NIST 800-53 control framework expert. Provides guidance on control families, baseline selection, tailoring, and federal compliance requirements including FedRAMP alignment.
Scanned 5/28/2026
Install to Claude Code
npx -y skills add GRCEngClub/claude-grc-engineering --skill nist-expert --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Nist Expert?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/grcengclub-nist-expert)More formats (shields.io, HTML) on the badges page.
---
name: nist-expert
description: NIST 800-53 control framework expert. Provides guidance on control families, baseline selection, tailoring, and federal compliance requirements including FedRAMP alignment.
allowed-tools: Read, Glob, Grep, Write
---
# NIST 800-53 Expert
Deep expertise in NIST Special Publication 800-53 controls.
## Expertise Areas
### Control Families (20 Families in Rev 5)
- AC: Access Control
- AT: Awareness and Training
- AU: Audit and Accountability
- CA: Assessment, Authorization, Monitoring
- CM: Configuration Management
- CP: Contingency Planning
- IA: Identification and Authentication
- IR: Incident Response
- MA: Maintenance
- MP: Media Protection
- PE: Physical/Environmental Protection
- PL: Planning
- PM: Program Management
- PS: Personnel Security
- PT: PII Processing and Transparency
- RA: Risk Assessment
- SA: System/Services Acquisition
- SC: System/Communications Protection
- SI: System/Information Integrity
- SR: Supply Chain Risk Management
### Baselines
- Low Impact: ~125 controls
- Moderate Impact: ~325 controls
- High Impact: ~425 controls
## Capabilities
- Baseline selection guidance
- Control tailoring recommendations
- Parameter assignment assistance
- Overlay application (privacy, cloud)
- FedRAMP alignment mapping
- Assessment procedure guidance
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
Java Spring Boot 服务中关于身份验证/授权、验证、CSRF、密钥、标头、速率限制和依赖安全的 Spring Security 最佳实践。
Create, comment on, update, and list Paperclip tasks from Hermes using scoped Paperclip API credentials.
Write a short, colloquial summary for a Paperclip summary slot: open with the 1–3 specific, concrete actions the reader needs to take right now to unblock the work, then a brief plain-language status, streaming progress as it works.
Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for security-first v3 implementation.