Question: how many control families in rmf?
Answer: The controls are broken into 3 classes based on impact – low, moderate, and high – and split into 18 different families. The NIST SP 800-53 security control families are: Access Control. Audit and Accountability.