Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Training Camp • Cybersecurity Glossary
A POAM is a formal NIST and FedRAMP document tracking security weaknesses, remediation tasks, resources, and deadlines for closing control gaps.
Plan of Action and Milestones (POAM) Definition: A POAM is a formal NIST and FedRAMP document tracking security weaknesses, remediation tasks, resources, and deadlines for closing control gaps.
A Plan of Action and Milestones POAM is a formal document that identifies security weaknesses in a system, the remediation tasks to correct them, required resources, and target completion dates. It is a core artifact in NIST and FedRAMP risk management and authorization processes, providing a tracked roadmap for closing control deficiencies. Authorizing officials review POAMs to make risk-based decisions about system operation.
Turn knowledge into credentials with our instructor-led cybersecurity boot camps.
View All Courses →