BY NEURABYTE
FRAMEWORKS/GOVERNMENT/NIST SP 800-53
800-53
GOVERNMENT · NIST

NIST SP 800-53

The control catalog behind FedRAMP and federal systems.

Special Publication 800-53 Revision 5 is a catalog of over 1,000 security and privacy controls organized in 20 families. Federal systems select a baseline (low, moderate, high) under FISMA. It is also the reference behind FedRAMP, CMMC, and many state and commercial programs.

AT A GLANCE
ISSUERNIST REGIONUS federal, widely referenced CATEGORYGovernment CROSSWALKVersioned mapping onto the 15-control registry
EVIDENCE, NOT CERTIFICATION
01. WHO IT APPLIES TO

Is this one yours?

01Federal agencies and contractors operating federal information systems
02Cloud providers pursuing FedRAMP
03Commercial organizations that want a rigorous, granular control reference
02. KEY REQUIREMENTS

The parts of NIST SP 800-53 that touch what agents do.

AC-3 Access enforcement
The system enforces approved authorizations for logical access.
AC-5 Separation of duties
Duties are separated and access authorizations support that separation.
AU-2, AU-9 Audit events and protection
Events are logged and audit information is protected from unauthorized modification.
AC-6 Least privilege
Only authorized access necessary to accomplish tasks is permitted.
03. HOW LORE MAPS TO IT

Enforcement controls, read against the requirement.

These controls exist because the platform needs them to run safely. The crosswalk reads their signed evidence against NIST SP 800-53. Where there is no evidence, the report says gap.

LORE CONTROL NIST SP 800-53 REFERENCE
Blocking authorization gateAC-3, AC-6
Maker–checker approvalAC-5, CM-3
Signed, hash-chained receiptsAU-2, AU-9, AU-10 non-repudiation
Context disclosure recordAC-4 information flow, SI-12
Illustrative references. The shipped crosswalk carries exact clause citations, its version, and the review date.
04. OUT OF SCOPE

What Lore will not claim.

Physical (PE), personnel (PS), and planning (PL) families are organizational.
Baseline selection and the system security plan are yours.
05. QUESTIONS
Which revision?
Rev. 5, including the privacy controls integrated in that revision.
Does this cover AU-10 non-repudiation?
Ed25519 signatures on receipts are designed for it. Key custody determines how strong the claim is; the enterprise tier supports HSM-backed keys.
Is this the FedRAMP crosswalk?
FedRAMP builds on it. The 800-53 crosswalk ships first and FedRAMP follows.
← PREVIOUSSOX ITGC ALL FRAMEWORKS NEXT →FedRAMP
NIST SP 800-53 · EARLY ACCESSEVIDENCE COLLECTED ONCE

Start building the record your auditor will read.

Every receipt Lore signs today is evidence for NIST SP 800-53 tomorrow. Turn the crosswalk on when you are ready; nothing needs re-collecting.

Also from Neurabyte: Cupel
Lore's core mechanisms are patent-pending. Product names are trademarks of their respective owners; listing an integration doesn't imply a partnership.
© 2026 NEURABYTE INC.