What does POAM stand for?

• A. Plan of Action and Milestones
• B. Policy of Access Management
• C. Proof of Identity and Access
• D. Project Opportunity and Management

Answer: (A)

The question tests understanding of a term used in security risk management and compliance. POAM stands for Plan of Action and Milestones. It’s a living document used to identify security deficiencies, outline the corrective actions needed, assign owners, and set target dates for when those actions should be completed. By tracking actions and milestones, it helps organizations monitor remediation progress, provide evidence to auditors or assessors, and keep management informed about the system’s security status. The other phrases don’t reflect established terminology in this context and don’t capture the idea of documenting actions and timelines for remediation.