST-SP800-171-rev3_SP_800_171_03.04.11_assessment Blocks → 03.04.12 System and Component Configuration for High-Risk Areas [applied] NIST-SP800-171-rev3_SP_800_171_03.04.12_assessment Blocks → 03.05.01 User Identification and Authentication [applied] NIST-SP800-171-rev3_SP_800_171_03.05.01_assessment Blocks → 03.05.02 Device Identification and Authentication [applied] NIST-SP800-171-rev3_SP_800_171_03.05.02_assessment Blocks → 03.05.03 Multi-Factor Authentication [applied] NIST-SP800-171-rev3_SP_800_171_03.05.03_assessment Blocks → 03.05.04 Replay-Resistant Authentication [applied] NIST-SP800-171-rev3_SP_800_171_03.05.04_assessment Blocks → 03.05.05 Identifier Management [applied] NIST-SP800-171-rev3_SP_800_171_03.05.05_assessment Blocks → 03.05.07 Password Management [applied] NIST-SP800-171-rev3_SP_800_171_03.05.07_assessment Blocks → 03.05.11 Authentication Feedback [applied] NIST-SP800-171-rev3_SP_800_171_03.05.11_assessment Blocks → 03.05.12 Authenticator Management [applied] NIST-SP800-171-rev3_SP_800_171_03.05.12_assessment Blocks → 03.06.01 Incident Handling [applied] NIST-SP800-171-rev3_SP_800_171_03.06.01_assessment Blocks → 03.06.02 Incident Monitoring, Reporting, and Response Assistance [applied] NIST-SP800-171-rev3_SP_800_171_03.06.02_assessment Blocks → 03.06.03 Incident Response Testing [applied] NIST-SP800-171-rev3_SP_800_171_03.06.03_assessment Blocks → 03.06.04 Incident Response Training [applied] NIST-SP800-171-rev3_SP_800_171_03.06.04_assessment Blocks → 03.06.05 Incident Response Plan [applied] NIST-SP800-171-rev3_SP_800_171_03.06.05_assessment Blocks → 03.07.04 Maintenance Tools [applied] NIST-SP800-171-rev3_SP_800_171_03.07.04_assessment Blocks → 03.07.05 Nonlocal Maintenance [applied] NIST-SP800-171-rev3_SP_800_171_03.07.05_assessment Blocks → 03.07.06 Maintenance Personnel [applied] NIST-SP800-171-rev3_SP_800_171_03.07.06_assessment Blocks → 03.08.01 Media Storage [applied] NIST-SP800-171-rev3_SP_800_171_03.08.01_assessment Blocks → 03.08.02 Media Access [applied] NIST-SP800-171-rev3_SP_800_171_03.08.02_assessment Blocks → 03.08.03 Media Sanitization [applied] NIST-SP800-171-rev3_SP_800_171_03.08.03_assessment Blocks → 03.08.04 Media Marking [applied] NIST-SP800-171-rev3_SP_800_171_03.08.04_assessment Blocks → 03.08.05 Media Transport [applied] NIST-SP800-171-rev3_SP_800_171_03.08.05_assessment Blocks → 03.08.07 Media Use [applied] NIST-SP800-171-rev3_SP_800_171_03.08.07_assessment Blocks → 03.08.09 System Backup – Cryptographic Protection [applied] NIST-SP800-171-rev3_SP_800_171_03.08.09_assessment Blocks → 03.09.01 Personnel Screening [applied] NIST-SP800-171-rev3_SP_800_171_03.09.01_assessment Blocks → 03.09.02 Personnel Termination and Transfer [applied] NIST-SP800-171-rev3_SP_800_171_03.09.02_assessment Blocks → 03.10.01 Physical Access Authorizations [applied] NIST-SP800-171-rev3_SP_800_171_03.10.01_assessment Blocks → 03.10.02 Monitoring Physical Access [applied] NIST-SP800-171-rev3_SP_800_171_03.10.02_assessment Blocks → 03.10.06 Alternate Work Site [applied] NIST-SP800-171-rev3_SP_800_171_03.10.06_assessment Blocks → 03.10.07 Physical Access Control [applied] NIST-SP800-171-rev3_SP_800_171_03.10.07_assessment Blocks → 03.10.08 Access Control for Transmission [applied] NIST-SP800-171-rev3_SP_800_171_03.10.08_assessment Blocks → 03.11.01 Risk Assessment [applied] NIST-SP800-171-rev3_SP_800_171_03.11.01_assessment Blocks → 03.11.02 Vulnerability Monitoring and Scanning [applied] NIST-SP800-171-rev3_SP_800_171_03.11.02_assessment Blocks → 03.11.04 Risk Response [applied] NIST-SP800-171-rev3_SP_800_171_03.11.04_assessment Blocks → 03.12.01 Security Assessment [applied] NIST-SP800-171-rev3_SP_800_171_03.12.01_assessment Blocks → 03.12.02 Plan of Action and Milestones [applied] NIST-SP800-171-rev3_SP_800_171_03.12.02_assessment Blocks → 03.12.03 Continuous Monitoring [applied] NIST-SP800-171-rev3_SP_800_171_03.12.03_assessment Blocks → 03.12.05 Information Exchange [applied] NIST-SP800-171-rev3_SP_800_171_03.12.05_assessment Blocks → 03.13.01 Boundary Protection [applied] NIST-SP800-171-rev3_SP_800_171_03.13.01_assessment Blocks → 03.13.04 Information in Shared System Resources [applied] NIST-SP800-171-rev3_SP_800_171_03.13.04_assessment Blocks → 03.13.06 Network Communications – Deny by Default – Allow by Exception [applied] NIST-SP800-171-rev3_SP_800_171_03.13.06_assessment Blocks → 03.13.08 Transmission and Storage Confidentiality [applied] NIST-SP800-171-rev3_SP_800_171_03.13.08_assessment Blocks → 03.13.09 Network Disconnect [applied] NIST-SP800-171-rev3_SP_800_171_03.13.09_assessment Blocks → 03.13.10 Cryptographic Key Establishment and Management [applied] NIST-SP800-171-rev3_SP_800_171_03.13.10_assessment Blocks → 03.13.11 Cryptographic Protection [applied] NIST-SP800-171-rev3_SP_800_171_03.13.11_assessment Blocks → 03.13.12 Collaborative Computing Devices and Applications [applied] NIST-SP800-171-rev3_SP_800_171_03.13.12_assessment Blocks → 03.13.13 Mobile Code [applied] NIST-SP800-171-rev3_SP_800_171_03.13.13_assessment Blocks → 03.13.15 Session Authenticity [applied] NIST-SP800-171-rev3_SP_800_171_03.13.15_assessment Blocks → 03.14.01 Flaw Remediation [applied] NIST-SP800-171-rev3_SP_800_171_03.14.01_assessment Blocks → 03.14.02 Malicious Code Protection [applied] NIST-SP800-171-rev3_SP_800_171_03.14.02_assessment Blocks → 03.14.03 Security Alerts, Advisories, and Directives [applied] NIST-SP800-171-rev3_SP_800_171_03.14.03_assessment Blocks → 03.14.06 System Monitoring [applied] NIST-SP800-171-rev3_SP_800_171_03.14.06_assessment Blocks → 03.14.08 Information Management and Retention [applied] NIST-SP800-171-rev3_SP_800_171_03.14.08_assessment Blocks → 03.15.01 Policy and Procedures [applied] NIST-SP800-171-rev3_SP_800_171_03.15.01_assessment Blocks → 03.15.02 System Security Plan [applied] NIST-SP800-171-rev3_SP_800_171_03.15.02_assessment Blocks → 03.15.03 Rules of Behavior [applied] NIST-SP800-171-rev3_SP_800_171_03.15.03_assessment Blocks → 03.16.01 Security Engineering Principles [applied] NIST-SP800-171-rev3_SP_800_171_03.16.01_assessment Blocks → 03.16.02 Unsupported System Components [applied] NIST-SP800-171-rev3_SP_800_171_03.16.02_assessment Blocks → 03.16.03 External System Services [applied] NIST-SP800-171-rev3_SP_800_171_03.16.03_assessment Blocks → 03.17.01 Supply Chain Risk Management Plan [applied] NIST-SP800-171-rev3_SP_800_171_03.17.01_assessment Blocks → 03.17.02 Acquisition Strategies, Tools, and Methods [applied] NIST-SP800-171-rev3_SP_800_171_03.17.02_assessment Blocks → 03.17.03 Supply Chain Requirements and Processes [applied] NIST-SP800-171-rev3_SP_800_171_03.17.03_assessment
New version: NIST SP 800-172 Rev. 3 (v1.5.0-da27cdb624) – 104 new, 0 changed, 0 removed, 103 links	New version: NIST SP 800-172 Rev. 3 (v1.5.0-da27cdb624) – 104 new, 0 changed, 0 removed, 103 links Document: NIST SP 800-172 Rev. 3 (https://raw.githubusercontent.com/usnistgov/oscal-content/v1.5.0/nist.gov/SP800-172/rev3/json/NIST_SP800-172_rev3_catalog.json) Version: v1.5.0-da27cdb624 Project: NIST Import: #648, 20.10.2026 21:17, nist The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes). Review: 0 open, 207 applied, 0 rejected. New sections (104) NIST SP 800-172 Rev. 3 – Assessment Procedures [applied] NIST-SP800-172-rev3_assessment-procedures 03.01.01E Dual Authorization – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.01E_assessment 03.01.02E Non-Organizationally Owned Systems - Restricted Use – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.02E_assessment 03.01.04E Concurrent Session Control – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.04E_assessment 03.01.05E Remote Access Monitoring and Control – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.05E_assessment 03.01.06E Protection of Remote Access Mechanism Information – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.06E_assessment 03.01.07E Automated Audit Actions for Account Management – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.07E_assessment 03.01.08E Account Monitoring for Atypical Usage – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.08E_assessment 03.01.09E Attribute-Based Access Control – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.09E_assessment 03.01.10E Object Security Attributes – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.10E_assessment 03.01.11E Role-Based Access Control – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.11E_assessment 03.01.12E Physical or Logical Separation of CUI Flows – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.12E_assessment 03.01.13E Metadata – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.13E_assessment 03.01.14E Security Policy Filters – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.14E_assessment 03.01.15E Data Type Identifiers – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.15E_assessment 03.01.16E Decomposition Into Policy-Relevant Subcomponents – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.16E_assessment 03.01.17E Detection of Unsanctioned CUI – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.17E_assessment 03.02.01E Advanced Literacy and Awareness Training – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.02.01E_assessment 03.02.02E Literacy and Awareness Training Practical Exercises – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.02.02E_assessment 03.02.03E Literacy and Awareness Training Feedback – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.02.03E_assessment 03.02.04E Anti-Counterfeit Training – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.02.04E_assessment 03.03.01E Protection of Audit Record Storage in Separate Physical Systems or Components – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.03.01E_assessment 03.03.02E Real-Time Alerts for Audit Processing Failures – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.03.02E_assessment 03.03.03E Dual Authorization for Audit Information and Actions – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.03.03E_assessment 03.03.04E Integrated Analysis of Audit Records – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.03.04E_assessment 03.04.02E Automated Unauthorized Component Detection – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.04.02E_assessment 03.04.03E Automated Maintenance of System Component Inventory – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.04.03E_assessment 03.04.04E Automation Support for Baseline Configuration – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.04.04E_assessment 03.04.05E Dual Authorization for System Changes – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.04.05E_assessment 03.04.06E Retention of Previous Configurations – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.04.06E_assessment 03.04.07E Testing, Validation, and Documentation of Changes – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.04.07E_assessment 03.04.08E Centralized Repository – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.04.08E_assessment 03.05.01E Cryptographic Bidirectional Authentication – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.05.01E_assessment 03.05.02E Password Managers – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.05.02E_assessment 03.05.03E Device Attestation – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.05.03E_assessment 03.05.04E No Embedded Unencrypted Static Authenticators – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.05.04E_assessment 03.05.05E Expiration of Cached Authenticators – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.05.05E_assessment 03.05.06E Identity Proofing – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.05.06E_assessment 03.05.07E Identity Providers and Authorization Servers – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.05.07E_assessment 03.06.01E Security Operations Center – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.06.01E_assessment 03.06.02E Integrated Incident Response Team – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.06.02E_assessment 03.06.03E Behavior Analysis – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.06.03E_assessment 03.06.04E Automated Tracking, Data Collection, and Analysis for Incident Monitoring – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.06.04E_assessment 03.07.01E Software Updates and Patches for Maintenance Tools – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.07.01E_assessment 03.08.01E Dual Authorization for Media Sanitization – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.08.01E_assessment 03.08.02E Dual Authorization for System Backup Deletion and Destruction – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.08.02E_assessment 03.08.03E Testing System Backups for Reliability and Integrity – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.08.03E_assessment 03.08.04E System Recovery and Reconstitution – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.08.04E_assessment 03.09.03E Access Agreements – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.09.03E_assessment 03.09.04E Citizenship Requirements – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.09.04E_assessment 03.10.01E Intrusion Alarms and Surveillance Equipment – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.10.01E_assessment 03.10.02E Delivery and Removal of System Components – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.10.02E_assessment 03.11.01E Threat Awareness Program – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.11.01E_assessment 03.11.02E Threat Hunting – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.11.02E_assessment 03.11.03E Predictive Cyber Analytics – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.11.03E_assessment 03.11.08E Dynamic Threat Awareness – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.11.08E_assessment 03.11.09E Indicators of Compromise – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.11.09E_assessment 03.11.10E Criticality Analysis – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.11.10E_assessment 03.11.11E Discoverable Information – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.11.11E_assessment 03.11.12E Automated Means for Sharing Threat Intelligence – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.11.12E_assessment 03.12.01E Penetration Testing – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.12.01E_assessment 03.12.02E Independent Assessors – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.12.02E_assessment 03.12.03E Risk Monitoring – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.12.03E_assessment 03.12.04E Internal System Connections – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.12.04E_assessment 03.13.01E Heterogeneity – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.01E_assessment 03.13.02E Randomness – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.02E_assessment 03.13.03E Concealment and Misdirection – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.03E_assessment 03.13.04E Isolation of System Components – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.04E_assessment 03.13.05E Change Processing and Storage Locations – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.05E_assessment 03.13.06E Platform-Independent Applications – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.06E_assessment 03.13.07E Virtualization Techniques – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.07E_assessment 03.13.08E Decoys – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.08E_assessment 03.13.09E Isolation of Security Tools, Mechanisms, and Support Components – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.09E_assessment 03.13.10E Separate Subnetworks – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.10E_assessment 03.13.11E Thin Nodes – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.11E_assessment 03.13.12E Denial-of-Service