# NIST SP 800-53 **Entity class:** Federal security-and-privacy control catalog ## Definition **NIST Special Publication 800-53** is the federal catalog of security and privacy controls for information systems and organizations. Its control families cover access control, identity and authentication, audit, assessment and authorization, monitoring, configuration, incident response, system integrity, supply chain, privacy, and related safeguards. NIST cautions that mappings between frameworks are not necessarily one-to-one and do not imply equivalence. ## Relationships - **developed within:** [[wiki/Unified Federal Information Security Framework|Unified Federal Information Security Framework]]. - **operationalized by:** [[wiki/Risk Management Framework|Risk Management Framework]]. - **NSS companion:** [[wiki/CNSSI 1253|CNSSI 1253]]. - **composed of:** [[wiki/Security Controls and Control Overlays|security controls and control overlays]]. - **source:** [[research/Machine-Readable Assurance and the Convergence of Intelligence|Machine-Readable Assurance and the Convergence of Intelligence]]. ## Sources / Provenance - [NIST — SP 800-53 Rev. 5, Update 1](https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final)