New version: NIST SP 800-53 Rev. 5 HIGH Baseline (v1.5.0-4fbdb82960) – 182 new, 0 changed, 0 removed
- Document: NIST SP 800-53 Rev. 5 HIGH Baseline (https://raw.githubusercontent.com/usnistgov/oscal-content/v1.5.0/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_HIGH-baseline-resolved-profile_catalog.json)
- Version: v1.5.0-4fbdb82960
- Project: NIST
- Import: #616, 20.10.2026 17:06, nist
The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes).
Taken over directly (additional fields, HTML of an unchanged text): 14 issues.
Review: 0 open, 182 applied, 0 rejected.
New sections (182)
- AC-02(01) [H] Automated System Account Management [applied]
NIST-SP800-53H-rev5_ac-2.1H - AC-02(02) [H] Automated Temporary and Emergency Account Management [applied]
NIST-SP800-53H-rev5_ac-2.2H - AC-02(03) [H] Disable Accounts [applied]
NIST-SP800-53H-rev5_ac-2.3H - AC-02(04) [H] Automated Audit Actions [applied]
NIST-SP800-53H-rev5_ac-2.4H - AC-02(05) [H] Inactivity Logout [applied]
NIST-SP800-53H-rev5_ac-2.5H - AC-02(11) [H] Usage Conditions [applied]
NIST-SP800-53H-rev5_ac-2.11H - AC-02(12) [H] Account Monitoring for Atypical Usage [applied]
NIST-SP800-53H-rev5_ac-2.12H - AC-02(13) [H] Disable Accounts for High-risk Individuals [applied]
NIST-SP800-53H-rev5_ac-2.13H - AC-04(04) [H] Flow Control of Encrypted Information [applied]
NIST-SP800-53H-rev5_ac-4.4H - AC-06(01) [H] Authorize Access to Security Functions [applied]
NIST-SP800-53H-rev5_ac-6.1H - AC-06(02) [H] Non-privileged Access for Nonsecurity Functions [applied]
NIST-SP800-53H-rev5_ac-6.2H - AC-06(03) [H] Network Access to Privileged Commands [applied]
NIST-SP800-53H-rev5_ac-6.3H - AC-06(05) [H] Privileged Accounts [applied]
NIST-SP800-53H-rev5_ac-6.5H - AC-06(07) [H] Review of User Privileges [applied]
NIST-SP800-53H-rev5_ac-6.7H - AC-06(09) [H] Log Use of Privileged Functions [applied]
NIST-SP800-53H-rev5_ac-6.9H - AC-06(10) [H] Prohibit Non-privileged Users from Executing Privileged Functions [applied]
NIST-SP800-53H-rev5_ac-6.10H - AC-11(01) [H] Pattern-hiding Displays [applied]
NIST-SP800-53H-rev5_ac-11.1H - AC-17(01) [H] Monitoring and Control [applied]
NIST-SP800-53H-rev5_ac-17.1H - AC-17(02) [H] Protection of Confidentiality and Integrity Using Encryption [applied]
NIST-SP800-53H-rev5_ac-17.2H - AC-17(03) [H] Managed Access Control Points [applied]
NIST-SP800-53H-rev5_ac-17.3H - AC-17(04) [H] Privileged Commands and Access [applied]
NIST-SP800-53H-rev5_ac-17.4H - AC-18(01) [H] Authentication and Encryption [applied]
NIST-SP800-53H-rev5_ac-18.1H - AC-18(03) [H] Disable Wireless Networking [applied]
NIST-SP800-53H-rev5_ac-18.3H - AC-18(04) [H] Restrict Configurations by Users [applied]
NIST-SP800-53H-rev5_ac-18.4H - AC-18(05) [H] Antennas and Transmission Power Levels [applied]
NIST-SP800-53H-rev5_ac-18.5H - AC-19(05) [H] Full Device or Container-based Encryption [applied]
NIST-SP800-53H-rev5_ac-19.5H - AC-20(01) [H] Limits on Authorized Use [applied]
NIST-SP800-53H-rev5_ac-20.1H - AC-20(02) [H] Portable Storage Devices — Restricted Use [applied]
NIST-SP800-53H-rev5_ac-20.2H - AT-02(02) [H] Insider Threat [applied]
NIST-SP800-53H-rev5_at-2.2H - AT-02(03) [H] Social Engineering and Mining [applied]
NIST-SP800-53H-rev5_at-2.3H - AU-03(01) [H] Additional Audit Information [applied]
