What is a POAM?

The acronym, POAM, stands for Plan of Actions and Milestones (POAM). The term POAM can refer to a POAM List or a POAM item.

POAM List – This refers to a group of POAM items, or vulnerabilities. Each System can have one or more POAM Lists. For example, a System may have a POAM List for regular vulnerabilities that are added to POAMs and a second POAM List for a penetration test.

POAM item – This refers to a single vulnerability or weakness. The POAM item can have an infinite number of Assets, but always refers to a single vulnerability.

In Ryskview, the term POAM refers to a POAM List while “Action” refers to a POAM item.