workflow

Security Control Assessment & POA&M Remediation

Run this assessment on the EXISTING Audit item for the engagement (audit_type: it_audit or compliance) — enrich that record, never create a duplicate: Audit.scope carries the authorization boundary and Audit.period_start/period_end the assessment window. Consumes, from the upstream SSP-development / system-categorization effort, the approved System Security Plan (SSP), the FIPS 199 system categorization, and the tailored NIST 800-53 baseline (existing Control items, framework: nist-800-53). Assess each in-scope control with 800-53A examine/interview/test methods, record satisfied / other-than-satisfied determinations, open a POA&M Issue for every gap, re-validate remediation, and issue the Security Assessment Report (SAR). In scope: control assessment, determinations, the POA&M lifecycle, and the SAR for the authorization boundary agreed at kickoff. Out of scope: the authorization (ATO) decision itself and the steady-state continuous-monitoring cadence. On completion, the frozen SAR and POA&M package are handed to the NIST RMF System Authorization (ATO) Cycle.

Record JSON · Open in map · Data retrieval guide

Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.

Attributes

domain

controls

department

it

lineOfDefense

assure

Details

teams

• it
• compliance-legal

domains

• controls

standards

• nist-800-53

sourceTemplateId

workflow-library:controls-security-assessment-poam-remediation

releaseId

sha256:513af45d886c143c166f32c84f2080655a9a78f1376bd2613ac47d412d1bb6c8

canonicalUrl

https://workflow-library.com/all/?w=controls-security-assessment-poam-remediation

capabilities

mappingStatus

mapped

lineOfDefense

assure

controls

• UC-AUDIT-21
• UC-GOV-22
• UC-RISK-14
• UC-AUDIT-17
• UC-ACCESS-05
• UC-ACCESS-10
• UC-ACCESS-11
• UC-ACCESS-12
• UC-ACCESS-13
• UC-ACCESS-14
• UC-ACCESS-16
• UC-ACCESS-19
• UC-ASSET-01
• UC-ASSET-04
• UC-BCDR-04
• UC-BCDR-11
• UC-BCDR-13
• UC-CONFIG-01
• UC-CONFIG-03
• UC-CONFIG-05
• UC-CONFIG-06
• UC-CONFIG-07
• UC-CONFIG-08
• UC-CONFIG-09
• UC-CONFIG-10
• UC-CRYPTO-01
• UC-CRYPTO-04
• UC-DATA-11
• UC-GOV-09
• UC-GOV-19
• UC-GOV-25
• UC-GOV-29
• UC-GOV-30
• UC-GOV-31
• UC-GOV-32
• UC-GOV-34
• UC-GOV-35
• UC-GOV-36
• UC-HR-01
• UC-HR-02
• UC-HR-04
• UC-IR-02
• UC-LOG-01
• UC-LOG-02
• UC-LOG-03
• UC-LOG-05
• UC-LOG-07
• UC-LOG-08
• UC-LOG-10
• UC-LOG-11
• UC-NET-01
• UC-NET-02
• UC-NET-03
• UC-NET-04
• UC-NET-05
• UC-NET-06
• UC-NET-07
• UC-NET-08
• UC-NET-09
• UC-NET-10
• UC-NET-11
• UC-NET-12
• UC-NET-13
• UC-NET-14
• UC-PHYS-01
• UC-PHYS-02
• UC-PHYS-03
• UC-PHYS-04
• UC-PHYS-05
• UC-PHYS-06
• UC-PHYS-07
• UC-PHYS-08
• UC-PHYS-09
• UC-PHYS-10
• UC-PHYS-11
• UC-SDLC-11
• UC-TPRM-07
• UC-TPRM-09
• UC-VULN-04
• UC-VULN-05
• UC-VULN-06
• UC-VULN-07
• UC-VULN-08
• UC-VULN-09
• UC-VULN-11
• UC-ACCESS-06
• UC-ACCESS-18

roleIntegrity

activityCount

0

ermPhases

lineRoles

serviceModes

warnings

Source

No record-specific source URL is provided.

Download workflow template · Release: sha256:513af45d886c143c166f32c84f2080655a9a78f1376bd2613ac47d412d1bb6c8

Connections

• Security Control Assessment & POA&M Remediation tests UC-CRYPTO-04 — Protect data in use from unauthorized access

• Security Control Assessment & POA&M Remediation tests UC-GOV-19 — Maintain enterprise security and privacy architecture

• Security Control Assessment & POA&M Remediation tests UC-GOV-29 — Maintain secure acquisition, development, and maintenance policies

• Security Control Assessment & POA&M Remediation tests UC-ACCESS-06 — Manage unique identities and identifiers end to end

• Security Control Assessment & POA&M Remediation tests UC-NET-13 — Control mobile code and web content

• Security Control Assessment & POA&M Remediation tests UC-LOG-01 — Log security-relevant events across all systems

