How many controls does NIST SP 800-137 have?

NIST SP 800-137 contains 31 controls organized across 6 domains.

Where does NIST SP 800-137 apply?

NIST SP 800-137 is applicable in United States. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.

What frameworks does NIST SP 800-137 map to?

NIST SP 800-137 has control-to-control mappings with 529 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.

How do I get started with NIST SP 800-137 compliance?

Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.

NIST SP 800-137

Information Security Continuous Monitoring.

Domains

NIST SP 800-137: Communications Security

NIST SP 800-137: Operations Security

NIST SP 800-137: Asset Management

NIST SP 800-137: Cryptography

NIST SP 800-137: Information Security Policies

Frequently Asked Questions

Map NIST SP 800-137 to any other framework

Use our AI-powered compliance platform to find control overlaps, gaps, and build remediation plans in seconds.

Try Free on Compliance Platform