CGRC · Question #498
Which reference document describes the contents of a Plan of Action and Milestone (POA&M) updating and replacing OMB M 02-01? Response:
The correct answer is B. OMB M-02-09. OMB M-02-09, "Reporting Instructions for the Federal Information Security Management Act (FISMA) and Agency Privacy Management," updated and replaced OMB M-02-01 by providing further guidance on the content and reporting requirements for Plans of Action and Milestones (POA&Ms). T
Question
Which reference document describes the contents of a Plan of Action and Milestone (POA&M) updating and replacing OMB M 02-01? Response:
Options
- AOMB M 02-11
- BOMB M-02-09
- COMB M-02-14
- DOMB M-04-09
How the community answered
(37 responses)- A3% (1)
- B89% (33)
- C5% (2)
- D3% (1)
Why each option
OMB M-02-09, "Reporting Instructions for the Federal Information Security Management Act (FISMA) and Agency Privacy Management," updated and replaced OMB M-02-01 by providing further guidance on the content and reporting requirements for Plans of Action and Milestones (POA&Ms). This memo refined how federal agencies track and report security weaknesses.
OMB M-02-11 deals with electronic government strategies.
OMB M-02-09, titled "Reporting Instructions for the Federal Information Security Management Act (FISMA) and Agency Privacy Management," was issued to provide updated guidance on reporting requirements, including the content and management of Plans of Action and Milestones (POA&Ms), thereby superseding previous guidance like OMB M-02-01. It refined how agencies were to track and report their security posture and weaknesses.
OMB M-02-14 concerns guidance on implementing the Small Business Paperwork Relief Act.
OMB M-04-09 provides guidance for implementing the E-Government Act of 2002.
Concept tested: OMB Memos, POA&M Guidance, FISMA Reporting
Source: https://obamawhitehouse.archives.gov/omb/memoranda_2002/m02-09.pdf
Topics
Community Discussion
No community discussion yet for this question.