Loading...

Subscribe to newsletters
About Us
Industries
Careers
Events
Locations
Services
Professionals
Client Portals
Insights
Contact Us
Legal & Privacy
Pay Invoice

Baker Tilly US, LLP and Baker Tilly Advisory Group, LP and its subsidiary entities provide professional services through an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable laws, regulations and professional standards. Baker Tilly US, LLP is a licensed independent CPA firm that provides attest services to clients. Baker Tilly Advisory Group, LP and its subsidiary entities provide tax and business advisory services to their clients. Baker Tilly Advisory Group, LP and its subsidiary entities are not licensed CPA firms. © 2025 Baker Tilly Advisory Group, LP

Baker Tilly Advisory Group, LP and Baker Tilly US, LLP are independent members of Baker Tilly International. Baker Tilly International Limited is an English company. Baker Tilly International provides no professional services to clients. Each member firm is a separate and independent legal entity and each describes itself as such. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP are not Baker Tilly International’s agent and do not have the authority to bind Baker Tilly International or act on Baker Tilly International’s behalf. None of Baker Tilly International, Baker Tilly Advisory Group, LP, Baker Tilly US, LLP, nor any of the other member firms of Baker Tilly International has any liability for each other’s acts or omissions. The name Baker Tilly and its associated logo is used under license from Baker Tilly International Limited.

Woman at a computer analyzing data

Article

NIST 800-53 Revision 4 to Revision 5 comparison tool

Feb 16, 2023

Subscribe to newsletters

Share

Related sections

  • Government Contractors
  • Risk Advisory
  • Cybersecurity
  • Cybersecurity Risk Assessments

Tags

nist 800-53
cybersecurity controls
nist
cybersecurity
risk advisory

On Sept. 23, 2020, the National Institute for Standards and Technology (NIST) released the final version of its risk management framework (RMF), Special Publication (SP) NIST 800-53 Revision 5. Baker Tilly compared and documented the NIST 800-53 Revision 4 controls to Revision 5, including the NIST 800-53B (baseline) information.

Our comparison tool includes:

  1. NIST 800-53B controls baseline matrix exported from chapter three of the updated NIST 800-54B document on January 5, 2022
  2. Baker Tilly’s high-level observations of the comparison of Revision 4 to Revision 5
  3. NIST 800-53 Revision 5 each baseline table of controls with organizationally defined parameter (ODP) counts
  4. NIST 800-53 Revision 4 to Revision 5 control language comparison with ODP counts
  5. NIST 800-53 Revision 4 to Revision 5 control summary comparison, with summary change counts for controls eliminated, incorporated into other controls and the number of new controls identified. 
  6. Program Management controls with ODP counts and data request
  7. PII Processing-Transparency controls with ODP counts and data request

Use this tool as you prepare for conversion to NIST 800-53 Revision 5. 

Download the complimentary tool

For more information or to learn how Baker Tilly specialists can help, contact our team.

Contact our team

Related sections

  • Government Contractors
  • Risk Advisory
  • Cybersecurity
  • Cybersecurity Risk Assessments

Article Tags

nist 800-53cybersecurity controlsnistcybersecurityrisk advisory
Cyber risk management framework in a virtual environment

Next up

NIST releases SP 800-53 Revision 5 and SP 800-53B

Go to Article