POA&M Information
Referenced System Security Plan
SSP Location: trestle://system-security-plans/Kubernetes-System-ssp-fedramp-low/system-security-plan.json
Findings (11)
Control ac-2 assessment outcome
Control ac-2 is partially-satisfied based on 11 passing and 5 failing mapped XCCDF rule evaluations across 4 assessed subjects.
Control au-2 assessment outcome
Control au-2 is partially-satisfied based on 8 passing and 8 failing mapped XCCDF rule evaluations across 4 assessed subjects.
Control cm-2 assessment outcome
Control cm-2 is partially-satisfied based on 10 passing and 2 failing mapped XCCDF rule evaluations across 4 assessed subjects.
Control cm-6 assessment outcome
Control cm-6 is partially-satisfied based on 19 passing and 1 failing mapped XCCDF rule evaluations across 4 assessed subjects.
Control cm-7 assessment outcome
Control cm-7 is partially-satisfied based on 13 passing and 3 failing mapped XCCDF rule evaluations across 4 assessed subjects.
Control ia-5 assessment outcome
Control ia-5 is partially-satisfied based on 13 passing and 3 failing mapped XCCDF rule evaluations across 4 assessed subjects.
Control sc-13 assessment outcome
Control sc-13 is partially-satisfied based on 14 passing and 2 failing mapped XCCDF rule evaluations across 4 assessed subjects.
Control sc-28 assessment outcome
Control sc-28 is partially-satisfied based on 10 passing and 2 failing mapped XCCDF rule evaluations across 4 assessed subjects.
Control sc-8 assessment outcome
Control sc-8 is partially-satisfied based on 21 passing and 3 failing mapped XCCDF rule evaluations across 4 assessed subjects.
Control si-2 assessment outcome
Control si-2 is partially-satisfied based on 10 passing and 2 failing mapped XCCDF rule evaluations across 4 assessed subjects.
Control si-4 assessment outcome
Control si-4 is partially-satisfied based on 11 passing and 1 failing mapped XCCDF rule evaluations across 4 assessed subjects.
POA&M Items (11)
Remediate ac-2
Address non-compliance for control ac-2 with 5 failing rule evaluations
Remediate au-2
Address non-compliance for control au-2 with 8 failing rule evaluations
Remediate cm-2
Address non-compliance for control cm-2 with 2 failing rule evaluations
Remediate cm-6
Address non-compliance for control cm-6 with 1 failing rule evaluations
Remediate cm-7
Address non-compliance for control cm-7 with 3 failing rule evaluations
Remediate ia-5
Address non-compliance for control ia-5 with 3 failing rule evaluations
Remediate sc-13
Address non-compliance for control sc-13 with 2 failing rule evaluations
Remediate sc-28
Address non-compliance for control sc-28 with 2 failing rule evaluations
Remediate sc-8
Address non-compliance for control sc-8 with 3 failing rule evaluations
Remediate si-2
Address non-compliance for control si-2 with 2 failing rule evaluations
Remediate si-4
Address non-compliance for control si-4 with 1 failing rule evaluations