SP 800-53 r4 control families count statement?

• A. There are 18 families in total
• B. There are 9 families
• C. There are 4 families
• D. There are 12 families

Answer: (A)

Security controls in SP 800-53 Revision 4 are organized into groups called control families, and there are eighteen of them. This total includes a Program Management family, which brings the count to 18. So the published structure of Rev 4 lists eighteen families, not four, nine, or twelve. Each family groups related controls—for example, Access Control, Audit and Accountability, Awareness and Training, Security Assessment and Authorization, Configuration Management, Contingency Planning, Identification and Authentication, Incident Response, Maintenance, Media Protection, Physical and Environmental Protection, Planning, Personnel Security, Risk Assessment, System and Communications Protection, System and Information Integrity, Privacy, and Program Management.