# NIST 800-53 Program Management (PM)

Browse NIST 800-53 Program Management (PM) controls — govern the organization-wide security and privacy program — with implementation guidance and cross-framework mappings.

* [PM-1: Information Security Program Plan](/compliance/nist-sp-800-53/pm/pm-1)
* [PM-2: Information Security Program Leadership Role](/compliance/nist-sp-800-53/pm/pm-2)
* [PM-3: Information Security and Privacy Resources](/compliance/nist-sp-800-53/pm/pm-3)
* [PM-4: Plan of Action and Milestones Process](/compliance/nist-sp-800-53/pm/pm-4)
* [PM-5: System Inventory](/compliance/nist-sp-800-53/pm/pm-5)
* [PM-6: Measures of Performance](/compliance/nist-sp-800-53/pm/pm-6)
* [PM-7: Enterprise Architecture](/compliance/nist-sp-800-53/pm/pm-7)
* [PM-8: Critical Infrastructure Plan](/compliance/nist-sp-800-53/pm/pm-8)
* [PM-9: Risk Management Strategy](/compliance/nist-sp-800-53/pm/pm-9)
* [PM-10: Authorization Process](/compliance/nist-sp-800-53/pm/pm-10)
* [PM-11: Mission and Business Process Definition](/compliance/nist-sp-800-53/pm/pm-11)
* [PM-12: Insider Threat Program](/compliance/nist-sp-800-53/pm/pm-12)
* [PM-13: Security and Privacy Workforce](/compliance/nist-sp-800-53/pm/pm-13)
* [PM-14: Testing, Training, and Monitoring](/compliance/nist-sp-800-53/pm/pm-14)
* [PM-15: Security and Privacy Groups and Associations](/compliance/nist-sp-800-53/pm/pm-15)
* [PM-16: Threat Awareness Program](/compliance/nist-sp-800-53/pm/pm-16)
* [PM-17: Protecting Controlled Unclassified Information on External Systems](/compliance/nist-sp-800-53/pm/pm-17)
* [PM-18: Privacy Program Plan](/compliance/nist-sp-800-53/pm/pm-18)
* [PM-19: Privacy Program Leadership Role](/compliance/nist-sp-800-53/pm/pm-19)
* [PM-20: Dissemination of Privacy Program Information](/compliance/nist-sp-800-53/pm/pm-20)
* [PM-21: Accounting of Disclosures](/compliance/nist-sp-800-53/pm/pm-21)
* [PM-22: Personally Identifiable Information Quality Management](/compliance/nist-sp-800-53/pm/pm-22)
* [PM-23: Data Governance Body](/compliance/nist-sp-800-53/pm/pm-23)
* [PM-24: Data Integrity Board](/compliance/nist-sp-800-53/pm/pm-24)
* [PM-25: Minimization of Personally Identifiable Information Used in Testing, Training, and Research](/compliance/nist-sp-800-53/pm/pm-25)
* [PM-26: Complaint Management](/compliance/nist-sp-800-53/pm/pm-26)
* [PM-27: Privacy Reporting](/compliance/nist-sp-800-53/pm/pm-27)
* [PM-28: Risk Framing](/compliance/nist-sp-800-53/pm/pm-28)
* [PM-29: Risk Management Program Leadership Roles](/compliance/nist-sp-800-53/pm/pm-29)
* [PM-30: Supply Chain Risk Management Strategy](/compliance/nist-sp-800-53/pm/pm-30)
* [PM-31: Continuous Monitoring Strategy](/compliance/nist-sp-800-53/pm/pm-31)
* [PM-32: Purposing](/compliance/nist-sp-800-53/pm/pm-32)

Experience superior visibility and a simpler approach to cyber risk management

[Get a demo](https://www.upguard.com/contact-sales)

[Free trial](https://www.upguard.com/demo)