Control Catalog
NIST SP 800-53 Rev 5
20 control families, 324 base controls, and 850 control enhancements from the official NIST catalog (version 5.2.0). Pick a family to see its controls and baseline allocations.
SA
System and Services Acquisition
24 controls · 101 enhancements · 7 withdrawn
- SA-1Policy and ProceduresLOWMODERATEHIGHPRIVACY
- SA-2Allocation of ResourcesLOWMODERATEHIGHPRIVACY
- SA-3System Development Life Cycle3 enhancementsLOWMODERATEHIGHPRIVACY
- SA-4Acquisition Process12 enhancementsLOWMODERATEHIGHPRIVACY
- SA-5System Documentation5 enhancementsLOWMODERATEHIGH
- SA-8Security and Privacy Engineering Principles33 enhancementsLOWMODERATEHIGH
- SA-9External System Services8 enhancementsLOWMODERATEHIGHPRIVACY
- SA-10Developer Configuration Management7 enhancementsMODERATEHIGH
- SA-11Developer Testing and Evaluation9 enhancementsMODERATEHIGHPRIVACY
- SA-15Development Process, Standards, and Tools13 enhancementsMODERATEHIGH
- SA-16Developer-provided TrainingHIGH
- SA-17Developer Security and Privacy Architecture and Design9 enhancementsHIGH
- SA-20Customized Development of Critical Components
- SA-21Developer Screening1 enhancementHIGH
- SA-22Unsupported System Components1 enhancementLOWMODERATEHIGH
- SA-23Specialization
- SA-24Design For Cyber Resiliency
Need help implementing System and Services Acquisition?
Maverc maps your existing tooling to the 800-53 controls you owe, documents the gaps, and builds the remediation plan.
Control catalog and framework text on this page is reproduced from official NIST publications — a public-domain work of the U.S. Government (17 U.S.C. §105). Maverc commentary, groupings, and readiness guidance are our own and are not part of any NIST publication.