{ "$TMF_VERSION": "1.4", "PublicationDateTime": "2021-04-26T00:00:00.000Z", "Description": "Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control PM-4: Plan of Action and Milestones Process.", "Keywords": [ "800-53", "Action", "Milestones Process", "NIST", "Plan", "Program Management", "Security" ], "Issuer": { "Identifier": "https://trustmarkinitiative.org/", "PrimaryContact": { "Email": "help@trustmarkinitiative.org", "Telephone": "555-555-5555", "Kind": "PRIMARY", "WebsiteURL": "https://trustmarkinitiative.org/", "Responder": "" }, "Name": "TMI" }, "Sources": [{ "Identifier": "SP800-53R4", "Reference": "NIST Special Publication 800-53 Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations, National Institute of Standards and Technology, April 2013 (Includes updates as of 01-15-2014). Available at http://dx.doi.org/10.6028/NIST.SP.800-53r4<\/a>.", "$id": "source-2112165102" }], "Name": "NIST SP 800-53 r4 Security Control PM-4: Plan of Action and Milestones Process", "TrustExpression": "TD_ref1 and TD_ref2 and TD_ref3 and TD_ref4 and TD_ref5 and TD_ref6 and TD_ref7 and TD_ref8 and TD_ref9 and TD_ref10", "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tips/nist-sp-800-53-r4-security-control-pm-4_-plan-of-action-and-milestones-process/4/", "Version": "4", "References": {"TrustmarkDefinitionRequirements": [ { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---residual-risk-documentation---individuals/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems document the remedial information security actions to adequately respond to risk to individuals.", "Number": 1, "Version": "1.0", "TrustmarkDefinitionReference": { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---residual-risk-documentation---individuals/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems document the remedial information security actions to adequately respond to risk to individuals.", "Number": 1, "Version": "1.0", "Name": "Plan of Action and Milestones Process - Residual Risk Documentation - Individuals" }, "$Type": "TrustmarkDefinitionRequirement", "Name": "Plan of Action and Milestones Process - Residual Risk Documentation - Individuals", "$id": "TD_ref1" }, { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---residual-risk-documentation---other-organizations/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems document the remedial information security actions to adequately respond to risk to other organizations.", "Number": 2, "Version": "1.0", "TrustmarkDefinitionReference": { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---residual-risk-documentation---other-organizations/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems document the remedial information security actions to adequately respond to risk to other organizations.", "Number": 2, "Version": "1.0", "Name": "Plan of Action and Milestones Process - Residual Risk Documentation - Other Organizations" }, "$Type": "TrustmarkDefinitionRequirement", "Name": "Plan of Action and Milestones Process - Residual Risk Documentation - Other Organizations", "$id": "TD_ref2" }, { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---residual-risk-documentation---organizational-assets/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems document the remedial information security actions to adequately respond to risk to organizational assets.", "Number": 3, "Version": "1.0", "TrustmarkDefinitionReference": { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---residual-risk-documentation---organizational-assets/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems document the remedial information security actions to adequately respond to risk to organizational assets.", "Number": 3, "Version": "1.0", "Name": "Plan of Action and Milestones Process - Residual Risk Documentation - Organizational Assets" }, "$Type": "TrustmarkDefinitionRequirement", "Name": "Plan of Action and Milestones Process - Residual Risk Documentation - Organizational Assets", "$id": "TD_ref3" }, { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---review---organization-wide-priorities/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization reviews plans of action and milestones for consistency with the organizational risk management strategy and organization-wide priorities for risk response actions.", "Number": 4, "Version": "1.0", "TrustmarkDefinitionReference": { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---review---organization-wide-priorities/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization reviews plans of action and milestones for consistency with the organizational risk management strategy and organization-wide priorities for risk response actions.", "Number": 4, "Version": "1.0", "Name": "Plan of Action and Milestones Process - Review - Organization-Wide Priorities" }, "$Type": "TrustmarkDefinitionRequirement", "Name": "Plan of Action and Milestones Process - Review - Organization-Wide Priorities", "$id": "TD_ref4" }, { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---security-program-poam-maintenance/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems are maintained.", "Number": 