NIST 800-53 Rev 5 Controls List and Checklist

Catalog vs Baseline Checklist

1. Categorize impact (FIPS 199 context for federal systems)
2. Select the matching 800-53B security baseline
3. Apply the privacy baseline when required
4. Tailor with overlays and compensating controls; document decisions
5. Track implementation and assessment status per selected control

For family-level explainers, start with AU, IR, and CM when SIEM and hardening evidence matter most.

How CyberSilo Helps

• Compliance Standards Automation — selected-control tracking and evidence
• CIS Benchmarking Tool — hardening evidence that supports CM-oriented outcomes

Frequently Asked Questions

How many controls are in Rev 5?

Use the official NIST catalog and baseline spreadsheets for counts. Programme scope is the selected and tailored set, not the raw catalog size.

Does the privacy baseline depend on impact level?

SP 800-53B applies the privacy baseline irrespective of impact level, in addition to the Low, Moderate, or High security baseline.

Is FedRAMP the same as Moderate unchanged?

FedRAMP uses baselines with FedRAMP-specific overlays and tailoring. Follow current FedRAMP baseline documents.

Related NIST Resources

NIST hub · What Is NIST CSF 2.0? · 800-171 Rev 3 Changes · 800-53 Families