nist-800-53

Guides selection, implementation, and assessment of NIST SP 800-53 Rev 5 security and privacy controls.

Updated Jun 5, 2026

Search Tags:#compliance #security controls #privacy controls #fedramp #nist 800-53 #risk management framework #fips 199

Ready to run

npx skills add https://github.com/yogiex/opencode-cyber-security-skills --skill nist-800-53-yogiex

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: nist-800-53
Source: https://github.com/yogiex/opencode-cyber-security-skills/tree/main/skills/nist-800-53
Command: npx skills add https://github.com/yogiex/opencode-cyber-security-skills --skill nist-800-53-yogiex

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Navigating the NIST SP 800-53 Rev 5 catalog of 20 control families, baselines, and enhancements is complex, and teams often struggle to select, tailor, and assess the right controls for their system's FIPS 199 impact level. ## Core Features & Use Cases - Control Selection & Baselines: Explains Low, Moderate, and High baselines from SP 800-53B, tailoring rules, overlays, and parameterization. - RMF Alignment: Walks through the six-step Risk Management Framework process from categorization to continuous monitoring, including SP 800-53A assessment methods. - Privacy Integration: Covers the PT control family and security-privacy collaboration for systems processing PII. - Use Case: A security engineer preparing a FedRAMP authorization uses this Skill to determine the Moderate baseline controls, document tailoring decisions, and draft the System Security and Privacy Plan. ## Quick Start Ask the agent to help select and tailor NIST 800-53 controls for a Moderate impact system that processes PII.

Frequently Asked Questions about nist-800-53

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I select NIST 800-53 controls for my system?▼

First categorize your system per FIPS 199 to determine the impact level for confidentiality, integrity, and availability. Then select the matching Low, Moderate, or High baseline from SP 800-53B and apply tailoring such as scoping, parameterization, and compensating controls.

What is the difference between NIST 800-53 Low, Moderate, and High baselines?▼

The baselines scale with impact level: Low includes roughly 120 controls, Moderate around 250, and High over 350. Higher baselines add more control enhancements, such as automated account management and inactive account disabling in the AC family.

Does NIST 800-53 Rev 5 cover privacy controls?▼

Yes, Rev 5 integrates privacy directly into the main catalog rather than a separate appendix. The PT family covers PII processing and transparency, including authority, purpose specification, consent, notice, and minimization.

How does NIST 800-53 relate to FedRAMP and ISO 27001?▼

FedRAMP builds on the Moderate baseline with additional cloud-specific controls. NIST also publishes a crosswalk mapping ISO/IEC 27001:2022 Annex A controls to 800-53, and 800-53 controls map to NIST CSF functions.

When should I not use the NIST 800-53 control catalog?▼

Avoid it when you need tool-specific technical configuration guidance, a full risk management framework process, incident response procedures, or threat modeling. Those scenarios are better served by dedicated documentation or specialized skills.