5, "Version": "1.0", "TrustmarkDefinitionReference": { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---security-program-poam-maintenance/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems are maintained.", "Number": 5, "Version": "1.0", "Name": "Plan of Action and Milestones Process - Security Program POAM Maintenance" }, "$Type": "TrustmarkDefinitionRequirement", "Name": "Plan of Action and Milestones Process - Security Program POAM Maintenance", "$id": "TD_ref5" }, { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---review---organizational-risk-management-strategy/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization reviews plans of action and milestones for consistency with the organizational risk management strategy and organization-wide priorities for risk response actions.", "Number": 6, "Version": "1.0", "TrustmarkDefinitionReference": { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---review---organizational-risk-management-strategy/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization reviews plans of action and milestones for consistency with the organizational risk management strategy and organization-wide priorities for risk response actions.", "Number": 6, "Version": "1.0", "Name": "Plan of Action and Milestones Process - Review - Organizational Risk Management Strategy" }, "$Type": "TrustmarkDefinitionRequirement", "Name": "Plan of Action and Milestones Process - Review - Organizational Risk Management Strategy", "$id": "TD_ref6" }, { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---residual-risk-documentation---organizational-operations/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems document the remedial information security actions to adequately respond to risk to organizational operations.", "Number": 7, "Version": "1.0", "TrustmarkDefinitionReference": { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---residual-risk-documentation---organizational-operations/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems document the remedial information security actions to adequately respond to risk to organizational operations.", "Number": 7, "Version": "1.0", "Name": "Plan of Action and Milestones Process - Residual Risk Documentation - Organizational Operations" }, "$Type": "TrustmarkDefinitionRequirement", "Name": "Plan of Action and Milestones Process - Residual Risk Documentation - Organizational Operations", "$id": "TD_ref7" }, { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---security-program-poam-development/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems are developed.", "Number": 8, "Version": "1.0", "TrustmarkDefinitionReference": { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---security-program-poam-development/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems are developed.", "Number": 8, "Version": "1.0", "Name": "Plan of Action and Milestones Process - Security Program POAM Development" }, "$Type": "TrustmarkDefinitionRequirement", "Name": "Plan of Action and Milestones Process - Security Program POAM Development", "$id": "TD_ref8" }, { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems are reported in accordance with U.S. Office of Management and Budget (OMB) Federal Information Security Modernization Act (FISMA) reporting requirements.", "Number": 9, "Version": "1.0", "TrustmarkDefinitionReference": { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems are reported in accordance with U.S. Office of Management and Budget (OMB) Federal Information Security Modernization Act (FISMA) reporting requirements.", "Number": 9, "Version": "1.0", "Name": "Plan of Action and Milestones Process" }, "$Type": "TrustmarkDefinitionRequirement", "Name": "Plan of Action and Milestones Process", "$id": "TD_ref9" }, { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---residual-risk-documentation---the-nation/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems document the remedial information security actions to adequately respond to risk to the Nation.", "Number": 10, "Version": "1.0", "TrustmarkDefinitionReference": { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---residual-risk-documentation---the-nation/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems document the remedial information security actions to adequately respond to risk to the Nation.", "Number": 10, "Version": "1.0", "Name": "Plan of Action and Milestones Process - Residual Risk Documentation - The Nation" }, "$Type": "TrustmarkDefinitionRequirement", "Name": "Plan of Action and Milestones Process - Residual Risk Documentation - The Nation", "$id": "TD_ref10" } ]}, "Primary": "false", "LegalNotice": "This document and the information contained herein is provided on an \"AS IS\" basis, and the Georgia Tech Research Institute disclaims all warranties, express or implied, including but not limited to any warranty that the use of the information herein will not infringe any rights or any implied warranties or merchantability or fitness for a particular purpose. In addition, the Georgia Tech Research Institute disclaims legal liability for any loss incurred as a result of the use or reliance on the document or the information contained herein.", "$Type": "TrustInteroperabilityProfile" }