The Plan of Action and Milestones (POA&M), also referred to as a corrective action plan, is the authoritative agency management tool for documenting the remediation actions of system risk. POA&Ms are used to assist in identifying, assessing, prioritizing, and monitoring the progress of corrective efforts for security weaknesses found in agency programs and systems. This guide addresses both program and system level POA&Ms.