id: "CA-05(01)" title: "Automation Support for Accuracy and Currency" family: "CA" family_name: "Assessment, Authorization, and Monitoring" sort_id: "ca-05.01" priority: "P1" implementation_level: "organization" parent: "CA-05" enhancement: True


Statement

Ensure the accuracy, currency, and availability of the plan of action and milestones for the system using {{ insert: param, ca-05.01_odp }}.

Guidance

Using automated tools helps maintain the accuracy, currency, and availability of the plan of action and milestones and facilitates the coordination and sharing of security and privacy information throughout the organization. Such coordination and information sharing help to identify systemic weaknesses or deficiencies in organizational systems and ensure that appropriate resources are directed at the most critical system vulnerabilities in a timely manner.

Assessment Objective

{{ insert: param, ca-05.01_odp }} are used to ensure the accuracy, currency, and availability of the plan of action and milestones for the system.

Assessment, authorization, and monitoring policy

procedures addressing plan of action and milestones

system design documentation

system configuration settings and associated documentation

system audit records

plan of action and milestones

system security plan

privacy plan

other relevant documents or records

Organizational personnel with plan of action and milestones development and implementation responsibilities

organizational personnel with information security and privacy responsibilities

Automated mechanisms for developing, implementing, and maintaining a plan of action and milestones