skills.rest
yogiex
yogiexCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

nist-800-53

Guides selection, implementation, and assessment of NIST SP 800-53 Rev 5 security and privacy controls.

Updated Jun 5, 2026
Search Tags:#compliance#security controls#privacy controls#fedramp#nist 800-53#risk management framework#fips 199
One-click install
npx skills add https://github.com/yogiex/opencode-cyber-security-skills --skill nist-800-53-yogiex
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: nist-800-53
Source: https://github.com/yogiex/opencode-cyber-security-skills/tree/main/skills/nist-800-53
Command: npx skills add https://github.com/yogiex/opencode-cyber-security-skills --skill nist-800-53-yogiex

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Navigating the NIST SP 800-53 Rev 5 catalog of 20 control families, baselines, and enhancements is complex, and teams often struggle to select, tailor, and assess the right controls for their system's FIPS 199 impact level. ## Core Features & Use Cases - Control Selection & Baselines: Explains Low, Moderate, and High baselines from SP 800-53B, tailoring rules, overlays, and parameterization. - RMF Alignment: Walks through the six-step Risk Management Framework process from categorization to continuous monitoring, including SP 800-53A assessment methods. - Privacy Integration: Covers the PT control family and security-privacy collaboration for systems processing PII. - Use Case: A security engineer preparing a FedRAMP authorization uses this Skill to determine the Moderate baseline controls, document tailoring decisions, and draft the System Security and Privacy Plan. ## Quick Start Ask the agent to help select and tailor NIST 800-53 controls for a Moderate impact system that processes PII.

Frequently Asked Questions about nist-800-53

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I select NIST 800-53 controls for my system?▼

First categorize your system per FIPS 199 to determine the impact level for confidentiality, integrity, and availability. Then select the matching Low, Moderate, or High baseline from SP 800-53B and apply tailoring such as scoping, parameterization, and compensating controls.

What is the difference between NIST 800-53 Low, Moderate, and High baselines?▼

The baselines scale with impact level: Low includes roughly 120 controls, Moderate around 250, and High over 350. Higher baselines add more control enhancements, such as automated account management and inactive account disabling in the AC family.

Does NIST 800-53 Rev 5 cover privacy controls?▼

Yes, Rev 5 integrates privacy directly into the main catalog rather than a separate appendix. The PT family covers PII processing and transparency, including authority, purpose specification, consent, notice, and minimization.

How does NIST 800-53 relate to FedRAMP and ISO 27001?▼

FedRAMP builds on the Moderate baseline with additional cloud-specific controls. NIST also publishes a crosswalk mapping ISO/IEC 27001:2022 Annex A controls to 800-53, and 800-53 controls map to NIST CSF functions.

When should I not use the NIST 800-53 control catalog?▼

Avoid it when you need tool-specific technical configuration guidance, a full risk management framework process, incident response procedures, or threat modeling. Those scenarios are better served by dedicated documentation or specialized skills.

Related Skills

Explore More Legal & Compliance Skills→
tractorjuicetractorjuice

arckit-us-nist-800-53

Generate baseline-specific NIST SP 800-53 control matrices from FIPS 199 categorization.

Community
Advanced
rifh2000rifh2000

fedramp-rev5-expert

Guide FedRAMP Rev 5 authorization with documentation and NIST SP 800-53 control mappings.

Community
Advanced
vecearvecear

threat-model-generator

Generate STRIDE-based threat models with threats, mitigations, and residual risk.

Community
Advanced
abnejLLCabnejLLC

iso-expert

Analyze ISO 27001 standards and Annex A controls for ISMS implementation.

Community
Intermediate