Clause lookup

3,045 articles, sections and controls across 12 laws and frameworks · index updated 2026-10-10

Type a clause number or a topic. You get the clause’s heading and a link to the official text. Free, no sign-in.

Showing the first 25 of 29 matches.

NIST SP 800-53 · AC-2
Account Management
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-2(1)
Automated System Account Management
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-2(2)
Automated Temporary and Emergency Account Management
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-2(3)
Disable Accounts
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-2(4)
Automated Audit Actions
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-2(5)
Inactivity Logout
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-2(6)
Dynamic Privilege Management
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-2(7)
Privileged User Accounts
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-2(8)
Dynamic Account Management
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-2(9)
Restrictions on Use of Shared and Group Accounts
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-2(10)
Shared and Group Account Credential Change
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-2(11)
Usage Conditions
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-2(12)
Account Monitoring for Atypical Usage
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-2(13)
Disable Accounts for High-risk Individuals
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-20
Use of External Systems
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-20(1)
Limits on Authorized Use
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-20(2)
Portable Storage Devices — Restricted Use
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-20(3)
Non-organizationally Owned Systems — Restricted Use
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-20(4)
Network Accessible Storage Devices — Prohibited Use
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-20(5)
Portable Storage Devices — Prohibited Use
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-21
Information Sharing
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-21(1)
Automated Decision Support
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-21(2)
Information Search and Retrieval
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-22
Publicly Accessible Content
Access Control
Official text (NIST) →
NIST SP 800-53 · AC-23
Data Mining Protection
Access Control
Official text (NIST) →

Found the clause? Compliance Colleague checks your information security policy, a procedure or a network diagram against it, and cites the clause behind every finding. PCI DSS, the EU AI Act, ISO 42001 and 30+ more. Try it free, no card required →

What’s covered

EU AI Act, Regulation (EU) 2024/1689: 126 entries, linked to EUR-Lex
GDPR, Regulation (EU) 2016/679: 99 entries, linked to EUR-Lex
NIS2, Directive (EU) 2022/2555: 49 entries, linked to EUR-Lex
DORA, Regulation (EU) 2022/2554: 64 entries, linked to EUR-Lex
EU Cyber Resilience Act, Regulation (EU) 2024/2847: 79 entries, linked to EUR-Lex
HIPAA, 45 CFR Parts 160 and 164: 102 entries, linked to eCFR
CCPA, Cal. Civil Code § 1798.100 ff. and 11 CCR § 7000 ff.: 81 entries, linked to California Privacy Protection Agency
CMMC, 32 CFR Part 170: 24 entries, linked to eCFR
NIST SP 800-53, Rev. 5 (release 5.2.0): 1,196 entries, linked to NIST
NIST CSF, Cybersecurity Framework 2.0: 40 entries, linked to NIST
EAR, 15 CFR Parts 730–774: 968 entries, linked to eCFR
ITAR, 22 CFR Parts 120–130: 217 entries, linked to eCFR

PCI DSS, ISO/IEC 27001, ISO/IEC 42001 and SOC 2 are not here: their publishers hold the copyright in the text and the headings. We link to the publisher instead.

How Compliance Colleague made this

Compliance Colleague ships with the official text of each law and framework above, taken from the publisher (EUR-Lex, the eCFR, NIST and the California Privacy Protection Agency). That text is what its answers cite.
For this page, a script reads those bundled texts and keeps only three things per entry: the number, the heading and a link to the official source. The clause text itself is left out.
Recitals and any heading that is really a cut-off sentence are dropped, and copyrighted standards are excluded. The index is rebuilt whenever a bundled text is updated; the date is at the top of the page.

A research aid, not legal advice. Headings are reproduced from the official texts; the official publication is authoritative. EU links open the act on EUR-Lex; find the article there by its number.