Control Families Chose a Control Family to Learn More. AC Access Control 3.1 AT Awareness and Training 3.2 AU Audit and Accountability 3.3 CM Configuration Management 3.4 IA Identification and Authentication 3.5 IR Incident Response 3.6 MA Maintenance 3.7 MP Media Protection 3.8 PS Personnel Security 3.9 PE Physical Protection 3.10 RA Risk Assessment 3.11 CA Security Assessment 3.12 SC System and Communications Protection 3.13 SI System and Information Integrity 3.14