Technology
To download the POAM in this podcast go to convocourses.com
A Plan of Action and Milestones (POA&M) is a document that identifies tasks needing to be accomplished to remediate or mitigate risks to a system. It is a requirement under NIST 800-53, which is a guideline for federal agencies and contractors to follow when managing their information security programs. A NIST 800 POA&M, therefore, is a POA&M that is developed in compliance with NIST 800-53 standards.
The NIST 800 POA&M details the resources required to accomplish the elements of the plan, any milestones for meeting the tasks, and scheduled milestone completion dates [1]. The document is continuously updated as progress is made towards remediation, making it a living, dynamic document [2]. The POA&M is a critical tool for anyone responsible for tracking and reporting compliance issues or risks identified for a system [3].
NIST 800-53r5 recommends the use of security automation software to support the POA&M process. This software can help with tracking POA&M items and milestones, and integrate with ticketing systems for streamlined management of remediation activities [2].
More Episodes
2023-08-07
59
2023-08-02
41
2023-07-12
32
2023-07-09
26
2023-06-28
24
2023-06-19
36
2023-06-16
34
2023-06-12
41
2023-06-05
33
2023-05-26
41
2023-05-24
20
2023-05-22
67
2023-05-19
21
Get this podcast on your
phone, FREE
