Skip to content
Cyber Compliance

Cyber Essentials → NIST 800-53 crosswalk

A control-by-control mapping between UK Cyber Essentials and NIST SP 800-53 Rev. 5. 4 mappings.

Cyber EssentialsNIST 800-53RelationshipNotes
CE-1
Firewalls
CM-6
Configuration settings
PartialCurated
Secure configuration & hardening
CE-2
Secure configuration
CM-6
Configuration settings
EquivalentCurated
Secure configuration & hardening
CE-3
User access control
AC-2
Account management
EquivalentCurated
Access control & identity
CE-5
Security update management
RA-5
Vulnerability monitoring and scanning
EquivalentCurated
Vulnerability management

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.