NIST Risk Management Framework RMF

Project Links

Overview FAQs News & Updates Events Publications Presentations

SP 800-53 Controls and SP 800-53B Control Baselines

Resources for Implementers

NIST SP 800-53 Controls Public Comment Site

Comment on Controls & Baselines

Suggest ideas for new controls and enhancements
Submit comments on existing controls and baselines
Track the status of your feedback
Participate in comment periods
Preview changes to future SP 800-53 releases

See More: Infographic and Announcement

View/Search
Controls & Baselines

SP 800-53 Release Search
View controls & baselines in browser
Search controls & baselines

Download
Controls & Baselines

Download the controls & baselines in XML, CSV, PDF, & spreadsheet formats
Links to the SP 800-53 OSCAL Git Repository

Control Overlay
Repository

Learn more about control overlays
View available control overlays

More About
the RMF Steps

Learn more about how NIST SP 800-53, SP 800-53B, and SP 800-53A support the Select, Implement, Assess and Monitor RMF Steps

Contacts

NIST Risk Management Framework Team
sec-cert@nist.gov

Group

Security Engineering and Risk Management

Topics

Security and Privacy: general security & privacy, privacy, risk management, security measurement, security programs & operations

Laws and Regulations: E-Government Act, Federal Information Security Modernization Act

Related Projects

Cybersecurity Framework
Cybersecurity Supply Chain Risk Management
Federal Cybersecurity & Privacy Forum
macOS Security
Open Security Controls Assessment Language
Operational Technology Security
Privacy Engineering
Protecting CUI
Systems Security Engineering (SSE) Project

Additional Pages

FISMA Background About the RMF Prepare Step Categorize Step Select Step Implement Step Assess Step Authorize Step Monitor Step SP 800-53 Controls SP 800-53 Release Search Downloads Control Catalog Public Comments Overview Public Comments: Submit and View Control Overlay Repository RMF Introductory Courses RMF Email List RMF Team Speaker Request

Contacts

NIST Risk Management Framework Team
sec-cert@nist.gov

Group

Security Engineering and Risk Management

Topics

Security and Privacy: general security & privacy, privacy, risk management, security measurement, security programs & operations

Laws and Regulations: E-Government Act, Federal Information Security Modernization Act

Related Projects

Cybersecurity Framework
Cybersecurity Supply Chain Risk Management
Federal Cybersecurity & Privacy Forum
macOS Security
Open Security Controls Assessment Language
Operational Technology Security
Privacy Engineering
Protecting CUI
Systems Security Engineering (SSE) Project

Created November 30, 2016, Updated July 29, 2025