GRCLibrary.ai

Crosswalk

NIST SP 800-53 Rev. 5

Frameworks and control catalogues.

Where the corpus maps to NIST SP 800-53 Rev. 5: Security and Privacy Controls for Information Systems and Organizations.

Canonical citation

Standard ID
NIST SP 800-53
Current version
Rev. 5
Publication date
2020-09
Topic
Security and Privacy Controls for Information Systems and Organizations
Upstream check location
https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final (opens in a new tab)
Last verified (UTC)
2026-06-30

Mapped control areas, 17

Control areas from the reverse crosswalk

From the Reverse Framework Control Crosswalk Matrix, which answers: given a control identifier or family, which documents address it.

Control familyLibrary documentsAlignment type
AC Access ControlIdentity and Access Management Policy, Access Control Procedure, Privileged Access Management StandardArchitectural recommendation
AT Awareness and TrainingSecurity Awareness and Training StandardArchitectural recommendation
AU Audit and AccountabilityLogging and Monitoring StandardArchitectural recommendation
CA Assessment, Authorization, and MonitoringControl Testing Procedure, Internal Audit Standard, Acceptance Into Service PolicyArchitectural recommendation
CM Configuration ManagementChange Management and Configuration Control Procedure, Production Security RequirementsArchitectural recommendation
CP Contingency PlanningBusiness Continuity and Resilience Framework, Business Continuity and Disaster Recovery Policy, Business Continuity and Disaster Recovery StandardArchitectural recommendation
IA Identification and AuthenticationAuthentication and Password Management Standard, Identity Management ProcedureArchitectural recommendation
IR Incident ResponseSecurity Incident Response Procedure, Incident Escalation MatrixArchitectural recommendation
MA MaintenancePatch Management ProcedureArchitectural recommendation
MP Media ProtectionMedia Handling and Transport ProcedureArchitectural recommendation
PE Physical and Environmental ProtectionPhysical Security of IT Infrastructure StandardArchitectural recommendation
PS Personnel SecurityPersonnel Security Screening Standard, IT Onboarding and Offboarding Procedure, Security Disciplinary Process ProcedureArchitectural recommendation
RA Risk AssessmentRisk Assessment Methodology Procedure, Enterprise Risk Management StandardArchitectural recommendation
SA System and Services AcquisitionSupplier Security and Privacy Assurance Standard, Software Evaluation, Acceptance and Lifecycle Management Standard, Acceptance Into Service PolicyArchitectural recommendation
SC System and Communications ProtectionNetwork Communications Security Policy, Encryption and Key Management PolicyArchitectural recommendation
SI System and Information IntegrityVulnerability Management Procedure, Patch Management Procedure, Data Loss Prevention StandardArchitectural recommendation
SR Supply Chain Risk ManagementThird-Party and Supply Chain Risk Standard, Software Composition Analysis StandardArchitectural recommendation

Coverage, 7 domains

Coverage by domain

From the Reverse Framework Control Crosswalk Matrix; the main crosswalk table's document counts land here.

Risk, 3 documents

Compliance, 2 documents

Security, 17 documents

Operations, 5 documents

Supply chain, 1 document

Resilience, 3 documents

Dev security, 2 documents

Corpus citations, 46

Documents naming it in their framework alignment

Generated from each document's framework alignment list in the taxonomy, through the committed alias map.

Note

What this mapping is

From the GRC Library Compliance Alignment Matrix: citations are indicative, not exhaustive (the representative-citation convention), and no entry constitutes a certification, attestation, or legal opinion.

From the Reverse Framework Control Crosswalk Matrix: coverage is partial, and external control identifiers and clause numbers are referenced for navigation only; the library does not reproduce third-party control text.

From the Cross-Framework Alignment Matrix: the alignment is not an official mapping, certification claim, legal opinion, or reproduction of third-party framework content.

The standards, laws, frameworks, and programmes in the canonical citations register, mapped here or not, are listed with their current editions on the Standards & frameworks page, generated from that register.