NIST-SP800-53H-rev5_au-3.1H - AU-05(01) [H] Storage Capacity Warning [applied]
NIST-SP800-53H-rev5_au-5.1H - AU-05(02) [H] Real-time Alerts [applied]
NIST-SP800-53H-rev5_au-5.2H - AU-06(01) [H] Automated Process Integration [applied]
NIST-SP800-53H-rev5_au-6.1H - AU-06(03) [H] Correlate Audit Record Repositories [applied]
NIST-SP800-53H-rev5_au-6.3H - AU-06(05) [H] Integrated Analysis of Audit Records [applied]
NIST-SP800-53H-rev5_au-6.5H - AU-06(06) [H] Correlation with Physical Monitoring [applied]
NIST-SP800-53H-rev5_au-6.6H - AU-07(01) [H] Automatic Processing [applied]
NIST-SP800-53H-rev5_au-7.1H - AU-09(02) [H] Store on Separate Physical Systems or Components [applied]
NIST-SP800-53H-rev5_au-9.2H - AU-09(03) [H] Cryptographic Protection [applied]
NIST-SP800-53H-rev5_au-9.3H - AU-09(04) [H] Access by Subset of Privileged Users [applied]
NIST-SP800-53H-rev5_au-9.4H - AU-12(01) [H] System-wide and Time-correlated Audit Trail [applied]
NIST-SP800-53H-rev5_au-12.1H - AU-12(03) [H] Changes by Authorized Individuals [applied]
NIST-SP800-53H-rev5_au-12.3H - CA-02(01) [H] Independent Assessors [applied]
NIST-SP800-53H-rev5_ca-2.1H - CA-02(02) [H] Specialized Assessments [applied]
NIST-SP800-53H-rev5_ca-2.2H - CA-03(06) [H] Transfer Authorizations [applied]
NIST-SP800-53H-rev5_ca-3.6H - CA-07(01) [H] Independent Assessment [applied]
NIST-SP800-53H-rev5_ca-7.1H - CA-07(04) [H] Risk Monitoring [applied]
NIST-SP800-53H-rev5_ca-7.4H - CA-08(01) [H] Independent Penetration Testing Agent or Team [applied]
NIST-SP800-53H-rev5_ca-8.1H - CM-02(02) [H] Automation Support for Accuracy and Currency [applied]
NIST-SP800-53H-rev5_cm-2.2H - CM-02(03) [H] Retention of Previous Configurations [applied]
NIST-SP800-53H-rev5_cm-2.3H - CM-02(07) [H] Configure Systems and Components for High-risk Areas [applied]
NIST-SP800-53H-rev5_cm-2.7H - CM-03(01) [H] Automated Documentation, Notification, and Prohibition of Changes [applied]
NIST-SP800-53H-rev5_cm-3.1H - CM-03(02) [H] Testing, Validation, and Documentation of Changes [applied]
NIST-SP800-53H-rev5_cm-3.2H - CM-03(04) [H] Security and Privacy Representatives [applied]
NIST-SP800-53H-rev5_cm-3.4H - CM-03(06) [H] Cryptography Management [applied]
NIST-SP800-53H-rev5_cm-3.6H - CM-04(01) [H] Separate Test Environments [applied]
NIST-SP800-53H-rev5_cm-4.1H - CM-04(02) [H] Verification of Controls [applied]
NIST-SP800-53H-rev5_cm-4.2H - CM-05(01) [H] Automated Access Enforcement and Audit Records [applied]
NIST-SP800-53H-rev5_cm-5.1H - CM-06(01) [H] Automated Management, Application, and Verification [applied]
NIST-SP800-53H-rev5_cm-6.1H - CM-06(02) [H] Respond to Unauthorized Changes [applied]
NIST-SP800-53H-rev5_cm-6.2H - CM-07(01) [H] Periodic Review [applied]
NIST-SP800-53H-rev5_cm-7.1H - CM-07(02) [H] Prevent Program Execution [applied]
NIST-SP800-53H-rev5_cm-7.2H - CM-07(05) [H] Authorized Software — Allow-by-exception [applied]
NIST-SP800-53H-rev5_cm-7.5H - CM-08(01) [H] Updates During Installation and Removal [applied]
NIST-SP800-53H-rev5_cm-8.1H - CM-08(02) [H] Automated Maintenance [applied]
NIST-SP800-53H-rev5_cm-8.2H - CM-08(03) [H] Automated Unauthorized Component Detection [applied]
NIST-SP800-53H-rev5_cm-8.3H - CM-08(04) [H] Accountability Information [applied]
