PM-4—Plan Of Action And Milestones Process
>Control Description
C-SCRM items should be included in the POA&M at all levels. Organizations should develop POA&Ms based on C-SCRM assessment reports. POA&M should be used by organizations to describe planned actions to correct the deficiencies in C-SCRM controls identified during assessment and the continuous monitoring of progress against those actions.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.