Home/Compliance
nist-800-53

NIST 800-53. Security Controls

6 controls · cross-mapped to ATT&CK techniques
Translate between regulatory language and what attackers actually do. Each control maps to MITRE ATT&CK techniques; open a control to see those techniques and whether we hold detection coverage for them.
NIST 800-53 (1246)NIST CSF (106)ISO 27001:2022 (93)PCI-DSS v4.0 (75)CIS v8.1 (62)CRI Profile (60)CSA CCM v4 (57)SOC 2 TSC (57)OWASP API (10)OWASP Mobile (10)OWASP Web (10)
1246
Total controls
0%
Detection coverage
0
Covered controls
1246
Coverage gaps
▤ Export audit (CSV) Coverage report Self-assessment Show gaps only
▶ Check your own detection coverage

Paste the ATT&CK technique IDs you have Sigma/YARA rules for (one per line, e.g. T1059, T1190). The controls below will update to show YOUR coverage instead of ours.

Red team insight A nist-800-53 compliant org should have detection for the green-tagged techniques below. Controls showing no technique coverage are likely blind spots. Use gaps view to enumerate unmonitored attack paths.
▤

Controls

6 shown of 6
AC-19
Access Control for Mobile Devices
Establish configuration requirements, connection requirements, and implementation guidance for organization-controlled mobile devices, to include when such devices are outside of controlled areas; and Authorize the connection of mobile devices to organizational systems.
family AC framework nist-800-53
ATT&CK techniques this control defends against   ✓ covered by Sigma/YARA in our corpus  × = detection gap
× T1020.001 · Traffic Duplication✓ T1040 · Network Sniffing✓ T1070.001 · Clear Windows Event Logs× T1070.002 · Clear Linux or Mac System Logs× T1070.008 · Clear Mailbox Data✓ T1114 · Email Collection✓ T1114.001 · Local Email Collection× T1114.002 · Remote Email Collection✓ T1114.003 · Email Forwarding Rule✓ T1119 · Automated Collection× T1530 · Data from Cloud Storage✓ T1550.001 · Application Access Token✓ T1552 · Unsecured Credentials✓ T1552.004 · Private Keys✓ T1557 · Adversary-in-the-Middle✓ T1557.002 · ARP Cache Poisoning× T1557.004 · Evil Twin✓ T1558 · Steal or Forge Kerberos Tickets× T1558.002 · Silver Ticket✓ T1558.003 · Kerberoasting× T1558.004 · AS-REP Roasting✓ T1565 · Data Manipulation✓ T1565.001 · Stored Data Manipulation✓ T1565.002 · Transmitted Data Manipulation× T1602 · Data from Configuration Repository× T1602.001 · SNMP (MIB Dump)× T1602.002 · Network Device Configuration Dump
AC-19.1
Use of Writable and Portable Storage Devices
family AC framework nist-800-53
AC-19.2
Use of Personally Owned Portable Storage Devices
family AC framework nist-800-53
AC-19.3
Use of Portable Storage Devices with No Identifiable Owner
family AC framework nist-800-53
AC-19.4
Restrictions for Classified Information
Prohibit the use of unclassified mobile devices in facilities containing systems processing, storing, or transmitting classified information unless specifically permitted by the authorizing official; and Enforce the following restrictions on individuals permitted by the authorizing official to use unclassified mobile devices in facilities containing systems processing, storing, or transmitting classified information: Connection of unclassified mobile devices to classified systems is prohibited; Connection of unclassified mobile devices to unclassified systems requires approval from the authorizing official; Use of internal or external modems or wireless interfaces within the unclassified mobile devices is prohibited; and Unclassified mobile devices and the information stored on those devices are subject to random reviews and inspections by {{ insert: param, ac-19.04_odp.01 }} , and if classified information is found, the incident handling policy is followed. Restrict the connection of classified mobile devices to classified systems in accordance with {{ insert: param, ac-19.04_odp.02 }}.
family AC framework nist-800-53
AC-19.5
Full Device or Container-based Encryption
Employ {{ insert: param, ac-19.05_odp.01 }} to protect the confidentiality and integrity of information on {{ insert: param, ac-19.05_odp.02 }}.
family AC framework nist-800-53
Showing 1-6 of 6
Prev 1 Next
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin