CCI-000268

Ensure the currency of the plan of action and milestones for the system using organization-defined automated mechanisms.

Implementation Guidance

The organization being inspected/assessed will identify and document the automated mechanisms in use to ensure the POA&M is up to date.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documentation of the use of the identified automated mechanisms. The organization being inspected/assessed may be required to demonstrate use of their identified automated mechanisms.

Compelling Evidence

1.) Signed and dated Security Plan of Action and Milestones document

The controls below (if any) were marked by NIST as being related to CCI-000268.