Control Specifications

This section presents an integrated security control profile for frontier AI infrastructure. It selects and tailors 59 controls from NIST SP 800-53 Rev. 5 and adds SR-13 from NIST SP 800-161 Rev. 1 Update 1. Section 2 contains ICD 705-derived facility requirements that do not map cleanly to individual controls in either OSCAL catalog. This release focuses on the long lead time interventions highlighted in Section 1. Future revisions will explicitly map the SL5 profile to DoD Impact Level 6 (IL6) and its reference frameworks, including FedRAMP High and CNSSI 1253.

Controls are organized by control family. For the 59 controls imported from NIST SP 800-53, "NIST Control Text" and "NIST Discussion" are sourced from the official SP 800-53 Rev. 5 OSCAL catalog. For SR-13, those sections are a complete local OSCAL transcription of the control statement and Supplemental C-SCRM Guidance from NIST SP 800-161 Rev. 1 Update 1; two apparent source-document editorial errors are normalized and documented in the catalog metadata. "SL5 Supplemental Guidance" and "Parameter Values" are additions specific to this standard. Where a Parameter Values section is absent or a particular assignment remains open, organizations define the value based on their implementation context.