Control Catalog
NIST SP 800-53 Rev 5
20 control families, 324 base controls, and 850 control enhancements from the official NIST catalog (version 5.2.0). Pick a family to see its controls and baseline allocations.
PM
Program Management
32 controls · 5 enhancements · 0 withdrawn
- PM-1Information Security Program Plan
- PM-2Information Security Program Leadership Role
- PM-3Information Security and Privacy ResourcesPRIVACY
- PM-4Plan of Action and Milestones ProcessPRIVACY
- PM-5System Inventory1 enhancement
- PM-6Measures of PerformancePRIVACY
- PM-7Enterprise Architecture1 enhancementPRIVACY
- PM-8Critical Infrastructure PlanPRIVACY
- PM-9Risk Management StrategyPRIVACY
- PM-10Authorization ProcessPRIVACY
- PM-11Mission and Business Process DefinitionPRIVACY
- PM-12Insider Threat Program
- PM-13Security and Privacy WorkforcePRIVACY
- PM-14Testing, Training, and MonitoringPRIVACY
- PM-15Security and Privacy Groups and Associations
- PM-16Threat Awareness Program1 enhancement
- PM-17Protecting Controlled Unclassified Information on External SystemsPRIVACY
- PM-18Privacy Program PlanPRIVACY
- PM-19Privacy Program Leadership RolePRIVACY
- PM-20Dissemination of Privacy Program Information1 enhancementPRIVACY
- PM-21Accounting of DisclosuresPRIVACY
- PM-22Personally Identifiable Information Quality ManagementPRIVACY
- PM-23Data Governance Body
- PM-24Data Integrity BoardPRIVACY
- PM-25Minimization of Personally Identifiable Information Used in Testing, Training, and ResearchPRIVACY
- PM-26Complaint ManagementPRIVACY
- PM-27Privacy ReportingPRIVACY
- PM-28Risk FramingPRIVACY
- PM-29Risk Management Program Leadership Roles
- PM-30Supply Chain Risk Management Strategy1 enhancement
- PM-31Continuous Monitoring StrategyPRIVACY
- PM-32Purposing
Need help implementing Program Management?
Maverc maps your existing tooling to the 800-53 controls you owe, documents the gaps, and builds the remediation plan.
Control catalog and framework text on this page is reproduced from official NIST publications — a public-domain work of the U.S. Government (17 U.S.C. §105). Maverc commentary, groupings, and readiness guidance are our own and are not part of any NIST publication.
