Skip to main content

πŸ’Ό CA-5 Plan of Action and Milestones (L)(M)(H)

Description​

a. Develop a plan of action and milestones for the system to document the planned remediation actions of the organization to correct weaknesses or deficiencies noted during the assessment of the controls and to reduce or eliminate known vulnerabilities in the system; and

b. Update existing plan of action and milestones [FedRAMP Assignment: at least monthly] based on the findings from control assessments, independent audits or reviews, and continuous monitoring activities.

CA-5 Additional FedRAMP Requirements and Guidance:

Guidance: Reference FedRAMP-POAM-Template.

Requirement: POA&Ms must be provided at least monthly.

Similar​

  • Sections
    • /frameworks/nist-sp-800-53-r5/ca/05
    • /frameworks/fedramp-high-security-controls/ca/05
  • Internal
    • ID: dec-c-ebc87de3

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό FedRAMP High Security Controls β†’ πŸ’Ό CA-5 Plan of Action and Milestones (L)(M)(H)
πŸ’Ό NIST SP 800-53 Revision 5 β†’ πŸ’Ό CA-5 Plan of Action and Milestones1

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags