Information SecurityUnited States
NIST SP 800-39
What is NIST SP 800-39?
Managing Information Security Risk. It comprises 8 controls organised across 8 domains, published by NIST, and applies in the United States.
How NIST SP 800-39 maps to other frameworks
All 8 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 8 domains NIST SP 800-39 groups its controls into
Supply Chain, Sharing, Strategy Maintenance
Roles and Governance Integration
Risk Executive Function
Monitor Step (Risk Monitoring)
Respond Step (Risk Responding)
Where NIST SP 800-39 overlaps with the standards you already hold
What NIST SP 800-39 means in your sector
What NIST SP 800-39 means for your job
Questions people ask about NIST SP 800-39
What is NIST SP 800-39?
Managing Information Security Risk.
How many controls does NIST SP 800-39 have?
NIST SP 800-39 contains 8 controls organized across 8 domains.
Where does NIST SP 800-39 apply?
NIST SP 800-39 is applicable in United States. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.
What frameworks does NIST SP 800-39 map to?
NIST SP 800-39 has control-to-control mappings with 93 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.
How do I get started with NIST SP 800-39 compliance?
Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.
Query NIST SP 800-39 programmatically
NIST SP 800-39, its 8 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
NIST SP 800-39 API reference and MCP config →How ready are you for NIST SP 800-39?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .