What does POAM stand for?

• A. Plan of Action and Milestones
• B. Program of Audit and Monitoring
• C. Policy of Access Management
• D. Plan of Assessment and Metrics

Answer: (A)

POAM stands for Plan of Action and Milestones. This is a formal record in security and risk management that lists the security weaknesses or deficiencies, the specific actions required to remediate them, who is responsible, and target dates. It helps organizations track progress, demonstrate progress to stakeholders, and ensure vulnerabilities are addressed over time as part of ongoing risk management and continuous monitoring. The other phrases listed aren’t standard terms for this acronym and don’t convey the same remediation-and-tipeline-tracking idea.