• Security Control Assessment & POA&M Remediation tests UC-CONFIG-07 — Perform controlled, timely maintenance of systems and hardware

• Security Control Assessment & POA&M Remediation tests UC-LOG-08 — Secure and monitor networks and network services

• Security Control Assessment & POA&M Remediation tests UC-NET-12 — Restrict communication-capable devices, ports, and sensors

• Security Control Assessment & POA&M Remediation tests UC-ASSET-01 — Maintain a complete inventory of systems, hardware, and software

• Security Control Assessment & POA&M Remediation tests UC-GOV-36 — Maintain communications security and cryptography policies

• Security Control Assessment & POA&M Remediation operates UC-AUDIT-17 — Follow up on findings and escalate risk acceptance

• Security Control Assessment & POA&M Remediation tests UC-GOV-30 — Maintain asset, media, and physical protection policies

• Security Control Assessment & POA&M Remediation tests UC-ACCESS-16 — Authorize, test, and approve changes and development

• Security Control Assessment & POA&M Remediation tests UC-GOV-32 — Maintain security awareness and cyber-hygiene policies

• Security Control Assessment & POA&M Remediation tests UC-SDLC-11 — Apply specialized development to critical components

• Security Control Assessment & POA&M Remediation tests UC-LOG-07 — Monitor user sessions and personnel activity

• Security Control Assessment & POA&M Remediation tests UC-VULN-06 — Verify software, firmware, and information integrity

• Security Control Assessment & POA&M Remediation tests UC-HR-01 — Screen personnel commensurate with position risk

• Security Control Assessment & POA&M Remediation tests UC-LOG-10 — Monitor the physical environment for adverse events

• Security Control Assessment & POA&M Remediation tests UC-NET-03 — Provide trusted channels and control session lifecycle

• Security Control Assessment & POA&M Remediation tests UC-VULN-08 — Engineer systems to fail predictably and safely

• Security Control Assessment & POA&M Remediation tests UC-VULN-05 — Block malware, spam, and phishing across all systems

• Security Control Assessment & POA&M Remediation tests UC-PHYS-10 — Control and track asset delivery, removal, and movement

• Security Control Assessment & POA&M Remediation tests UC-ACCESS-11 — Defend logons against brute-force and anomalous attempts

• Security Control Assessment & POA&M Remediation tests UC-ACCESS-12 — Lock, limit, and terminate user sessions

• Security Control Assessment & POA&M Remediation tests UC-CRYPTO-01 — Encrypt data at rest and in transit

• Security Control Assessment & POA&M Remediation tests UC-LOG-03 — Protect audit logs and retain them for required periods

• Security Control Assessment & POA&M Remediation tests UC-ASSET-04 — Control storage media through use, storage, and destruction

• Security Control Assessment & POA&M Remediation tests UC-LOG-02 — Record complete audit content with synchronized clocks

• Security Control Assessment & POA&M Remediation tests UC-PHYS-06 — Protect power and communications cabling from damage and taps

• Security Control Assessment & POA&M Remediation tests UC-NET-14 — Enforce policy on cross-domain information exchange

• Security Control Assessment & POA&M Remediation tests UC-NET-08 — Maintain communications availability under attack and failure

• Security Control Assessment & POA&M Remediation tests UC-NET-05 — Prevent leakage via shared resources and covert channels

• Security Control Assessment & POA&M Remediation tests UC-BCDR-11 — Sustain operations via safe modes and alternate mechanisms

• Security Control Assessment & POA&M Remediation tests UC-ACCESS-13 — Notify users of system terms and previous logon activity

• Security Control Assessment & POA&M Remediation tests UC-VULN-09 — Employ non-persistence and information-resilience techniques

• Security Control Assessment & POA&M Remediation tests UC-ACCESS-18 — Log and monitor system activity, capacity, and incidents

• Security Control Assessment & POA&M Remediation tests UC-NET-02 — Authorize and secure remote, wireless, and mobile access

• Security Control Assessment & POA&M Remediation tests UC-IR-02 — Train responders and test the incident response capability

• Security Control Assessment & POA&M Remediation operates UC-AUDIT-21 — Assess control effectiveness through testing and monitoring

• Security Control Assessment & POA&M Remediation tests UC-PHYS-07 — Shield systems from electromagnetic leakage and pulse threats

• Security Control Assessment & POA&M Remediation tests UC-ACCESS-10 — Authenticate devices and services before granting connections

• Security Control Assessment & POA&M Remediation tests UC-PHYS-08 — Maintain equipment to preserve availability and integrity

• Security Control Assessment & POA&M Remediation tests UC-CONFIG-03 — Separate environments and protect production data in testing

• Security Control Assessment & POA&M Remediation tests UC-VULN-11 — Embed taint mechanisms to detect data exfiltration

