NIST

• NIST 800-171 3.1.1 Limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems).
• NIST 800-171 3.1.2 Limit system access to the types of transactions and functions that authorized users are permitted to execute.
• NIST 800-171 3.1.3 Control the flow of CUI in accordance with approved authorizations.
• NIST 800-171 3.1.4 Separate the duties of individuals to reduce the risk of malevolent activity without collusion.
• NIST 800-171 3.1.5 Employ the principle of least privilege, including for specific security functions and privileged accounts.

NIST800 53 controls in the Access Control family.

• NIST800 53 AC-1 — Policy And Procedures
• NIST800 53 AC-2(7) — Privileged User Accounts
• NIST800 53 AC-2 — Account Management
• NIST800 53 AC-2(1) — Automated System Account Management

NIST800 53 controls in the Incident Response family.

• NIST800 53 IR-4(3) — Continuity Of Operations
• NIST800 53 IR-4(6) — Insider Threats
• NIST800 53 IR-1 — Policy And Procedures
• NIST800 53 IR-2(3) — Breach

NIST800 53 controls in the Personnel Security family.

• NIST800 53 PS-3(1) — Classified Information
• NIST800 53 PS-3(2) — Formal Indoctrination
• NIST800 53 PS-1 — Policy And Procedures
• NIST800 53 PS-2 — Position Risk Designation

NIST800 53 controls in the Physical and Environmental Protection family.

• NIST800 53 PE-6 — Monitoring Physical Access
• NIST800 53 PE-6(2) — Automated Intrusion Recognition And Responses
• NIST800 53 PE-2 — Physical Access Authorizations
• NIST800 53 PE-2(2) — Two Forms Of Identification

NIST800 53 controls in the Planning family.

• NIST800 53 PL-8 — Security And Privacy Architectures
• NIST800 53 PL-8(1) — Defense In Depth
• NIST800 53 PL-1 — Policy And Procedures
• NIST800 53 PL-2 — System Security And Privacy Plans

NIST800 53 controls in the Program Management family.

• NIST800 53 PM-1 — Information Security Program Plan
• NIST800 53 PM-2 — Information Security Program Leadership Role
• NIST800 53 PM-3 — Information Security And Privacy Resources
• NIST800 53 PM-4 — Plan Of Action And Milestones Process

NIST800 53 controls in the Media Protection family.

• NIST800 53 MP-8(4) — Classified Information
• NIST800 53 MP-1 — Policy And Procedures
• NIST800 53 MP-2 — Media Access

NIST800 53 controls in the Assessment, Authorization, and Monitoring family.

• NIST800 53 CA-2 — Control Assessments
• NIST800 53 CA-2(1) — Independent Assessors

NIST800 53 controls in the Audit and Accountability family.

• NIST800 53 AU-2 — Event Logging
• NIST800 53 AU-3 — Content Of Audit Records

NIST800 53 controls in the Awareness and Training family.

• NIST800 53 AT-2 — Literacy Training And Awareness
• NIST800 53 AT-2(1) — Practical Exercises

NIST800 53 controls in the Configuration Management family.

• NIST800 53 CM-2 — Baseline Configuration
• NIST800 53 CM-2(7) — Configure Systems And Components For High-Risk Areas

NIST800 53 controls in the Contingency Planning family.

• NIST800 53 CP-1 — Policy And Procedures
• NIST800 53 CP-2 — Contingency Plan

NIST800 53 controls in the Identification and Authentication family.

• NIST800 53 IA-1 — Policy And Procedures
• NIST800 53 IA-2 — Identification And Authentication (Organizational Users)

NIST800 53 controls in the Maintenance family.

• NIST800 53 MA-1 — Policy And Procedures
• NIST800 53 MA-2 — Controlled Maintenance

NIST800 53 controls in the Automated Mechanisms for Tracking PII Processing Purposes family.

• NIST800 53 PT-3(2) — Automation

NIST800 53 controls in the Data Tagging for Processing Purposes family.

• NIST800 53 PT-3(1) — Data Tagging

NIST800 53 controls in the Just-in-Time Consent Interface family.

• NIST800 53 PT-4(2) — Just-In-Time Consent

NIST800 53 controls in the Organizational Privacy and Security Policies family.

• NIST800 53 PT-1 — Policy And Procedures

NIST800 53 controls in the Organizational Privacy Policies family.

• NIST800 53 PT-2 — Authority To Process Personally Identifiable Information

Plain-English overview of the framework.

• NIST SP 800-53 Rev 5 — overview

NIST800 53 controls in the PII Processing Enforcement family.

• NIST800 53 PT-2(2) — Automation

NIST800 53 controls in the Purpose Identification and Processing Controls family.

• NIST800 53 PT-3 — Personally Identifiable Information Processing Purposes

NIST800 53 controls in the Tailored Consent Interface family.

• NIST800 53 PT-4(1) — Tailored Consent

NIST800 53 controls in the Tools for Managing PII Consent family.

• NIST800 53 PT-4 — Consent