Needed for all government organizations now who are subject to FedRAMP and Risk Management Framework (RMF). This is required for everyone in federal government, and us internally since we have a FedRAMP High authorized product.

NIST 800-53 rev 4 has been outdated a year ago