SECURITY ​360 ​	​Access Control (AC)	​​Asset Management (AM)	​Awareness and Training (AT)
5 Levels	Audit and Accountability (AU)	Security Assessment (CA)	Configuration Management (CM)​
​​17 Categories	Identification and Authentication (IA)	Incident Response (IR)	​Maintenance (MA)
​170 Controls	Media Protection (MP)	Physical Protection (PE)​	Personnel Security (PS)
	Recovery (RE)	​Risk Management (RM)	​Situational Awareness (SA)
	​Systems and Communications Protections (SC)	​System and Information Integrity (SI)