FedRAMP POA&M

OSCAL-Specific Information

Individual POA&M Entries

Individual POA&M Entries: Findings

Individual POA&M Entries: Observations

Individual POA&M Entries: Asset Identifiers

Individual POA&M Entries: Weakness Information

Binding Operational Directive 22-01 Vulnerabilities

Recommended and Planned Remediation

Planned Remediation Schedule

Risk Tracking

Deviations: False Positive (FP)

Deviations: Operationally Required (OR)

Deviations: Risk Adjustment (RA)

Vendor Dependency

Evidence and Artifacts

Risk Closure