# Plan of Action and Milestones (POA&M) Template | Secureframe

> Download this customizable POA&M template to start preparing for CMMC, NIST 800-53, NIST 800-171, FedRAMP, TX-RAMP, and/or CJIS compliance and improve your overall security posture.

canonical: https://secureframe.com/compliance-resources/cmmc-poam-template

### Plan of Action and Milestones (POA&M) Template

The POA&M is a strategic document used to identify and track the actions required to address gaps in your organization’s controls that were identified during an internal or third-party assessment. The POA&M should be a living document that is updated continuously, no less than monthly, as progress is made. Use this template to demonstrate ongoing efforts to achieve and maintain CMMC compliance to third-party assessors, which is crucial particularly for higher-level CMMC certifications where continuous improvement is emphasized, as well as other frameworks like NIST 800-53, NIST 800-171, FedRAMP, TX-RAMP, and CJIS.

What you'll get:

- An auditor-approved plan of action and milestones template
- A customizable template that's easy to tailor to your organization
- One example of how you can outline an identified gap as well as associated risks, planned remediation actions, timelines, milestones, and responsible parties