POA&M Information
Referenced System Security Plan
SSP Location: trestle://system-security-plans/Kubernetes-System-ssp-dora/system-security-plan.json
Findings (10)
Control ac-2 assessment outcome
Control ac-2 is partially-satisfied based on 11 passing and 5 failing mapped XCCDF rule evaluations across 4 assessed subjects.
Control au-2 assessment outcome
Control au-2 is partially-satisfied based on 3 passing and 3 failing mapped XCCDF rule evaluations across 4 assessed subjects with 45% mapping coverage (partial coverage = partially-satisfied).
Control au-6.4 assessment outcome
Control au-6.4 is partially-satisfied based on 6 passing and 6 failing mapped XCCDF rule evaluations across 4 assessed subjects.
Control cm-2 assessment outcome
Control cm-2 is partially-satisfied based on 10 passing and 2 failing mapped XCCDF rule evaluations across 4 assessed subjects.
Control cm-7 assessment outcome
Control cm-7 is partially-satisfied based on 13 passing and 3 failing mapped XCCDF rule evaluations across 4 assessed subjects.
Control ia-5 assessment outcome
Control ia-5 is partially-satisfied based on 13 passing and 3 failing mapped XCCDF rule evaluations across 4 assessed subjects.
Control sc-23 assessment outcome
Control sc-23 is partially-satisfied based on 14 passing and 2 failing mapped XCCDF rule evaluations across 4 assessed subjects.
Control sc-8 assessment outcome
Control sc-8 is partially-satisfied based on 7 passing and 1 failing mapped XCCDF rule evaluations across 4 assessed subjects with 35% mapping coverage (partial coverage = partially-satisfied).
Control si-4 assessment outcome
Control si-4 is partially-satisfied based on 11 passing and 1 failing mapped XCCDF rule evaluations across 4 assessed subjects.
Control si-7 assessment outcome
Control si-7 is partially-satisfied based on 11 passing and 1 failing mapped XCCDF rule evaluations across 4 assessed subjects.
POA&M Items (10)
Remediate ac-2
Address non-compliance for control ac-2 with 5 failing rule evaluations
Remediate au-2
Address non-compliance for control au-2 with 3 failing rule evaluations
Remediate au-6.4
Address non-compliance for control au-6.4 with 6 failing rule evaluations
Remediate cm-2
Address non-compliance for control cm-2 with 2 failing rule evaluations
Remediate cm-7
Address non-compliance for control cm-7 with 3 failing rule evaluations
Remediate ia-5
Address non-compliance for control ia-5 with 3 failing rule evaluations
Remediate sc-23
Address non-compliance for control sc-23 with 2 failing rule evaluations
Remediate sc-8
Address non-compliance for control sc-8 with 1 failing rule evaluations
Remediate si-4
Address non-compliance for control si-4 with 1 failing rule evaluations
Remediate si-7
Address non-compliance for control si-7 with 1 failing rule evaluations