CMMC 2.0 • LEVEL 2 • SECURITY ASSESSMENT
CA.L2-3.12.2 — Plan of Action and Milestones
Develop a plan of action and milestones for the system: To document the planned remediation actions to correct weaknesses or deficiencies noted during security assessments and To reduce or eliminate known system vulnerabilities. Update the existing plan of action and milestones based on the findings from: Security assessments, Audits or reviews, and Continuous monitoring activities.
Assessment Objectives
- a plan of action and milestones for the system is developed to document the planned remediation actions for correcting weaknesses or deficiencies noted during security assessments.
- a plan of action and milestones for the system is developed to reduce or eliminate known system vulnerabilities.
- the existing plan of action and milestones is updated based on the findings from security assessments.
- the existing plan of action and milestones is updated based on the findings from continuous monitoring activities.
- the existing plan of action and milestones is updated based on the findings from audits or reviews.
Practitioner Notes
Practitioner commentary coming soon.