{ "profile": { "uuid": "623e85c3-e8ec-40ab-b0e7-37c2b15eeca7", "metadata": { "title": "Electronic (OSCAL) Version of NIST Special Publication 800-53 Revision 5.2.0 PRIVACY BASELINE", "last-modified": "2025-08-26T15:10:16.00000-00:00", "version": "5.2.0", "oscal-version": "1.1.3", "roles": [ { "id": "creator", "title": "OSCAL Version Creator" }, { "id": "contact-creator", "title": "Contact" }, { "id": "publisher", "title": "SP 800-53 Publisher" }, { "id": "contact-publisher", "title": "Contact" } ], "parties": [ { "uuid": "41a93829-b76b-43ec-b9e7-250553511549", "type": "organization", "name": "Joint Task Force, Interagency Working Group", "email-addresses": [ "sec-cert@nist.gov" ], "addresses": [ { "addr-lines": [ "National Institute of Standards and Technology", "Attn: Computer Security Division", "Information Technology Laboratory", "100 Bureau Drive (Mail Stop 8930)" ], "city": "Gaithersburg", "state": "MD", "postal-code": "20899-8930" } ] }, { "uuid": "98c78f9b-5d50-4b01-b47f-d16801e8d0ab", "type": "organization", "name": "OSCAL Program", "short-name": "NIST", "email-addresses": [ "oscal@nist.gov" ], "addresses": [ { "addr-lines": [ "National Institute of Standards and Technology", "Attn: Computer Security Division", "Information Technology Laboratory", "100 Bureau Drive (Mail Stop 2000)" ], "city": "Gaithersburg", "state": "MD", "postal-code": "20899-2000" } ] } ], "responsible-parties": [ { "role-id": "publisher", "party-uuids": [ "41a93829-b76b-43ec-b9e7-250553511549" ] }, { "role-id": "contact-publisher", "party-uuids": [ "41a93829-b76b-43ec-b9e7-250553511549" ] }, { "role-id": "creator", "party-uuids": [ "98c78f9b-5d50-4b01-b47f-d16801e8d0ab" ] }, { "role-id": "contact-creator", "party-uuids": [ "98c78f9b-5d50-4b01-b47f-d16801e8d0ab" ] } ] }, "imports": [ { "href": "#84cbf061-eb87-4ec1-8112-1f529232e907", "include-controls": [ { "with-ids": [ "ac-1", "ac-3.14", "at-1", "at-2", "at-3", "at-3.5", "at-4", "au-1", "au-2", "au-3.3", "au-11", "ca-1", "ca-2", "ca-5", "ca-6", "ca-7", "ca-7.4", "cm-1", "cm-4", "ir-1", "ir-2", "ir-2.3", "ir-3", "ir-4", "ir-5", "ir-6", "ir-7", "ir-8", "ir-8.1", "mp-1", "mp-6", "pe-8.3", "pl-1", "pl-2", "pl-4", "pl-4.1", "pl-8", "pl-9", "pm-3", "pm-4", "pm-5.1", "pm-6", "pm-7", "pm-8", "pm-9", "pm-10", "pm-11", "pm-13", "pm-14", "pm-17", "pm-18", "pm-19", "pm-20", "pm-20.1", "pm-21", "pm-22", "pm-24", "pm-25", "pm-26", "pm-27", "pm-28", "pm-31", "ps-6", "pt-1", "pt-2", "pt-3", "pt-4", "pt-5", "pt-5.2", "pt-6", "pt-6.1", "pt-6.2", "pt-7", "pt-7.1", "pt-7.2", "pt-8", "ra-1", "ra-3", "ra-7", "ra-8", "sa-1", "sa-2", "sa-3", "sa-4", "sa-8.33", "sa-9", "sa-11", "sc-7.24", "si-1", "si-12", "si-12.1", "si-12.2", "si-12.3", "si-18", "si-18.4", "si-19" ] } ] } ], "merge": { "as-is": true }, "back-matter": { "resources": [ { "uuid": "84cbf061-eb87-4ec1-8112-1f529232e907", "description": "NIST Special Publication 800-53 Revision 5: Security and Privacy Controls for Federal Information Systems and Organizations", "rlinks": [ { "href": "../../../../nist.gov/SP800-53/rev5/xml/NIST_SP-800-53_rev5_catalog.xml", "media-type": "application/oscal.catalog+xml" }, { "href": "../../../../nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json", "media-type": "application/oscal.catalog+json" }, { "href": "../../../../nist.gov/SP800-53/rev5/yaml/NIST_SP-800-53_rev5_catalog.yaml", "media-type": "application/oscal.catalog+yaml" } ] } ] } } }