thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

NIST SP 800-53

NIST catalog of security and privacy controls for information systems and organizations.

Definition

SP 800-53 Rev. 5 (with release 5.1.1 and later updates) contains over 1,000 controls and enhancements in 20 families, such as AC (Access Control), AU (Audit and Accountability), and PT (PII Processing and Transparency). Rev. 5 made controls outcome-based, integrated privacy controls, and added Supply Chain Risk Management (SR). Baselines moved to SP 800-53B.

Example

AC-2 Account Management requires defining account types, approval, monitoring, and disabling of accounts.

Exam tip

Rev. 5 has 20 families, including the new PT and SR families.

Related terms