US
NIST 800-53
The US federal catalogue of security and privacy controls, revision 5.
Who it applies to
US federal systems and the contractors that run them.
What it can cost
Lost deals, failed audits and penalties set by your regulator or contract.
- Revision
- Rev. 5
- Baselines
- Low, moderate and high
- Used by
- US federal systems, FedRAMP
What NIST 800-53 asks of you
- 01Access control
- 02Audit and accountability
- 03Configuration management
- 04Incident response
- 05System and communications protection
- 06Supply chain risk management
How orta covers NIST 800-53
300 NIST 800-53 requirements, mapped
Each requirement is linked to orta's common controls, so evidence you already have counts here too.
Checked from your own systems
Host, Kubernetes and AWS checks run on a schedule and mark controls passing or failing, every day.
Ready for your auditor
Give them a read-only login to see controls, evidence and documents in one place.
What feeds it
- Continuous complianceA passing check counts in every framework that needs it.
- Cloud postureYour cloud accounts, checked. Your data, left where it is.
