FedRAMP POA&M
- OSCAL-Specific Information
- Individual POA&M Entries
- Individual POA&M Entries: Findings
- Individual POA&M Entries: Observations
- Individual POA&M Entries: Asset Identifiers
- Individual POA&M Entries: Weakness Information
- Binding Operational Directive 22-01 Vulnerabilities
- Recommended and Planned Remediation
- Planned Remediation Schedule
- Risk Tracking
- Deviations: False Positive (FP)
- Deviations: Operationally Required (OR)
- Deviations: Risk Adjustment (RA)
- Vendor Dependency
- Evidence and Artifacts
- Risk Closure