NIST 800-53
Comprehensive catalog of security and privacy controls published by the National Institute of Standards and Technology.
What is NIST 800-53?
NIST Special Publication 800-53 provides a catalog of security and privacy controls for federal information systems. It organizes controls into families (Access Control, Audit and Accountability, Identification and Authentication, etc.) with control enhancements for higher security needs. Revision 5 added privacy controls and updated the catalog for modern threats.
In Microsoft 365
NIST 800-53 controls map to Azure AD and Microsoft 365 security features. The IA (Identification and Authentication) family maps to MFA and authentication policies, AC (Access Control) to Conditional Access, and AU (Audit and Accountability) to logging capabilities. FedRAMP uses NIST 800-53 as its control baseline.
Examples
- 1IA-2(1) Multi-Factor Authentication
- 2AC-2(7) Role-Based Schemes
- 3AU-2 Audit Events
Related TrueConfig Controls
These controls help implement and verify nist 800-53 in your Microsoft 365 environment.