BaselineWatch
Desk

VER-AGM-MAP Maintain Agency Plans of Action and Milestones

FedRAMP Consolidated Rules (2026) 2026.07.14.01
All changes in this version
first version loaded VER: Vulnerability Evaluation and Reporting

Title

Maintain Agency Plans of Action and Milestones

Control

Agencies SHOULD use vulnerability information reported by the Provider to maintain Plans of Action and Milestones for agency security programs when relevant according to agency security policies (such as if the agency takes action to mitigate the risk of exploitation or authorized the continued use of a cloud service with accepted vulnerabilities that put agency information systems at risk).