Protection – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.12E_assessment 03.13.13E Port and Input/Output Device Access – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.13E_assessment 03.13.14E Detonation Chambers – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.14E_assessment 03.13.15E Separate Subnets to Isolate System Components and Functions – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.15E_assessment 03.13.16E System Partitioning – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.16E_assessment 03.14.01E Software, Firmware, and Information Integrity – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.01E_assessment 03.14.04E Refresh From Trusted Sources – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.04E_assessment 03.14.05E Non-Persistent Information – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.05E_assessment 03.14.08E Integrity Checks – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.08E_assessment 03.14.09E Cryptographic Protection – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.09E_assessment 03.14.10E Protection of Boot Firmware – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.10E_assessment 03.14.11E Integration of Detection and Response – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.11E_assessment 03.14.12E Information Input Validation – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.12E_assessment 03.14.13E Error Handling – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.13E_assessment 03.14.14E Memory Protection – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.14E_assessment 03.14.15E Non-Persistent System Components and Services – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.15E_assessment 03.14.16E Tainting – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.16E_assessment 03.14.17E System-Generated Alerts – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.17E_assessment 03.14.18E Automated Organization-Generated Alerts – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.18E_assessment 03.14.19E Wireless Intrusion Detection – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.19E_assessment 03.15.01E Security Architecture – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.15.01E_assessment 03.15.02E Defense In Depth – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.15.02E_assessment 03.15.03E Supplier Diversity – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.15.03E_assessment 03.16.01E Specialization – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.16.01E_assessment 03.17.01E Notification Agreements – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.17.01E_assessment 03.17.02E Inspection of Systems or Components – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.17.02E_assessment 03.17.03E Component Authenticity – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.17.03E_assessment 03.17.04E Provenance – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.17.04E_assessment 03.17.05E Supply Chain Integrity – Pedigree – Assessment Procedure [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.17.05E_assessment New links (103) Blocks → 03.01.01E Dual Authorization [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.01E_assessment Blocks → 03.01.02E Non-Organizationally Owned Systems - Restricted Use [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.02E_assessment Blocks → 03.01.04E Concurrent Session Control [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.04E_assessment Blocks → 03.01.05E Remote Access Monitoring and Control [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.05E_assessment Blocks → 03.01.06E Protection of Remote Access Mechanism Information [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.06E_assessment Blocks → 03.01.07E Automated Audit Actions for Account Management [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.07E_assessment Blocks → 03.01.08E Account Monitoring for Atypical Usage [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.08E_assessment Blocks → 03.01.09E Attribute-Based Access Control [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.09E_assessment Blocks → 03.01.10E Object Security Attributes [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.10E_assessment Blocks → 03.01.11E Role-Based Access Control [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.11E_assessment Blocks → 03.01.12E Physical or Logical Separation of CUI Flows [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.12E_assessment Blocks → 03.01.13E Metadata [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.13E_assessment Blocks → 03.01.14E Security Policy Filters [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.14E_assessment Blocks → 03.01.15E Data Type Identifiers [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.15E_assessment Blocks → 03.01.16E Decomposition Into Policy-Relevant Subcomponents [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.16E_assessment Blocks → 03.01.17E Detection of Unsanctioned CUI [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.01.17E_assessment Blocks → 03.02.01E Advanced Literacy and Awareness Training [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.02.01E_assessment Blocks → 03.02.02E Literacy and Awareness Training Practical Exercises [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.02.02E_assessment Blocks → 03.02.03E Literacy and Awareness Training Feedback [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.02.03E_assessment Blocks → 03.02.04E Anti-Counterfeit Training [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.02.04E_assessment Blocks → 03.03.01E Protection of Audit Record Storage in Separate Physical Systems or Components [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.03.01E_assessment Blocks → 03.03.02E Real-Time Alerts for Audit Processing Failures [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.03.02E_assessment Blocks → 03.03.03E Dual Authorization for Audit Information and Actions [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.03.03E_assessment Blocks → 03.03.04E Integrated Analysis of Audit Records [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.03.04E_assessment Blocks → 03.04.02E Automated Unauthorized Component Detection [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.04.02E_assessment Blocks → 03.04.03E Automated Maintenance of System Component Inventory [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.04.03E_assessment Blocks → 03.04.04E Automation Support for Baseline Configuration [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.04.04E_assessment Blocks → 03.04.05E Dual Authorization for System Changes [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.04.05E_assessment Blocks → 03.04.06E Retention of Previous Configurations [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.04.06E_assessment Blocks → 03.04.07E Testing, Validation, and Documentation of Changes [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.04.07E_assessment Blocks → 03.04.08E Centralized Repository [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.04.08E_assessment Blocks → 03.05.01E Cryptographic Bidirectional Authentication [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.05.01E_assessment Blocks → 03.05.02E Password Managers [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.05.02E_assessment Blocks → 03.05.03E Device Attestation [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.05.03E_assessment Blocks → 03.05.04E No Embedded Unencrypted Static Authenticators [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.05.04E_assessment Blocks → 03.05.05E Expiration of Cached Authenticators [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.05.05E_assessment Blocks → 03.05.06E Identity Proofing [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.05.06E_assessment Blocks → 03.05.07E Identity Providers and Authorization Servers [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.05.07E_assessment Blocks → 03.06.01E Security Operations Center [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.06.01E_assessment Blocks → 03.06.02E Integrated Incident Response Team [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.06.02E_assessment Blocks → 03.06.03E Behavior Analysis [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.06.03E_assessment Blocks → 03.06.04E Automated Tracking, Data Collection, and Analysis for Incident Monitoring [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.06.04E_assessment Blocks → 03.07.01E Software Updates and Patches for Maintenance Tools [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.07.01E_assessment Blocks → 03.08.01E Dual Authorization for Media Sanitization [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.08.01E_assessment Blocks → 03.08.02E Dual Authorization for System Backup Deletion and Destruction [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.08.02E_assessment Blocks → 03.08.03E Testing System Backups for Reliability and Integrity [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.08.03E_assessment Blocks → 03.08.04E System Recovery and Reconstitution [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.08.04E_assessment Blocks → 03.09.03E Access Agreements [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.09.03E_assessment Blocks → 03.09.04E Citizenship Requirements [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.09.04E_assessment Blocks → 03.10.01E Intrusion Alarms and Surveillance Equipment [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.10.01E_assessment Blocks → 03.10.02E Delivery and Removal of System Components [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.10.02E_assessment Blocks → 03.11.01E Threat Awareness Program [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.11.01E_assessment Blocks → 03.11.02E Threat Hunting [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.11.02E_assessment Blocks → 03.11.03E Predictive Cyber Analytics [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.11.03E_assessment Blocks → 03.11.08E Dynamic Threat Awareness [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.11.08E_assessment Blocks → 03.11.09E Indicators of Compromise [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.11.09E_assessment Blocks → 03.11.10E Criticality Analysis [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.11.10E_assessment Blocks → 03.11.11E Discoverable Information [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.11.11E_assessment Blocks → 03.11.12E Automated Means for Sharing Threat Intelligence [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.11.12E_assessment Blocks → 03.12.01E Penetration Testing [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.12.01E_assessment Blocks → 03.12.02E Independent Assessors [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.12.02E_assessment Blocks → 03.12.03E Risk Monitoring [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.12.03E_assessment Blocks → 03.12.04E Internal System Connections [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.12.04E_assessment Blocks → 03.13.01E Heterogeneity [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.01E_assessment Blocks → 03.13.02E Randomness [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.02E_assessment Blocks → 03.13.03E Concealment and Misdirection [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.03E_assessment Blocks → 03.13.04E Isolation of System Components [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.04E_assessment Blocks → 03.13.05E Change Processing and Storage Locations [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.05E_assessment Blocks → 03.13.06E Platform-Independent Applications [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.06E_assessment Blocks → 03.13.07E Virtualization Techniques [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.07E_assessment Blocks → 03.13.08E Decoys [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.08E_assessment Blocks → 03.13.09E Isolation of Security Tools, Mechanisms, and Support Components [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.09E_assessment Blocks → 03.13.10E Separate Subnetworks [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.10E_assessment Blocks → 03.13.11E Thin Nodes [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.11E_assessment Blocks → 03.13.12E Denial-of-Service Protection [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.12E_assessment Blocks → 03.13.13E Port and Input/Output Device Access [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.13E_assessment Blocks → 03.13.14E Detonation Chambers [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.14E_assessment Blocks → 03.13.15E Separate Subnets to Isolate System Components and Functions [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.15E_assessment Blocks → 03.13.16E System Partitioning [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.13.16E_assessment Blocks → 03.14.01E Software, Firmware, and Information Integrity [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.01E_assessment Blocks → 03.14.04E Refresh From Trusted Sources [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.04E_assessment Blocks → 03.14.05E Non-Persistent Information [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.05E_assessment Blocks → 03.14.08E Integrity Checks [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.08E_assessment Blocks → 03.14.09E Cryptographic Protection [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.09E_assessment Blocks → 03.14.10E Protection of Boot Firmware [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.10E_assessment Blocks → 03.14.11E Integration of Detection and Response [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.11E_assessment Blocks → 03.14.12E Information Input Validation [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.12E_assessment Blocks → 03.14.13E Error Handling [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.13E_assessment Blocks → 03.14.14E Memory Protection [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.14E_assessment Blocks → 03.14.15E Non-Persistent System Components and Services [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.15E_assessment Blocks → 03.14.16E Tainting [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.16E_assessment Blocks → 03.14.17E System-Generated Alerts [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.17E_assessment Blocks → 03.14.18E Automated Organization-Generated Alerts [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.18E_assessment Blocks → 03.14.19E Wireless Intrusion Detection [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.14.19E_assessment Blocks → 03.15.01E Security Architecture [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.15.01E_assessment Blocks → 03.15.02E Defense In Depth [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.15.02E_assessment Blocks → 03.15.03E Supplier Diversity [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.15.03E_assessment Blocks → 03.16.01E Specialization [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.16.01E_assessment Blocks → 03.17.01E Notification Agreements [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.17.01E_assessment Blocks → 03.17.02E Inspection of Systems or Components [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.17.02E_assessment Blocks → 03.17.03E Component Authenticity [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.17.03E_assessment Blocks → 03.17.04E Provenance [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.17.04E_assessment Blocks → 03.17.05E Supply Chain Integrity – Pedigree [applied] NIST-SP800-172-rev3_SP_800_172_3_0_0_03.17.05E_assessment

Kwistjonijiet marbuta

Links
Tip ta’ link	Kwistjoni
is related to	English

NIST -
https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final