§ Library · Baseline coverage
Baseline coverage heat map.
Where each NIST 800-53 r5 baseline puts its weight, family by family. Cell intensity scales with the number of controls (base + enhancements) the baseline selects from that family. Hover any cell to see the full control list; click a family name to jump into that family on the catalog page.
NIST Low
149
controls + enhancements
NIST Moderate
287
controls + enhancements
NIST High
370
controls + enhancements
NIST Privacy
96
controls + enhancements
| Family | NIST Low 149 total | NIST Moderate 287 total | NIST High 370 total | NIST Privacy 96 total | Catalog union |
|---|---|---|---|---|---|
| AC Access Control | 11 | 39 | 46 | 2 | 47 |
| AT Awareness and Training | 5 | 6 | 6 | 5 | 7 |
| AU Audit and Accountability | 10 | 16 | 25 | 4 | 26 |
| CA Assessment, Authorization, and Monitoring | 8 | 10 | 14 | 6 | 14 |
| CM Configuration Management | 9 | 24 | 32 | 2 | 32 |
| CP Contingency Planning | 6 | 23 | 35 | 0 | 35 |
| IA Identification and Authentication | 16 | 24 | 26 | 0 | 26 |
| IR Incident Response | 7 | 13 | 18 | 10 | 20 |
| MA Maintenance | 4 | 9 | 12 | 0 | 12 |
| MP Media Protection | 4 | 7 | 10 | 2 | 10 |
| PE Physical and Environmental Protection | 10 | 18 | 25 | 1 | 26 |
| PL Planning | 6 | 7 | 7 | 6 | 8 |
| PM Program Management | 0 | 0 | 0 | 24 | 24 |
| PS Personnel Security | 9 | 9 | 10 | 1 | 10 |
| PT PII Processing and Transparency | 0 | 0 | 0 | 13 | 13 |
| RA Risk Assessment | 8 | 10 | 11 | 4 | 12 |
| SA System and Services Acquisition | 9 | 17 | 21 | 7 | 22 |
| SC System and Communications Protection | 10 | 25 | 30 | 1 | 31 |
| SI System and Information Integrity | 6 | 18 | 28 | 8 | 34 |
| SR Supply Chain Risk Management | 11 | 12 | 14 | 0 | 14 |