Skip to main content

πŸ’Ό PM-4 Plan of Action and Milestones Process

  • Contextual name: πŸ’Ό PM-4 Plan of Action and Milestones Process
  • ID: /frameworks/nist-sp-800-53-r5/pm/04
  • Located in: πŸ’Ό PM Program Management

Description​

a. Implement a process to ensure that plans of action and milestones for the information security, privacy, and supply chain risk management programs and associated organizational systems:

  1. Are developed and maintained;
  2. Document the remedial information security, privacy, and supply chain risk management actions to adequately respond to risk to organizational operations and assets, individuals, other organizations, and the Nation; and
  3. Are reported in accordance with established reporting requirements. b. Review plans of action and milestones for consistency with the organizational risk management strategy and organization-wide priorities for risk response actions.

Similar​

  • Internal
    • ID: dec-c-3b4c1405

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό NIST CSF v2.0 β†’ πŸ’Ό GV.OV-03: Organizational cybersecurity risk management performance is evaluated and reviewed for adjustments needed
πŸ’Ό NIST CSF v2.0 β†’ πŸ’Ό ID.IM-03: Improvements are identified from execution of operational processes, procedures, and activities24

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags