Governmental logo

NIST 800-53

The National Institute of Standards and Technology (NIST), within the U.S. Department of Commerce, creates standards and guidelines pertaining to information security. NIST developed Special Publication 800-53 (NIST SP 800-53) to build on statutory responsibilities laid out in the Federal Information Security Management Act (FISMA), Public Law (P.L.) 107-347, which is a federal law that requires U.S. government agencies to create, review, and report on agency-wide practices that prioritize information security. NIST 800-53 mandates specific security and privacy controls required for federal government and critical infrastructure.

Through an independent, third-party assessment, Google Cloud has received an attestation letter confirming that a subset of our Google Cloud Platform and G Suite services are operating in compliance with NIST 800-53 controls.

Google Cloud services that are in scope for NIST 800-53

Admin SDK
Admin Settings API
Apps Email Audit API
Calendar Resource API
Directory API (replaced Provisioning API)
Domain Shared Contacts API
Email Settings API
Enterprise License Manager API
Groups Migration API
Groups Settings
Reports API
Reseller API
Chrome Sync (for G Suite for Education domains only)
Directory Sync
Docs APIs
Apps Activity API
Calendar API
Contacts API
Drive REST API (replaced Documents List API)
Gmail REST API (replaced Email Migration API)
Sheets API
Sites API
Tasks API
Google Tasks
Groups for Business
Hangouts Classic
Sites Classic

Relevant products & services