POA&M Information
Referenced System Security Plan
SSP Location: trestle://system-security-plans/Ubuntu-System-ssp-fedramp-high/system-security-plan.json
Findings (46)
Control ac-1 assessment outcome
Control ac-1 is partially-satisfied based on 20 passing and 4 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-10 assessment outcome
Control ac-10 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-11 assessment outcome
Control ac-11 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-11.1 assessment outcome
Control ac-11.1 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-12 assessment outcome
Control ac-12 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-17.1 assessment outcome
Control ac-17.1 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-17.2 assessment outcome
Control ac-17.2 is partially-satisfied based on 14 passing and 4 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-2 assessment outcome
Control ac-2 is partially-satisfied based on 20 passing and 4 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-2.1 assessment outcome
Control ac-2.1 is partially-satisfied based on 20 passing and 4 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-2.3 assessment outcome
Control ac-2.3 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-2.5 assessment outcome
Control ac-2.5 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-3 assessment outcome
Control ac-3 is partially-satisfied based on 96 passing and 12 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-4.4 assessment outcome
Control ac-4.4 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-5 assessment outcome
Control ac-5 is partially-satisfied based on 96 passing and 12 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-6 assessment outcome
Control ac-6 is partially-satisfied based on 96 passing and 12 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-6.1 assessment outcome
Control ac-6.1 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-6.2 assessment outcome
Control ac-6.2 is partially-satisfied based on 31 passing and 5 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-6.5 assessment outcome
Control ac-6.5 is partially-satisfied based on 31 passing and 5 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control au-12 assessment outcome
Control au-12 is partially-satisfied based on 4 passing and 14 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control au-3 assessment outcome
Control au-3 is partially-satisfied based on 4 passing and 8 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control au-3.1 assessment outcome
Control au-3.1 is partially-satisfied based on 4 passing and 8 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control au-5.1 assessment outcome
Control au-5.1 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control au-5.2 assessment outcome
Control au-5.2 is partially-satisfied based on 4 passing and 2 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control au-6.1 assessment outcome
Control au-6.1 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control au-6.4 assessment outcome
Control au-6.4 is partially-satisfied based on 4 passing and 2 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control au-7 assessment outcome
Control au-7 is partially-satisfied based on 4 passing and 14 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control au-9.2 assessment outcome
Control au-9.2 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control au-9.3 assessment outcome
Control au-9.3 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control cm-1 assessment outcome
Control cm-1 is partially-satisfied based on 4 passing and 2 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control cm-2 assessment outcome
Control cm-2 is partially-satisfied based on 4 passing and 2 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control cm-6 assessment outcome
Control cm-6 is partially-satisfied based on 9 passing and 3 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control cm-7 assessment outcome
Control cm-7 is partially-satisfied based on 9 passing and 3 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control cm-7.1 assessment outcome
Control cm-7.1 is partially-satisfied based on 4 passing and 2 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control cm-9 assessment outcome
Control cm-9 is partially-satisfied based on 4 passing and 2 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ia-5 assessment outcome
Control ia-5 is partially-satisfied based on 14 passing and 4 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ia-5.1 assessment outcome
Control ia-5.1 is partially-satisfied based on 179 passing and 31 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control mp-2 assessment outcome
Control mp-2 is partially-satisfied based on 96 passing and 12 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control sa-10 assessment outcome
Control sa-10 is partially-satisfied based on 4 passing and 2 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control sa-3 assessment outcome
Control sa-3 is partially-satisfied based on 4 passing and 2 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control sa-8 assessment outcome
Control sa-8 is partially-satisfied based on 4 passing and 2 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control sc-28 assessment outcome
Control sc-28 is partially-satisfied based on 21 passing and 3 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control sc-28.1 assessment outcome
Control sc-28.1 is partially-satisfied based on 21 passing and 3 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control sc-8 assessment outcome
Control sc-8 is partially-satisfied based on 14 passing and 4 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control sc-8.1 assessment outcome
Control sc-8.1 is partially-satisfied based on 14 passing and 4 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control si-2.2 assessment outcome
Control si-2.2 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control si-4.2 assessment outcome
Control si-4.2 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.
