Skip to main content

💼 PM-4 Plan of Action and Milestones Process

  • Contextual name: 💼 PM-4 Plan of Action and Milestones Process
  • ID: /frameworks/nist-sp-800-53-r5/pm/04
  • Located in: 💼 PM Program Management

Description​

a. Implement a process to ensure that plans of action and milestones for the information security, privacy, and supply chain risk management programs and associated organizational systems:

  1. Are developed and maintained;
  2. Document the remedial information security, privacy, and supply chain risk management actions to adequately respond to risk to organizational operations and assets, individuals, other organizations, and the Nation; and
  3. Are reported in accordance with established reporting requirements. b. Review plans of action and milestones for consistency with the organizational risk management strategy and organization-wide priorities for risk response actions.

Similar​

  • Internal
    • ID: dec-c-3b4c1405

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 NIST CSF v2.0 → 💼 GV.OV-03: Organizational cybersecurity risk management performance is evaluated and reviewed for adjustments needed
💼 NIST CSF v2.0 → 💼 ID.IM-03: Improvements are identified from execution of operational processes, procedures, and activities34

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags