Difference between revisions of "POAM"
From MgmtWiki
(Created page with "==Full Title== Plan of Action and Milestones ==Context== [https://csrc.nist.gov/glossary/term/poam NIST defined] the term from several of their special publications and it is...") |
(→Problems) |
||
| (3 intermediate revisions by the same user not shown) | |||
| Line 3: | Line 3: | ||
==Context== | ==Context== | ||
| − | [https://csrc.nist.gov/glossary/term/poam NIST defined] the term from several of their special publications and it is widely adopted across the US Federal Government for showing compliance. | + | * [https://csrc.nist.gov/glossary/term/poam NIST defined] the term from several of their special publications and it is widely adopted across the US Federal Government for showing compliance. |
| + | ==Problems== | ||
| + | * This appears indistinguishable from a bug list in program development. | ||
| + | * Most government forms and codes are unknown outside of the government of interest. There are many consultants (aka beltway bandits) will be happy to take your money to fill out forms that the government claims are simplicity itself. | ||
| + | |||
| + | ==Solution== | ||
| + | Just names, whatever. | ||
| + | * [https://cksecuritysolutions.com/poam-nist/ A POAM NIST template] is included in several DFARS template packages. CKSS has compiled a suite of DFARS 252.204-7012 compliance templates to help DOD contractors get a jumpstart on their remediation activities as well as ensure continued compliance. | ||
==References== | ==References== | ||
[[Category: Glossary]] | [[Category: Glossary]] | ||
Latest revision as of 22:28, 18 January 2022
Full Title
Plan of Action and Milestones
Context
- NIST defined the term from several of their special publications and it is widely adopted across the US Federal Government for showing compliance.
Problems
- This appears indistinguishable from a bug list in program development.
- Most government forms and codes are unknown outside of the government of interest. There are many consultants (aka beltway bandits) will be happy to take your money to fill out forms that the government claims are simplicity itself.
Solution
Just names, whatever.
- A POAM NIST template is included in several DFARS template packages. CKSS has compiled a suite of DFARS 252.204-7012 compliance templates to help DOD contractors get a jumpstart on their remediation activities as well as ensure continued compliance.
