nist-800-53
NIST SP 800-53 Rev 5 compliance advisor — all 20 control families (AC, AT, AU, CA, CM, CP, IA, IR, MA, MP, PE, PL, PM, PS, PT, RA, SA, SC, SI, SR), Low/Moderate/High baseline selection, FIPS 199/200 system categorization, control tailoring and overlays, privacy controls (PT family), supply chain risk management (SR family), assessment procedures (SP 800-53A), OSCAL, RMF integration (SP 800-37), and mapping to FedRAMP, FISMA, CMMC 2.0, and ISO 27001. Use for any federal system security controls, FISMA compliance, RMF step guidance, control narrative writing, or baseline tailoring question.
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill nist-800-53 --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# NIST SP 800-53 Rev 5 Compliance Skill > **Last verified:** 2026-07-03 You are an expert NIST SP 800-53 compliance advisor with comprehensive knowledge of Special Publication 800-53 Revision 5 — *Security and Privacy Controls for Information Systems and Organizations* — published by NIST in September 2020 and updated December 2020. You guide federal agencies, contractors, cloud service providers, and system owners through control selection, implementation, assessment, and authorization. --- ## How to Respond Match output format to task type: | Task | Output Format | |------|--------------| | Control family deep-dive | Family overview → control-by-control with baseline assignment → implementation guidance | | Baseline selection | FIPS 199 categorization → Low/Moderate/High baseline → tailoring rationale | | Gap assessment | Table: Control ID \| Requirement \| Status \| Finding \| Remediation | | Control narrative | Structured SSP narrative: Implementation Statement + Evidence + Responsible Roles | | RMF step guidance | Step-by-step with required tasks, outputs, and responsible roles | | General question | Precise prose with SP/section citations (e.g., SP 800-53 Rev 5, AC-2, SI-3(10
- How to Respond
- SP 800-53 Rev 5 Framework Overview
- Key Changes in Rev 5 (from Rev 4)
- Step 1 — System Categorization (FIPS 199 / FIPS 200)
- FIPS 199 Impact Levels
- Common Information Types (NIST SP 800-60)
- Step 2 — Baseline Selection (SP 800-53B)
- Step 3 — The 20 Control Families
- Step 4 — Tailoring
- Tailoring Actions
- Organization-Defined Values (ODVs) — Common Examples
- Step 5 — Overlays
- Step 6 — Control Implementation and SSP Narratives
- SSP Narrative Structure
What does the nist-800-53 skill do?
NIST SP 800-53 Rev 5 compliance advisor — all 20 control families (AC, AT, AU, CA, CM, CP, IA, IR, MA, MP, PE, PL, PM, PS, PT, RA, SA, SC, SI, SR), Low/Moderate/High baseline selection, FIPS 199/200 system categorization, control tailoring and overlays, privacy controls (PT family), supply chain risk management (SR family), assessment procedures (SP 800-53A), OSCAL, RMF integration (SP 800-37), and mapping to FedRAMP, FISMA, CMMC 2.0, and ISO 27001. Use for any federal system security controls, FISMA compliance, RMF step guidance, control narrative writing, or baseline tailoring question.
How do I install it?
Run `npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill nist-800-53 --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From Sushegaad/Claude-Skills-Governance-Risk-and-Compliance, a repository with 801 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.