Framework

NIST SP 800-53 Rev 5: what it anchors in a questionnaire

The catalogue a government customer's questionnaire is built from.

The requirement lines are our statement of each clause, read against the copy we hold and cited to it. Ticked by default for government agency customers.

Families anchored here

10 families, 10 clauses cited

Family	Clause
Background checks	PS-3
Multi-factor authentication	IA-2
Access provisioning and review	AC-2
Encryption at rest	SC-28
Logging and monitoring	AU-6
Vulnerability and patch management	RA-5
Incident response plan	IR-8
Business continuity plan	CP-2
Backup and disaster recovery	CP-9
Assessing your own suppliers	SR-6

Every SP 800-53 clause the register cites, with its text and evidence