Atch 5 - NIST SP.800-171 POAM Template 2023
Updated
A PDF document (833 KB) attached to Voluntary Intermodal Sealift Agreement (VISA) - 2024 Renewal, from the US Transportation Command (ustranscom). Due Jun 27, 2029, 8:00 AM (UTC-5).
File name: Atch 5 - NIST.SP.800-171_POAM_Template 2023.pdf
The full file is for paid members, or buy this bid alone.
Preview
Company name:
Contract number:
Cage code:
Date completed:
Submission Type (Annual or update?)
Point of contact (POC):
POC phone number:
POC e-mail address:
800-171 Controls
0%
Not Rated
Compliant
100%
NonCompliant
800-171 Objectives
0%
Not Rated
Compliant
100%
NonCompliant
FAR 52.204-21 Controls
0%
Not Rated
Compliant
100%
NonCompliant
FAR 52.204-21 Objectives
0%
Not Rated
Compliant
100%
NonCompliant
Annual Submission
Controls marked requiring Plan of Action and Milestones
no
Controls
Scheduled Completion Date
FAR 52.204-21 Controls
FAR 52.204-21 Objectives
Not Rated
Not Rated
Compliant
Compliant
Non-Compliant
Non-Compliant
Chart Title
100%
90%
80%
70%
60%
50%
40%
NR
30%
20%
10%
0%
Access Control
Identification and Media Protection Physical Protection System and
Authentication
Communications
Protection
System and
Information
Integrity
Basic Safeguarding of Covered Contractor Information Systems NIST 800-171 Control/Objective Number
(All)
Count of Compliant
Row Labels
Access Control
Identification and Authentication
Media Protection
Physical Protection
System and Communications Protection
System and Information Integrity
Grand Total
Column Labels
NR
4 19
2 6
1 2
3 10
2 10
3 12
15 59
Basic Safeguarding of Covered Contractor Information Systems FAR 52.204-21 Controls marked requiring Plan of Action and Milestones
no
Controls
Scheduled Completion Date
Compliant
(Yes/No)
NIST 800-171
Control/Objective
Number
Control Family
Control/Objective Text
NR
3.1.1
Access Control
Limit information system access to authorized
users, processes acting on behalf of authorized
users, or devices (including other information
systems).
3.1.1[a]
Access Control
authorized users are identified.
3.1.1[b]
Access Control
processes acting on behalf of authorized users are
identified.
3.1.1[c]
Access Control
devices (and other systems) authorized to connect
to the system are identified.
3.1.1[d]
Access Control
system access is limited to authorized users.
3.1.1[e]
Access Control
system access is limited to processes acting on
behalf of authorized users.
3.1.1[f]
Access Control
system access is limited to authorized devices
(including other systems).
3.1.2
Access Control
Limit information system access to the types of
transactions and functions that authorized users
are permitted to execute.
3.1.2[a]
Access Control
the types of transactions and functions that
authorized users are permitted to execute are
defined.
3.1.2[b]
The beginning of the document. Download the full file to read on.