NIST SP 800-53 Rev 5 HIGH
CA: Assessment, Authorization, and Monitoring – NIST SP 800-53 Revision 5.1 HIGH

NIST SP 800-53 Rev 5 HIGH CA-5: CA-5 Plan of Action and Milestones

a. Develop a plan of action and milestones for the system to document the planned remediation actions of the organization to correct weaknesses or deficiencies noted during the assessment of the controls and to reduce or eliminate known vulnerabilities in the system; and b. Update existing plan of action and milestones [Assignment: organization-defined frequency] based on the findings from control assessments, independent audits or reviews, and continuous monitoring activities.

Maintained by Gerard BlokdykControl text last updated

What else in your programme already covers this

This control maps to 3 controls across 3 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

FedRAMP High · 1 control

  • CA-5 Plan of Action and Milestones

FedRAMP Moderate · 1 control

  • CA-5 Plan of Action and Milestones

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in CA: Assessment, Authorization, and Monitoring – NIST SP 800-53 Revision 5.1 HIGH

Query this from an agent

The graph holds this control, the 3 it maps to, and the evidence behind each claim, over MCP and REST.