https://artifacts.trustmarkinitiative.org/lib/tips/nist-sp-800-53-r4-security-control-pm-4_-plan-of-action-and-milestones-process/4/NIST SP 800-53 r4 Security Control PM-4: Plan of Action and Milestones Process4Profile of requirements corresponding to NIST Special Publication 800-53, r4, Security Control PM-4: Plan of Action and Milestones Process.2021-04-26T00:00:00.000ZfalseThis document and the information contained herein is provided on an "AS IS" basis, and the Georgia Tech Research Institute disclaims all warranties, express or implied, including but not limited to any warranty that the use of the information herein will not infringe any rights or any implied warranties or merchantability or fitness for a particular purpose. In addition, the Georgia Tech Research Institute disclaims legal liability for any loss incurred as a result of the use or reliance on the document or the information contained herein.https://trustmarkinitiative.org/TMIPRIMARYhelp@trustmarkinitiative.org555-555-5555https://trustmarkinitiative.org/800-53ActionMilestones ProcessNISTPlanProgram ManagementSecurityhttps://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---residual-risk-documentation---individuals/1.0/1Plan of Action and Milestones Process - Residual Risk Documentation - Individuals1.0Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems document the remedial information security actions to adequately respond to risk to individuals.https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---residual-risk-documentation---other-organizations/1.0/2Plan of Action and Milestones Process - Residual Risk Documentation - Other Organizations1.0Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems document the remedial information security actions to adequately respond to risk to other organizations.https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---residual-risk-documentation---organizational-assets/1.0/3Plan of Action and Milestones Process - Residual Risk Documentation - Organizational Assets1.0Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems document the remedial information security actions to adequately respond to risk to organizational assets.https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---review---organization-wide-priorities/1.0/4Plan of Action and Milestones Process - Review - Organization-Wide Priorities1.0Defines conformance and assessment criteria for verifying that an organization reviews plans of action and milestones for consistency with the organizational risk management strategy and organization-wide priorities for risk response actions.https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---security-program-poam-maintenance/1.0/5Plan of Action and Milestones Process - Security Program POAM Maintenance1.0Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems are maintained.https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---review---organizational-risk-management-strategy/1.0/6Plan of Action and Milestones Process - Review - Organizational Risk Management Strategy1.0Defines conformance and assessment criteria for verifying that an organization reviews plans of action and milestones for consistency with the organizational risk management strategy and organization-wide priorities for risk response actions.https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---residual-risk-documentation---organizational-operations/1.0/7Plan of Action and Milestones Process - Residual Risk Documentation - Organizational Operations1.0Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems document the remedial information security actions to adequately respond to risk to organizational operations.https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---security-program-poam-development/1.0/8Plan of Action and Milestones Process - Security Program POAM Development1.0Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems are developed.https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process/1.0/9Plan of Action and Milestones Process1.0Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems are reported in accordance with U.S. Office of Management and Budget (OMB) Federal Information Security Modernization Act (FISMA) reporting requirements.https://artifacts.trustmarkinitiative.org/lib/tds/plan-of-action-and-milestones-process---residual-risk-documentation---the-nation/1.0/10Plan of Action and Milestones Process - Residual Risk Documentation - The Nation1.0Defines conformance and assessment criteria for verifying that an organization implements a process for ensuring that plans of action and milestones for the security program and associated organizational information systems document the remedial information security actions to adequately respond to risk to the Nation.SP800-53R4NIST Special Publication 800-53 Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations, National Institute of Standards and Technology, April 2013 (Includes updates as of 01-15-2014). Available at <a href="http://dx.doi.org/10.6028/NIST.SP.800-53r4">http://dx.doi.org/10.6028/NIST.SP.800-53r4</a>.