Which of the following tasks are identified by the Plan of Action and Milestones document? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is B. The resources needed to accomplish the elements of the plan C. Any milestones that are needed in meeting the tasks D. The tasks that are required to be accomplished E. Scheduled completion dates for the milestones. A Plan of Action and Milestones (POA&M) is a key document in the NIST Risk Management Framework used to track the remediation of security weaknesses. It specifically identifies: (B) the resources required to accomplish each element of the plan; (C) the milestones needed to meet…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Options

AThe plans that need to be implemented
BThe resources needed to accomplish the elements of the plan
CAny milestones that are needed in meeting the tasks
DThe tasks that are required to be accomplished
EScheduled completion dates for the milestones

How the community answered

(25 responses)

A
8% (2)
B
92% (23)

Explanation

A Plan of Action and Milestones (POA&M) is a key document in the NIST Risk Management Framework used to track the remediation of security weaknesses. It specifically identifies: (B) the resources required to accomplish each element of the plan; (C) the milestones needed to meet the identified tasks; (D) the specific tasks that must be accomplished to remediate the weakness; and (E) scheduled completion dates for each milestone. Option A - 'the plans that need to be implemented' - is too vague and does not represent a distinct, recognized element of a POA&M. The POA&M focuses on actionable tasks, resource allocation, milestone tracking, and deadlines, not general plan descriptions.

Topics

#Plan of Action and Milestones (POAM)#Risk Management#Compliance Remediation#Security Controls

Community Discussion

No community discussion yet for this question.

Full CAP Practice