NIST-SP800-53H-rev5_cm-8.4H - CM-12(01) [H] Automated Tools to Support Information Location [applied]
NIST-SP800-53H-rev5_cm-12.1H - CP-02(01) [H] Coordinate with Related Plans [applied]
NIST-SP800-53H-rev5_cp-2.1H - CP-02(02) [H] Capacity Planning [applied]
NIST-SP800-53H-rev5_cp-2.2H - CP-02(03) [H] Resume Mission and Business Functions [applied]
NIST-SP800-53H-rev5_cp-2.3H - CP-02(05) [H] Continue Mission and Business Functions [applied]
NIST-SP800-53H-rev5_cp-2.5H - CP-02(08) [H] Identify Critical Assets [applied]
NIST-SP800-53H-rev5_cp-2.8H - CP-03(01) [H] Simulated Events [applied]
NIST-SP800-53H-rev5_cp-3.1H - CP-04(01) [H] Coordinate with Related Plans [applied]
NIST-SP800-53H-rev5_cp-4.1H - CP-04(02) [H] Alternate Processing Site [applied]
NIST-SP800-53H-rev5_cp-4.2H - CP-06(01) [H] Separation from Primary Site [applied]
NIST-SP800-53H-rev5_cp-6.1H - CP-06(02) [H] Recovery Time and Recovery Point Objectives [applied]
NIST-SP800-53H-rev5_cp-6.2H - CP-06(03) [H] Accessibility [applied]
NIST-SP800-53H-rev5_cp-6.3H - CP-07(01) [H] Separation from Primary Site [applied]
NIST-SP800-53H-rev5_cp-7.1H - CP-07(02) [H] Accessibility [applied]
NIST-SP800-53H-rev5_cp-7.2H - CP-07(03) [H] Priority of Service [applied]
NIST-SP800-53H-rev5_cp-7.3H - CP-07(04) [H] Preparation for Use [applied]
NIST-SP800-53H-rev5_cp-7.4H - CP-08(01) [H] Priority of Service Provisions [applied]
NIST-SP800-53H-rev5_cp-8.1H - CP-08(02) [H] Single Points of Failure [applied]
NIST-SP800-53H-rev5_cp-8.2H - CP-08(03) [H] Separation of Primary and Alternate Providers [applied]
NIST-SP800-53H-rev5_cp-8.3H - CP-08(04) [H] Provider Contingency Plan [applied]
NIST-SP800-53H-rev5_cp-8.4H - CP-09(01) [H] Testing for Reliability and Integrity [applied]
NIST-SP800-53H-rev5_cp-9.1H - CP-09(02) [H] Test Restoration Using Sampling [applied]
NIST-SP800-53H-rev5_cp-9.2H - CP-09(03) [H] Separate Storage for Critical Information [applied]
NIST-SP800-53H-rev5_cp-9.3H - CP-09(05) [H] Transfer to Alternate Storage Site [applied]
NIST-SP800-53H-rev5_cp-9.5H - CP-09(08) [H] Cryptographic Protection [applied]
NIST-SP800-53H-rev5_cp-9.8H - CP-10(02) [H] Transaction Recovery [applied]
NIST-SP800-53H-rev5_cp-10.2H - CP-10(04) [H] Restore Within Time Period [applied]
NIST-SP800-53H-rev5_cp-10.4H - IA-02(01) [H] Multi-factor Authentication to Privileged Accounts [applied]
NIST-SP800-53H-rev5_ia-2.1H - IA-02(02) [H] Multi-factor Authentication to Non-privileged Accounts [applied]
NIST-SP800-53H-rev5_ia-2.2H - IA-02(05) [H] Individual Authentication with Group Authentication [applied]
NIST-SP800-53H-rev5_ia-2.5H - IA-02(08) [H] Access to Accounts — Replay Resistant [applied]
NIST-SP800-53H-rev5_ia-2.8H - IA-02(12) [H] Acceptance of PIV Credentials [applied]
NIST-SP800-53H-rev5_ia-2.12H - IA-04(04) [H] Identify User Status [applied]
NIST-SP800-53H-rev5_ia-4.4H - IA-05(01) [H] Password-based Authentication [applied]
NIST-SP800-53H-rev5_ia-5.1H - IA-05(02) [H] Public Key-based Authentication [applied]
NIST-SP800-53H-rev5_ia-5.2H - IA-05(06) [H] Protection of Authenticators [applied]
NIST-SP800-53H-rev5_ia-5.6H - IA-08(01) [H] Acceptance of PIV Credentials from Other Agencies [applied]
NIST-SP800-53H-rev5_ia-8.1H - IA-08(02) [H] Acceptance of External Authenticators [applied]
NIST-SP800-53H-rev5_ia-8.2H - IA-08(04) [H] Use of Defined Profiles [applied]
