Organization
Point of Contact
Assessment Date Start
Assessment Date End
System Name
0
of 110 pts · Target Score: 110 · Audit Threshold: 88
0
Implemented
0
Partial (−0.5)
0
Not Implemented
0
Planned POA&M
COMPLIANT
Score: 100%
⚠️ Live POA&M Tracker
— Click a card to filter view
Auto-updates as you assess
0
🔴 Critical
Non-POAMable controls OR major security gaps. Must remediate before CMMC assessment.
0
🟠 High
Significant security risk. Exploit likelihood high. 30–90 day remediation target.
0
🟡 Medium
Moderate risk. Compensating controls may exist. 90–180 day remediation window.
0
🟢 Low
Low risk / administrative. Documented plans acceptable. 180+ day window.