What are the three types of security controls NIST?
System-Specific Controls: System-specific controls are security controls that are designed to provide a security capability for a particular information system. Examples of system-specific controls include access control, authentication, encryption, and logging.
Common Controls: Common controls are security controls that provide a security capability for multiple information systems. Examples of common controls include risk assessment, data protection, and incident response.
Hybrid Controls: Hybrid controls are security controls that have both system-specific and common characteristics. Examples of hybrid controls include firewalls, intrusion detection systems, and virtual private networks.
Useful References
Official Guides
- What is NIST SP 800-53?
- What is the goal of NIST SP 800-53?
- Who must comply with NIST SP 800-53?
- What are the benefits of NIST SP 800-53?
- What data does NIST SP 800-53 protect?
Blogs & Thought Leadership
- NIST SP 800-53 vs ISO 27001
- NIST SP 800-53 vs Right Fit For Risk (RFFR)
- NIST SP 800-53 vs PCI-DSS
- NIST SP 800-53 vs NIST Cybersecurity Framework (CSF)
- NIST SP 800-53 vs ASD IRAP
Answers
Hear from world-renowned GRC analyst Michael Rasmussen about 6clicks and why it's breakthrough approach is winning
Get up and running with 6clicks in just a matter of hours.

'Push-down' standards to teams
'Push' your standard templates, controls, and risk libraries to your teams.

'Roll up' analytics for reporting
Roll-up analytics for consolidated reporting across your teams.
Our customers have spoken.
They genuinely love 6clicks.
"The best cyber GRC platform for businesses and advisors."
David Simpson | CyberCX
"We chose 6clicks not only for our clients, but also our internal use”
Chief Risk Officer | Publically Listed
"We use Hub & Spoke globally for our cyber compliance program. Love it."
Head of Compliance | Fortune 500






"The 6clicks solution simplifies and strengthens risk, compliance, and control processes across entities and can grow and adapt as the organization changes and evolves."
Michael Rasmussen
GRC 20/20 Research LLC
6clicks is powered by AI and includes all the content you need.
Our unique 6clicks Hub & Spoke architecture makes it simple to use and deploy.
.png)

.png)

.png)
.png)