NIST-SP800-53H-rev5_ia-8.4H - IA-12(02) [H] Identity Evidence [applied]
NIST-SP800-53H-rev5_ia-12.2H - IA-12(03) [H] Identity Evidence Validation and Verification [applied]
NIST-SP800-53H-rev5_ia-12.3H - IA-12(04) [H] In-person Validation and Verification [applied]
NIST-SP800-53H-rev5_ia-12.4H - IA-12(05) [H] Address Confirmation [applied]
NIST-SP800-53H-rev5_ia-12.5H - IR-02(01) [H] Simulated Events [applied]
NIST-SP800-53H-rev5_ir-2.1H - IR-02(02) [H] Automated Training Environments [applied]
NIST-SP800-53H-rev5_ir-2.2H - IR-03(02) [H] Coordination with Related Plans [applied]
NIST-SP800-53H-rev5_ir-3.2H - IR-04(01) [H] Automated Incident Handling Processes [applied]
NIST-SP800-53H-rev5_ir-4.1H - IR-04(04) [H] Information Correlation [applied]
NIST-SP800-53H-rev5_ir-4.4H - IR-04(11) [H] Integrated Incident Response Team [applied]
NIST-SP800-53H-rev5_ir-4.11H - IR-05(01) [H] Automated Tracking, Data Collection, and Analysis [applied]
NIST-SP800-53H-rev5_ir-5.1H - IR-06(01) [H] Automated Reporting [applied]
NIST-SP800-53H-rev5_ir-6.1H - IR-06(03) [H] Supply Chain Coordination [applied]
NIST-SP800-53H-rev5_ir-6.3H - IR-07(01) [H] Automation Support for Availability of Information and Support [applied]
NIST-SP800-53H-rev5_ir-7.1H - MA-02(02) [H] Automated Maintenance Activities [applied]
NIST-SP800-53H-rev5_ma-2.2H - MA-03(01) [H] Inspect Tools [applied]
NIST-SP800-53H-rev5_ma-3.1H - MA-03(02) [H] Inspect Media [applied]
NIST-SP800-53H-rev5_ma-3.2H - MA-03(03) [H] Prevent Unauthorized Removal [applied]
NIST-SP800-53H-rev5_ma-3.3H - MA-04(03) [H] Comparable Security and Sanitization [applied]
NIST-SP800-53H-rev5_ma-4.3H - MA-05(01) [H] Individuals Without Appropriate Access [applied]
NIST-SP800-53H-rev5_ma-5.1H - MP-06(01) [H] Review, Approve, Track, Document, and Verify [applied]
NIST-SP800-53H-rev5_mp-6.1H - MP-06(02) [H] Equipment Testing [applied]
NIST-SP800-53H-rev5_mp-6.2H - MP-06(03) [H] Nondestructive Techniques [applied]
NIST-SP800-53H-rev5_mp-6.3H - PE-03(01) [H] System Access [applied]
NIST-SP800-53H-rev5_pe-3.1H - PE-06(01) [H] Intrusion Alarms and Surveillance Equipment [applied]
NIST-SP800-53H-rev5_pe-6.1H - PE-06(04) [H] Monitoring Physical Access to Systems [applied]
NIST-SP800-53H-rev5_pe-6.4H - PE-08(01) [H] Automated Records Maintenance and Review [applied]
NIST-SP800-53H-rev5_pe-8.1H - PE-11(01) [H] Alternate Power Supply — Minimal Operational Capability [applied]
NIST-SP800-53H-rev5_pe-11.1H - PE-13(01) [H] Detection Systems — Automatic Activation and Notification [applied]
NIST-SP800-53H-rev5_pe-13.1H - PE-13(02) [H] Suppression Systems — Automatic Activation and Notification [applied]
NIST-SP800-53H-rev5_pe-13.2H - PE-15(01) [H] Automation Support [applied]
NIST-SP800-53H-rev5_pe-15.1H - PL-04(01) [H] Social Media and External Site/Application Usage Restrictions [applied]
NIST-SP800-53H-rev5_pl-4.1H - PS-04(02) [H] Automated Actions [applied]
NIST-SP800-53H-rev5_ps-4.2H - RA-03(01) [H] Supply Chain Risk Assessment [applied]
NIST-SP800-53H-rev5_ra-3.1H - RA-05(02) [H] Update Vulnerabilities to Be Scanned [applied]
NIST-SP800-53H-rev5_ra-5.2H - RA-05(04) [H] Discoverable Information [applied]
NIST-SP800-53H-rev5_ra-5.4H - RA-05(05) [H] Privileged Access [applied]
NIST-SP800-53H-rev5_ra-5.5H - RA-05(11) [H] Public Disclosure Program [applied]
