# CA-5 — Plan of Action and Milestones

- **Control ID:** CA-5
- **Family:** [CA](/md/families/CA.md)
- **Baselines:** low, moderate, high
- **Enhancement of:** No content available.

## Description

Develop a plan of action and milestones for the system to document the planned remediation actions of the organization to correct weaknesses or deficiencies noted during the assessment of the controls and to reduce or eliminate known vulnerabilities in the system; and Update existing plan of action and milestones \[assignment\] based on the findings from control assessments, independent audits or reviews, and continuous monitoring activities.

## Discussion

Plans of action and milestones are useful for any type of organization to track planned remedial actions. Plans of action and milestones are required in authorization packages and subject to federal reporting requirements established by OMB.

## Implementation guidance

No content available.

## CSF 2.0 subcategories

- [ID.IM-01](/md/csf/ID.IM-01.md) — Improvements are identified from evaluations
- [ID.IM-02](/md/csf/ID.IM-02.md) — ID.IM-02
- [ID.IM-03](/md/csf/ID.IM-03.md) — Improvements are identified from execution of operational processes, procedures, and activities

## Related controls

- [CA-2](/md/controls/CA-2.md)
- [CA-7](/md/controls/CA-7.md)
- [PM-4](/md/controls/PM-4.md)
- [PM-9](/md/controls/PM-9.md)
- [RA-7](/md/controls/RA-7.md)
- [SI-2](/md/controls/SI-2.md)
- [SI-12](/md/controls/SI-12.md)

---

Derived from official NIST publications (NIST SP 800-53 Rev 5 and NIST CSF 2.0). nistcontrols.com is not affiliated with NIST.