Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( Dot gov ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST Risk Management Framework RMF

Project Links

Overview FAQs News & Updates Events Publications Presentations

SP 800-53 Controls and SP 800-53B Control Baselines

Resources for Implementers

View/Search Controls & Baselines SP 800-53 Release Search View the SP 800-53 controls and SP 800-53B control baselines as a webpage Search all controls
Download Controls & Baselines Download the controls and control baselines in XML, CSV, PDF, and spreadsheet formats Links to the SP 800-53 OSCAL Git Repository
Control Overlay Repository Formerly the Security Control Overlay Repository Learn more about Control Overlays How to develop and submit a Control Overlay View Control Overlay Submissions

Contacts

NIST Risk Management Framework Team
sec-cert@nist.gov

Group

Security Engineering and Risk Management

Topics

Security and Privacy: general security & privacy, privacy, risk management, security measurement, security programs & operations

Laws and Regulations: E-Government Act, Federal Information Security Modernization Act

Related Projects

Cyber Supply Chain Risk Management
Cybersecurity Framework
Federal Cybersecurity & Privacy Forum
Open Security Controls Assessment Language
Privacy Engineering
Protecting CUI
Systems Security Engineering (SSE) Project

Additional Pages

FISMA Background About the RMF Prepare Step Categorize Step Select Step Implement Step Assess Step Authorize Step Monitor Step SP 800-53 Controls Release Search Downloads Control Overlay Repository Overlay Overview SCOR Submission Process SCOR Contact RMF Introductory Course RMF Email List Meet the RMF Team

Contacts

NIST Risk Management Framework Team
sec-cert@nist.gov

Group

Security Engineering and Risk Management

Topics

Security and Privacy: general security & privacy, privacy, risk management, security measurement, security programs & operations

Laws and Regulations: E-Government Act, Federal Information Security Modernization Act

Related Projects

Cyber Supply Chain Risk Management
Cybersecurity Framework
Federal Cybersecurity & Privacy Forum
Open Security Controls Assessment Language
Privacy Engineering
Protecting CUI
Systems Security Engineering (SSE) Project

Created November 30, 2016, Updated April 14, 2021