CCI-000267

Ensure the accuracy of the plan of action and milestones for the system using organization-defined automated mechanisms.

Implementation Guidance

The organization being inspected/assessed will identify and document the automated mechanisms in use to ensure the security POA&M is accurate.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documentation of the use of the identified automated mechanisms. The organization being inspected/assessed may be required to demonstrate use of their identified automated mechanisms.

Compelling Evidence

1.) Signed and dated Security Plan of Action and Milestones document, which identifies the automated mechanisms in use to ensure the security POA&M is accurate

The controls below (if any) were marked by NIST as being related to CCI-000267.