NIST-SP800-53H-rev5_ra-5.11H - SA-04(01) [H] Functional Properties of Controls [applied]
NIST-SP800-53H-rev5_sa-4.1H - SA-04(02) [H] Design and Implementation Information for Controls [applied]
NIST-SP800-53H-rev5_sa-4.2H - SA-04(05) [H] System, Component, and Service Configurations [applied]
NIST-SP800-53H-rev5_sa-4.5H - SA-04(09) [H] Functions, Ports, Protocols, and Services in Use [applied]
NIST-SP800-53H-rev5_sa-4.9H - SA-04(10) [H] Use of Approved PIV Products [applied]
NIST-SP800-53H-rev5_sa-4.10H - SA-09(02) [H] Identification of Functions, Ports, Protocols, and Services [applied]
NIST-SP800-53H-rev5_sa-9.2H - SA-15(03) [H] Criticality Analysis [applied]
NIST-SP800-53H-rev5_sa-15.3H - SC-07(03) [H] Access Points [applied]
NIST-SP800-53H-rev5_sc-7.3H - SC-07(04) [H] External Telecommunications Services [applied]
NIST-SP800-53H-rev5_sc-7.4H - SC-07(05) [H] Deny by Default — Allow by Exception [applied]
NIST-SP800-53H-rev5_sc-7.5H - SC-07(07) [H] Split Tunneling for Remote Devices [applied]
NIST-SP800-53H-rev5_sc-7.7H - SC-07(08) [H] Route Traffic to Authenticated Proxy Servers [applied]
NIST-SP800-53H-rev5_sc-7.8H - SC-07(18) [H] Fail Secure [applied]
NIST-SP800-53H-rev5_sc-7.18H - SC-07(21) [H] Isolation of System Components [applied]
NIST-SP800-53H-rev5_sc-7.21H - SC-08(01) [H] Cryptographic Protection [applied]
NIST-SP800-53H-rev5_sc-8.1H - SC-12(01) [H] Availability [applied]
NIST-SP800-53H-rev5_sc-12.1H - SC-28(01) [H] Cryptographic Protection [applied]
NIST-SP800-53H-rev5_sc-28.1H - SI-02(02) [H] Automated Flaw Remediation Status [applied]
NIST-SP800-53H-rev5_si-2.2H - SI-04(02) [H] Automated Tools and Mechanisms for Real-time Analysis [applied]
NIST-SP800-53H-rev5_si-4.2H - SI-04(04) [H] Inbound and Outbound Communications Traffic [applied]
NIST-SP800-53H-rev5_si-4.4H - SI-04(05) [H] System-generated Alerts [applied]
NIST-SP800-53H-rev5_si-4.5H - SI-04(10) [H] Visibility of Encrypted Communications [applied]
NIST-SP800-53H-rev5_si-4.10H - SI-04(12) [H] Automated Organization-generated Alerts [applied]
NIST-SP800-53H-rev5_si-4.12H - SI-04(14) [H] Wireless Intrusion Detection [applied]
NIST-SP800-53H-rev5_si-4.14H - SI-04(20) [H] Privileged Users [applied]
NIST-SP800-53H-rev5_si-4.20H - SI-04(22) [H] Unauthorized Network Services [applied]
NIST-SP800-53H-rev5_si-4.22H - SI-05(01) [H] Automated Alerts and Advisories [applied]
NIST-SP800-53H-rev5_si-5.1H - SI-07(01) [H] Integrity Checks [applied]
NIST-SP800-53H-rev5_si-7.1H - SI-07(02) [H] Automated Notifications of Integrity Violations [applied]
NIST-SP800-53H-rev5_si-7.2H - SI-07(05) [H] Automated Response to Integrity Violations [applied]
NIST-SP800-53H-rev5_si-7.5H - SI-07(07) [H] Integration of Detection and Response [applied]
NIST-SP800-53H-rev5_si-7.7H - SI-07(15) [H] Code Authentication [applied]
NIST-SP800-53H-rev5_si-7.15H - SI-08(02) [H] Automatic Updates [applied]
NIST-SP800-53H-rev5_si-8.2H - SR-02(01) [H] Establish SCRM Team [applied]
NIST-SP800-53H-rev5_sr-2.1H - SR-09(01) [H] Multiple Stages of System Development Life Cycle [applied]
NIST-SP800-53H-rev5_sr-9.1H - SR-11(01) [H] Anti-counterfeit Training [applied]
NIST-SP800-53H-rev5_sr-11.1H - SR-11(02) [H] Configuration Control for Component Service and Repair [applied]
NIST-SP800-53H-rev5_sr-11.2H