---
tags:
  - Rev5
  - Controls
---

<span class="picto">:lucide-computer:{ .machine title="This content is machine-generated from FedRAMP Machine-Readable Rules." }</span>

# Full Rev5 Control Reference

This section provides a stable reference for every active control and control enhancement in the vendored NIST SP 800-53 Revision 5 OSCAL catalog. Use it to review the original NIST control statement, identify FedRAMP Rev5 baseline applicability, and see any additional FedRAMP guidance or organization-assigned parameter values.

The reference contains **1014 active controls and control enhancements** across **20 families**. Withdrawn controls are not included.

!!! info "Official NIST OSCAL source"
    **Electronic (OSCAL) Version of NIST SP 800-53 Rev 5.2.0 Controls and SP 800-53A Rev 5.2.0 Assessment Procedures**

    - **Catalog version:** 5.2.0
    - **OSCAL version:** 1.2.2
    - **Catalog last modified:** May 11, 2026

## Control Families

| Family | ID | Controls and enhancements |
| --- | --- | ---: |
| [Access Control](access-control.md){ data-preview } | `AC` | 131 |
| [Awareness and Training](awareness-and-training.md){ data-preview } | `AT` | 15 |
| [Audit and Accountability](audit-and-accountability.md){ data-preview } | `AU` | 56 |
| [Assessment, Authorization, and Monitoring](assessment-authorization-and-monitoring.md){ data-preview } | `CA` | 25 |
| [Configuration Management](configuration-management.md){ data-preview } | `CM` | 56 |
| [Contingency Planning](contingency-planning.md){ data-preview } | `CP` | 49 |
| [Identification and Authentication](identification-and-authentication.md){ data-preview } | `IA` | 59 |
| [Incident Response](incident-response.md){ data-preview } | `IR` | 40 |
| [Maintenance](maintenance.md){ data-preview } | `MA` | 28 |
| [Media Protection](media-protection.md){ data-preview } | `MP` | 20 |
| [Physical and Environmental Protection](physical-and-environmental-protection.md){ data-preview } | `PE` | 51 |
| [Planning](planning.md){ data-preview } | `PL` | 11 |
| [Program Management](program-management.md){ data-preview } | `PM` | 37 |
| [Personnel Security](personnel-security.md){ data-preview } | `PS` | 17 |
| [Personally Identifiable Information Processing and Transparency](personally-identifiable-information-processing-and-transparency.md){ data-preview } | `PT` | 21 |
| [Risk Assessment](risk-assessment.md){ data-preview } | `RA` | 22 |
| [System and Services Acquisition](system-and-services-acquisition.md){ data-preview } | `SA` | 108 |
| [System and Communications Protection](system-and-communications-protection.md){ data-preview } | `SC` | 139 |
| [System and Information Integrity](system-and-information-integrity.md){ data-preview } | `SI` | 102 |
| [Supply Chain Risk Management](supply-chain-risk-management.md){ data-preview } | `SR` | 27 |
