If you’re a defense contractor and need to comply with NIST 800-171, then you need to know about System Security Plans (SSPs) and Plans of Actions & Milestones (POAMs). SSPs document how your organization meets NIST 800-171’s 110 controls. Check out our blog How to Create a System Security Plan, to learn more about this The post What is a POAM appeared first on PreVeil.

Security Boulevard is a leading cybersecurity news and information portal, offering articles, analysis, and insights on cybersecurity threats, vulnerabilities, and best practices. From the latest trends in cyber threats to expert commentary on security technologies and compliance frameworks, Security Boulevard provides resources for security professionals, IT leaders, and business executives seeking to protect their organizations from cyber attacks and data breaches.

Security Boulevard

A POAM is a document that identifies tasks to meet unmet security controls, provides resources, milestones, and dates. POAMs are allowed for some 1-point controls in CMMC Level 2, but not for 3- or 5-point controls. Defense contractors should aim to close out POAMs within 180 days.