• Security Control Assessment & POA&M Remediation tests UC-GOV-09 — Appoint accountable security leadership (CISO)

• Security Control Assessment & POA&M Remediation tests UC-CONFIG-08 — Control maintenance tools, personnel, and remote sessions

• Security Control Assessment & POA&M Remediation tests UC-NET-07 — Secure name resolution and time services

• Security Control Assessment & POA&M Remediation tests UC-BCDR-13 — Operate continuous security protection services

• Security Control Assessment & POA&M Remediation tests UC-CONFIG-06 — Verify authenticity and integrity of hardware and software

• Security Control Assessment & POA&M Remediation tests UC-PHYS-11 — Secure alternate work sites

• Security Control Assessment & POA&M Remediation tests UC-ACCESS-14 — Authorize public content and external information sharing

• Security Control Assessment & POA&M Remediation tests UC-CONFIG-09 — Document configuration management policy, plan, and procedures

• Security Control Assessment & POA&M Remediation tests UC-GOV-25 — Operate a privacy program with accountable leadership

• Security Control Assessment & POA&M Remediation tests UC-NET-10 — Deploy deception and dynamic detection capabilities

• Security Control Assessment & POA&M Remediation tests UC-ACCESS-05 — Enforce approved authorizations for information and functions

• Security Control Assessment & POA&M Remediation tests UC-TPRM-07 — Verify component authenticity, provenance, and integrity

• Security Control Assessment & POA&M Remediation tests UC-BCDR-04 — Provide redundant and alternate processing, storage, and telecom

• Security Control Assessment & POA&M Remediation tests UC-VULN-07 — Harden runtime error handling, output filtering, and memory

• Security Control Assessment & POA&M Remediation tests UC-NET-11 — Conceal operational information from adversaries

• Security Control Assessment & POA&M Remediation tests UC-PHYS-02 — Monitor physical access and retain visitor and entry records

• Security Control Assessment & POA&M Remediation tests UC-GOV-35 — Maintain incident response policy and procedures

• Security Control Assessment & POA&M Remediation tests UC-HR-04 — Enforce a formal disciplinary process for violations

• Security Control Assessment & POA&M Remediation tests UC-TPRM-09 — Protect supply chain information through OPSEC

• Security Control Assessment & POA&M Remediation operates UC-RISK-14 — Track deficiencies to closure with remediation action plans

• Security Control Assessment & POA&M Remediation tests UC-PHYS-01 — Restrict physical access to facilities and secure areas

• Security Control Assessment & POA&M Remediation tests UC-PHYS-03 — Protect facilities against fire, water, and environmental hazards

• Security Control Assessment & POA&M Remediation tests UC-PHYS-09 — Prevent information exposure at desks, screens, and outputs

• Security Control Assessment & POA&M Remediation tests UC-CONFIG-01 — Harden systems to approved secure configuration baselines

• Security Control Assessment & POA&M Remediation tests UC-NET-04 — Isolate system, user, and security functions

• Security Control Assessment & POA&M Remediation tests UC-DATA-11 — Control data flows, leakage, and cross-border transfers

• Security Control Assessment & POA&M Remediation tests UC-HR-02 — Formalize security responsibilities in employment terms

• Security Control Assessment & POA&M Remediation tests UC-LOG-05 — Correlate and analyze events centrally with threat intel

• Security Control Assessment & POA&M Remediation tests UC-GOV-34 — Maintain business continuity and contingency planning policy

• Security Control Assessment & POA&M Remediation tests UC-NET-06 — Enforce separation with hardware and software mechanisms

• Security Control Assessment & POA&M Remediation tests UC-LOG-11 — Monitor external sources for unauthorized information disclosure

• Security Control Assessment & POA&M Remediation operates UC-GOV-22 — Assess control effectiveness and authorize systems

• Security Control Assessment & POA&M Remediation tests UC-VULN-04 — Test software security during development and acceptance

• Security Control Assessment & POA&M Remediation tests UC-CONFIG-05 — Permit only authorized software installation and use

• Security Control Assessment & POA&M Remediation tests UC-CONFIG-10 — Map where information resides and how data is processed

• Security Control Assessment & POA&M Remediation tests UC-PHYS-05 — Provide emergency power, lighting, and resilient utilities

• Security Control Assessment & POA&M Remediation tests UC-GOV-31 — Maintain access control, identity, and personnel security policies

• Security Control Assessment & POA&M Remediation tests UC-PHYS-04 — Site facilities and equipment to minimize hazards and exposure

• Security Control Assessment & POA&M Remediation tests UC-NET-01 — Segment networks and defend the external boundary

• Security Control Assessment & POA&M Remediation tests UC-ACCESS-19 — Restrict physical access and maintain environmental safeguards

• Security Control Assessment & POA&M Remediation tests UC-NET-09 — Reduce attack surface through resilient architecture