Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-53A

Guide for Assessing the Security Controls in Federal Information Systems and Organizations: Building Effective Security Assessment Plans

Date Published: July 2008

Supersedes: IR 6885 E2003 (02/01/2003); IR 6951 (01/31/2003); SP 800-26 (11/01/2001)


Ron Ross (NIST), L. Johnson (NIST), Stuart Katzke (NIST), Patricia Toth (NIST), Gary Stoneburner (APL), George Rogers



categorization; FISMA; penetration testing; risk management; security assessment plans; security controls
Control Families

None selected


Download URL

Supplemental Material:
None available

Document History:
07/01/08: SP 800-53A (Final)