ComplianceNIST 800-53 control

NIST-CA-5 Plan of Action and Milestones

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
CA Assessment, Authorization, and Monitoring
Control
CA-5

Control statement

a. Develop a plan of action and milestones for the system to document the planned remediation actions of the organization to correct weaknesses or deficiencies noted during the assessment of the controls and to reduce or eliminate known vulnerabilities in the system; and b. Update existing plan of action and milestones [Assignment: frequency] based on the findings from control assessments, independent audits or reviews, and continuous monitoring activities.

Discussion

Plans of action and milestones are useful for any type of organization to track planned remedial actions. Plans of action and milestones are required in authorization packages and subject to federal reporting requirements established by OMB.

Related

Related control · Compliance (7)

  • NIST-CA-2 Control Assessments NIST 800-53 control
  • NIST-CA-7 Continuous Monitoring NIST 800-53 control
  • NIST-PM-4 Plan of Action and Milestones Process NIST 800-53 control
  • NIST-PM-9 Risk Management Strategy NIST 800-53 control
  • NIST-RA-7 Risk Response NIST 800-53 control
  • NIST-SI-12 Information Management and Retention NIST 800-53 control
  • NIST-SI-2 Flaw Remediation NIST 800-53 control

Referenced by Compliance · enhancement of (1)

  • NIST-CA-5(1) Automation Support for Accuracy and Currency NIST 800-53 enhancement

Referenced by Compliance · has member (1)

  • NIST-CA Assessment, Authorization, and Monitoring NIST 800-53 family

Referenced by Compliance · related control (8)

  • NIST-CA-2 Control Assessments NIST 800-53 control
  • NIST-CA-7 Continuous Monitoring NIST 800-53 control
  • NIST-PM-31 Continuous Monitoring Strategy NIST 800-53 control
  • NIST-PM-4 Plan of Action and Milestones Process NIST 800-53 control
  • NIST-PM-9 Risk Management Strategy NIST 800-53 control
  • NIST-RA-7 Risk Response NIST 800-53 control
  • NIST-SI-12 Information Management and Retention NIST 800-53 control
  • NIST-SI-2 Flaw Remediation NIST 800-53 control