NIST SP 800-53 Rev. 5 Security and Privacy Controls

What this entry covers

NIST Special Publication 800-53 Revision 5, Security and Privacy Controls for Information Systems and Organizations, is a catalog of security and privacy controls published by the National Institute of Standards and Technology. NIST develops it under its FISMA responsibilities for federal information systems, and NIST states that nongovernmental organizations may use it on a voluntary basis.

MyRHC indexes this framework so practitioners, auditors, and automated agents can find the authoritative primary sources in one place. This page is a navigation aid. It is not legal advice and is not a substitute for the official text.

Official documentation

• Primary official source: https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final

Recent changes

• 2025-08-27: NIST issued minor release 5.2.0 of the SP 800-53 Rev. 5 controls, adding SA-15(13), SA-24 and SI-02(07) and revising SI-07(12), among other updates. NIST CSRC

How to use this index entry

1. Open the official link above (or the agency home if the deep link drifts).
2. Confirm edition / revision date against your program scope.
3. Map applicability by sector and jurisdiction listed in the metadata.
4. Follow related frameworks only after checking their own official sources.

Disclaimers

• MyRHC does not host proprietary standards text (ISO, some industry bodies).
• Where standards are paywalled, we link to the publisher’s catalog page.
• Always verify current requirements with counsel and the issuing authority.