← Back to catalog
CA-5

Plan of Action and Milestones

Assessment, Authorization, and Monitoring (CA)
Baselines
Low · IncludedModerate · IncludedHigh · Included
Description

Develop a plan of action and milestones for the system to document the planned remediation actions of the organization to correct weaknesses or deficiencies noted during the assessment of the controls and to reduce or eliminate known vulnerabilities in the system; and Update existing plan of action and milestones [assignment] based on the findings from control assessments, independent audits or reviews, and continuous monitoring activities.

Discussion

Plans of action and milestones are useful for any type of organization to track planned remedial actions. Plans of action and milestones are required in authorization packages and subject to federal reporting requirements established by OMB.

Implementation guidance

No content available.

CSF 2.0 crosswalk
ID.IM-01Improvements are identified from evaluationsIdentify
ID.IM-02Identify
ID.IM-03Improvements are identified from execution of operational processes, procedures, and activitiesIdentify