SC-13 · System and Communications Protection · NIST SP 800-53 Rev5
SC-13: Approved cryptography protects the confidentiality and integrity of data
How NIST SP 800-53 Rev5 control SC-13 (System and Communications Protection) maps to FedRAMP 20x Key Security Indicators, and the evidence scm.cc collects for it.
Educational resource only. scm.cc is not a FedRAMP Recognized Independent Assessor (3PAO) and is not FedRAMP-authorized; it grants no authorization, certification, or assessment outcome. FedRAMP.gov is the authoritative source. This is not legal advice.
What SC-13 requires
Approved cryptography protects the confidentiality and integrity of data.
Paraphrased from NIST SP 800-53 Rev. 5 — Security and Privacy Controls for Information Systems and Organizations (checked 2026-10-31). scm.cc does not reproduce the official control text; read the NIST catalog for the normative wording.
FedRAMP 20x KSIs that cover SC-13
These Key Security Indicators officially cite SC-13 as a related SP 800-53 control, so satisfying them is how a 20x package demonstrates this control.
KSI-SVC-SIN — Securing Information
Service Configuration · official related-control citation: sc-13
KSI-SVC-VRI — Validating Resource Integrity
Service Configuration · official related-control citation: sc-13
Evidence scm.cc collects for SC-13
scm.cc tracks this as manual evidence you attach; it validates and replays exactly what you provide (no automated claim beyond that).
Related System and Communications Protection controls
- SC-7 — Boundary protection monitors and controls communications at the system perimeter