NIST SP 800-53 - National Institute of Standards and Technology Special Publication 800-53 Security and Privacy Controls for Information Systems and Organizations

The National Institute of Standards and Technology (NIST) Special Publication 800 series contains over 200 documents designed to help US government agencies and private organizations secure information systems and data. Among them, the 800-53 documents are a foundational suite covering parts of the NIST Risk Management Framework (RMF) focusing on security control selection based on requirements in the Federal Information Security Act (FISMA) and Federal Information Processing Standards (FIPS.) 

The security rules for NIST SP 800-53 cover 20 areas including access control, incident response, business continuity, and disaster recovery.  

Validated and supported compliance automation profiles for are available for the versions listed below. 

SP 800-53 Rev. 5, Security and Privacy Controls for Information Systems and Organizations | CSRC