Respond to the following in a minimum of 250 words: A plan of action and milestones (POA&M) is a living, historical document that identifies tasks that need to be created to remediate security...

The POA&M is an important document in the security authorization package and monthly continuous monitoring activities. This document identifies the system’s known weaknesses in terms of security and describes the specific activities the CSP will take to correct them. In certain cases the CSP’s work will be directly handled by the CISO. The ultimate goal and purpose of the to structure and maintain a POA&M is to track risk mitigation activities that are crucial to handle independently. Ultimately, the end goal of a POA&M should be to reduce the risk of...