NIST SP 800-53 Rev 5 Control Catalog (OSCAL)

nist.800-53r5.oscal@5.1.1

The full NIST security and privacy control catalog in machine-readable OSCAL form.

publishedUS-GOV-PD Verified publisher 2,740 installs

Content is not redistributed by the Marketplace

This package provides mappings, metadata and integration scaffolding only. Obtain the underlying content directly from NIST under its own licence.

Go to source

Overview

Control catalog and baselines published by NIST in OSCAL JSON, mapped into the Cybersecurity Core Ontology as Control and ControlFamily instances. U.S. Government work; attribution to NIST preserved.

What's inside

mappings

oscal-to-cyber-core.ttl

instances

catalogs/800-53r5-catalog.json

documentation

README.md

Artifact types

Instance Dataset· Instance Models Reference Dataset· Data Compliance Mapping· Mappings

Dependencies

nimble.cyber.core>=1.0.0Cybersecurity Core Ontology

Used by

FedRAMP Rev 5 Baselines (OSCAL)

Version history

v5.1.1latestNimble ≥ 1.0.08/29/2026
Current release.
v0.9.0Nimble ≥ 1.0.01/31/2026
Initial public preview.

Manifest

Nimble consumes this machine-readable manifest when resolving and installing the package.

{
  "package": {
    "id": "nist.800-53r5.oscal",
    "name": "NIST SP 800-53 Rev 5 Control Catalog (OSCAL)",
    "version": "5.1.1",
    "status": "published"
  },
  "publisher": {
    "name": "NIST",
    "type": "government"
  },
  "domains": [
    "cybersecurity"
  ],
  "solution_areas": [
    "nist",
    "grc",
    "fedramp"
  ],
  "artifacts": [
    "instance-dataset",
    "reference-dataset",
    "compliance-mapping"
  ],
  "dependencies": [
    {
      "id": "nimble.cyber.core",
      "version": ">=1.0.0",
      "optional": false
    }
  ],
  "compatibility": {
    "nimble": {
      "minimum": "1.0.0",
      "maximum": null
    }
  },
  "license": {
    "type": "US-GOV-PD",
    "name": "U.S. Government Work / Public Domain",
    "url": "https://www.usa.gov/government-works",
    "redistribution": "bundled",
    "attribution_required": true,
    "attribution": "NIST OSCAL, U.S. Government work.",
    "source_authority": "NIST",
    "source_url": "https://pages.nist.gov/OSCAL/"
  },
  "validation": {
    "security": "scanned",
    "validation": "validated"
  },
  "contents": {
    "mappings": [
      "oscal-to-cyber-core.ttl"
    ],
    "instances": [
      "catalogs/800-53r5-catalog.json"
    ],
    "documentation": [
      "README.md"
    ]
  },
  "distribution": {
    "available": false,
    "reason": "bundled"
  }
}