Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Projects Open Security Controls Assessment Language

Open Security Controls Assessment Language OSCAL

News and Updates

Cybersecurity and Privacy Reference Tool Update
November 7, 2023
NIST has issued SP 800-53 Release 5.1.1 in the Cybersecurity and Privacy Reference Tool (CPRT).
NIST Updates Security and Privacy Control Assessment Procedures
January 25, 2022
NIST has released Special Publication (SP) 800-53A Revision 5, "Assessing Security and Privacy Controls in Information Systems and Organizations."
New Online Tool to Improve Stakeholder Engagement with SP 800-53
September 28, 2021
A new SP 800-53 controls Public Comment Site is now available for interacting with, downloading, and submitting security and privacy controls, baselines, and assessments.
Draft SP 800-53A Rev. 5: Assessing Security and Privacy Controls
August 3, 2021
Draft NIST Special Publication 800-53A Revision 5, "Assessing Security and Privacy Controls in Information Systems and Organizations," is available for comment through October 1, 2021.
NIST Releases OSCAL 1.0.0
June 10, 2021
NIST's OSCAL 1.0.0 provides a stable release for wide-scale implementation.
Control Catalog and Baselines as Spreadsheets
January 26, 2021
New supplemental materials are available for SP 800-53 Rev. 5 and SP 800-53B: spreadsheets for the Control Catalog and Control Baselines.
Updates to SP 800-53 Rev 5 and 800-53B
December 10, 2020
NIST has issued supplemental materials and errata updates for both SP 800-53 Rev. 5 and SP 800-53B, which were originally published in September 2020. New materials include control mappings and control comparisons. 
Control Baselines: NIST Publishes SP 800-53B
October 29, 2020
NIST Special Publication (SP) 800-53B, "Control Baselines for Information Systems and Organizations," has been published.
SP 800-53 Revision 5 Published
September 23, 2020
NIST Special Publication (SP) 800-53 Revision 5, "Security and Privacy Controls for Information Systems and Organizations," represents a multi-year effort to develop the next generation of controls needed to strengthen and...

Contacts

Michaela Iorga
[email protected]

Created April 24, 2018, Updated May 28, 2025