CMMC Level 1 · DefinitionSEC / DEFPOA&M

Definition

Plan of Action and Milestones

A CMMC Level 1 term. Also written POA&M.

Definition

A Plan of Action and Milestones is a plan to close open security gaps over time. No POA&M is permitted at CMMC Level 1. Every requirement must be MET or N/A before affirmation.

At higher levels a POA&M can defer some items. Level 1 is all-or-nothing, so there is nothing to defer.

Term identity

Term
Plan of Action and Milestones (POA&M)
Framework
CMMC · Level 1
Authority
32 CFR § 170.21(a)(1)

Primary Sources