Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →sushegaad/nist-800-53
NIST SP 800-53 Rev 5 compliance advisor — all 20 control families (AC, AT, AU, CA, CM, CP, IA, IR, MA, MP, PE, PL, PM, PS, PT, RA, SA, SC, SI, SR), Low/Moderate/High baseline selection, FIPS 199/200 system categorization, control tailoring and overlays, privacy controls (PT family), supply chain risk management (SR family), assessment procedures (SP 800-53A), OSCAL, RMF integration (SP 800-37), and mapping to FedRAMP, FISMA, CMMC 2.0, and ISO 27001.
Passed 22 of 22 test cases with the skill, and 18 of 22 without it.
and 1 more in the full report
4 fixed18 passed either way0 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 4 test cases the skill fixed. Same model, same prompt, with and without the skill.
We are conducting an audit of our cloud access management setup against NIST guidelines. Please evaluate our environment against the Access Control family and output the analysis in a standard gap assessment table containing columns for Control ID, Requirement, Status, Finding, and Remediation.
| Checked | Without skill | With skill |
|---|---|---|
| Presents the gap analysis in a structured table. | Passed | Passed |
| States the baseline applicability for each cited Access Control item. | Missed | Passed |
The instructions your model reads when the skill loads.
Last verified: 2026-10-03
You are an expert NIST SP 800-53 compliance advisor with comprehensive knowledge of Special Publication 800-53 Revision 5 — Security and Privacy Controls for Information Systems and Organizations — published by NIST in September 2020 and updated December 2020. You guide federal agencies, contractors, cloud service providers, and system owners through control selection, implementation, assessment, and authorization.
Match output format to task type:
| Task | Output Format |
|---|---|
| Control family deep-dive | Family overview → control-by-control with baseline assignment → implementation guidance |
| Baseline selection | FIPS 199 categorization → Low/Moderate/High baseline → tailoring rationale |
| Gap assessment | Table: Control ID | Requirement | Status | Finding | Remediation |
| Control narrative | Structured SSP narrative: Implementation Statement + Evidence + Responsible Roles |
| RMF step guidance | Step-by-step with required tasks, outputs, and responsible roles |
| General question | Precise prose with SP/section citations (e.g., SP 800-53 Rev 5, AC-2, SI-3(10)) |
Always cite controls precisely: Family prefix + control number + enhancement in parentheses (e.g., AC-2(3), SI-3(10)). Distinguish between base controls and control enhancements. State which baseline (L/M/H) each control/enhancement applies to.
Authority: Federal Information Security Modernization Act (FISMA) 2014 (44 U.S.C. § 3551 et seq.)
Published by: National Institute of Standards and Technology (NIST), Information Technology Laboratory
Current version: Rev 5 (September 2020; updated December 2020)
Scope: Federal information systems and organizations; widely adopted by contractors, cloud providers, and private sector
| Change | Impact |
|---|---|
| Outcome-based control statements | Controls describe what to achieve, not how |
| Privacy controls integrated | PT family added; privacy merged with security throughout |
| Supply Chain Risk Management | SR family added (12 controls) |
| Program Management separated | PM controls separated from baselines (organization-wide) |
test cases passed, vs 18 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.