Control Catalog
NIST SP 800-53 Rev 5
20 control families, 324 base controls, and 850 control enhancements from the official NIST catalog (version 5.2.0). Pick a family to see its controls and baseline allocations.
AC
Access Control
25 controls · 122 enhancements · 2 withdrawn
- AC-1Policy and ProceduresLOWMODERATEHIGHPRIVACY
- AC-2Account Management13 enhancementsLOWMODERATEHIGH
- AC-3Access Enforcement15 enhancementsLOWMODERATEHIGH
- AC-4Information Flow Enforcement32 enhancementsMODERATEHIGH
- AC-5Separation of DutiesMODERATEHIGH
- AC-6Least Privilege10 enhancementsMODERATEHIGH
- AC-7Unsuccessful Logon Attempts4 enhancementsLOWMODERATEHIGH
- AC-8System Use NotificationLOWMODERATEHIGH
- AC-9Previous Logon Notification4 enhancements
- AC-10Concurrent Session ControlHIGH
- AC-11Device Lock1 enhancementMODERATEHIGH
- AC-12Session Termination3 enhancementsMODERATEHIGH
- AC-14Permitted Actions Without Identification or Authentication1 enhancementLOWMODERATEHIGH
- AC-16Security and Privacy Attributes10 enhancements
- AC-17Remote Access10 enhancementsLOWMODERATEHIGH
- AC-18Wireless Access5 enhancementsLOWMODERATEHIGH
- AC-19Access Control for Mobile Devices5 enhancementsLOWMODERATEHIGH
- AC-20Use of External Systems5 enhancementsLOWMODERATEHIGH
- AC-21Information Sharing2 enhancementsMODERATEHIGH
- AC-22Publicly Accessible ContentLOWMODERATEHIGH
- AC-23Data Mining Protection
- AC-24Access Control Decisions2 enhancements
- AC-25Reference Monitor
Need help implementing Access Control?
Maverc maps your existing tooling to the 800-53 controls you owe, documents the gaps, and builds the remediation plan.
Control catalog and framework text on this page is reproduced from official NIST publications — a public-domain work of the U.S. Government (17 U.S.C. §105). Maverc commentary, groupings, and readiness guidance are our own and are not part of any NIST publication.