POA&M Items (46)
Remediate ac-1
Address non-compliance for control ac-1 with 4 failing rule evaluations
Remediate ac-10
Address non-compliance for control ac-10 with 1 failing rule evaluations
Remediate ac-11
Address non-compliance for control ac-11 with 1 failing rule evaluations
Remediate ac-11.1
Address non-compliance for control ac-11.1 with 1 failing rule evaluations
Remediate ac-12
Address non-compliance for control ac-12 with 1 failing rule evaluations
Remediate ac-17.1
Address non-compliance for control ac-17.1 with 1 failing rule evaluations
Remediate ac-17.2
Address non-compliance for control ac-17.2 with 4 failing rule evaluations
Remediate ac-2
Address non-compliance for control ac-2 with 4 failing rule evaluations
Remediate ac-2.1
Address non-compliance for control ac-2.1 with 4 failing rule evaluations
Remediate ac-2.3
Address non-compliance for control ac-2.3 with 1 failing rule evaluations
Remediate ac-2.5
Address non-compliance for control ac-2.5 with 1 failing rule evaluations
Remediate ac-3
Address non-compliance for control ac-3 with 12 failing rule evaluations
Remediate ac-4.4
Address non-compliance for control ac-4.4 with 1 failing rule evaluations
Remediate ac-5
Address non-compliance for control ac-5 with 12 failing rule evaluations
Remediate ac-6
Address non-compliance for control ac-6 with 12 failing rule evaluations
Remediate ac-6.1
Address non-compliance for control ac-6.1 with 1 failing rule evaluations
Remediate ac-6.2
Address non-compliance for control ac-6.2 with 5 failing rule evaluations
Remediate ac-6.5
Address non-compliance for control ac-6.5 with 5 failing rule evaluations
Remediate au-12
Address non-compliance for control au-12 with 14 failing rule evaluations
Remediate au-3
Address non-compliance for control au-3 with 8 failing rule evaluations
Remediate au-3.1
Address non-compliance for control au-3.1 with 8 failing rule evaluations
Remediate au-5.1
Address non-compliance for control au-5.1 with 1 failing rule evaluations
Remediate au-5.2
Address non-compliance for control au-5.2 with 2 failing rule evaluations
Remediate au-6.1
Address non-compliance for control au-6.1 with 1 failing rule evaluations
Remediate au-6.4
Address non-compliance for control au-6.4 with 2 failing rule evaluations
Remediate au-7
Address non-compliance for control au-7 with 14 failing rule evaluations
Remediate au-9.2
Address non-compliance for control au-9.2 with 1 failing rule evaluations
Remediate au-9.3
Address non-compliance for control au-9.3 with 1 failing rule evaluations
Remediate cm-1
Address non-compliance for control cm-1 with 2 failing rule evaluations
Remediate cm-2
Address non-compliance for control cm-2 with 2 failing rule evaluations
Remediate cm-6
Address non-compliance for control cm-6 with 3 failing rule evaluations
Remediate cm-7
Address non-compliance for control cm-7 with 3 failing rule evaluations
Remediate cm-7.1
Address non-compliance for control cm-7.1 with 2 failing rule evaluations
Remediate cm-9
Address non-compliance for control cm-9 with 2 failing rule evaluations
Remediate ia-5
Address non-compliance for control ia-5 with 4 failing rule evaluations
Remediate ia-5.1
Address non-compliance for control ia-5.1 with 31 failing rule evaluations
Remediate mp-2
Address non-compliance for control mp-2 with 12 failing rule evaluations
Remediate sa-10
Address non-compliance for control sa-10 with 2 failing rule evaluations
Remediate sa-3
Address non-compliance for control sa-3 with 2 failing rule evaluations
Remediate sa-8
Address non-compliance for control sa-8 with 2 failing rule evaluations
Remediate sc-28
Address non-compliance for control sc-28 with 3 failing rule evaluations
Remediate sc-28.1
Address non-compliance for control sc-28.1 with 3 failing rule evaluations
Remediate sc-8
Address non-compliance for control sc-8 with 4 failing rule evaluations
Remediate sc-8.1
Address non-compliance for control sc-8.1 with 4 failing rule evaluations
Remediate si-2.2
Address non-compliance for control si-2.2 with 1 failing rule evaluations
Remediate si-4.2
Address non-compliance for control si-4.2 with 1 failing rule evaluations