NIST SP 800-53

NIST Special Publication 800-53 Rev. 5 is the security and privacy control catalog for US federal information systems. It defines roughly 1,000 controls and control enhancements across 20 families and is updated in releases; Release 5.2.0 (August 2025) is current. Other programs, including FedRAMP's Rev. 5 baselines, select controls from it. The SA (System and Services Acquisition), SI (System and Information Integrity), AC (Access Control), and CM (Configuration Management) families contain most code-relevant controls.