CMMC POA&M Management Guide for Contractors
A CMMC Plan of Action and Milestones is not a blanket permission to postpone security work. For CMMC Level 2, only certain NOT MET requirements may be placed on an assessment POA&M, the assessment must still meet the conditional-status threshold, and every eligible item must be closed within 180 days of the Conditional CMMC Status … Read more