POA&M Information
Referenced System Security Plan
SSP Location: trestle://system-security-plans/Ubuntu-System-ssp-fedramp-low/system-security-plan.json
Findings (18)
Control ac-1 assessment outcome
Control ac-1 is partially-satisfied based on 20 passing and 4 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-2 assessment outcome
Control ac-2 is partially-satisfied based on 20 passing and 4 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ac-3 assessment outcome
Control ac-3 is partially-satisfied based on 96 passing and 12 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control au-12 assessment outcome
Control au-12 is partially-satisfied based on 4 passing and 14 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control au-3 assessment outcome
Control au-3 is partially-satisfied based on 4 passing and 8 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control cm-1 assessment outcome
Control cm-1 is partially-satisfied based on 4 passing and 2 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control cm-2 assessment outcome
Control cm-2 is partially-satisfied based on 4 passing and 2 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control cm-6 assessment outcome
Control cm-6 is partially-satisfied based on 9 passing and 3 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control cm-7 assessment outcome
Control cm-7 is partially-satisfied based on 9 passing and 3 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ia-5 assessment outcome
Control ia-5 is partially-satisfied based on 14 passing and 4 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control ia-5.1 assessment outcome
Control ia-5.1 is partially-satisfied based on 179 passing and 31 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control mp-2 assessment outcome
Control mp-2 is partially-satisfied based on 96 passing and 12 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control sa-3 assessment outcome
Control sa-3 is partially-satisfied based on 4 passing and 2 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control sa-8 assessment outcome
Control sa-8 is partially-satisfied based on 4 passing and 2 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control sc-28 assessment outcome
Control sc-28 is partially-satisfied based on 21 passing and 3 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control sc-28.1 assessment outcome
Control sc-28.1 is partially-satisfied based on 21 passing and 3 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control sc-8 assessment outcome
Control sc-8 is partially-satisfied based on 14 passing and 4 failing mapped XCCDF rule evaluations across 6 assessed subjects.
Control sc-8.1 assessment outcome
Control sc-8.1 is partially-satisfied based on 14 passing and 4 failing mapped XCCDF rule evaluations across 6 assessed subjects.
POA&M Items (18)
Remediate ac-1
Address non-compliance for control ac-1 with 4 failing rule evaluations
Remediate ac-2
Address non-compliance for control ac-2 with 4 failing rule evaluations
Remediate ac-3
Address non-compliance for control ac-3 with 12 failing rule evaluations
Remediate au-12
Address non-compliance for control au-12 with 14 failing rule evaluations
Remediate au-3
Address non-compliance for control au-3 with 8 failing rule evaluations
Remediate cm-1
Address non-compliance for control cm-1 with 2 failing rule evaluations
Remediate cm-2
Address non-compliance for control cm-2 with 2 failing rule evaluations
Remediate cm-6
Address non-compliance for control cm-6 with 3 failing rule evaluations
Remediate cm-7
Address non-compliance for control cm-7 with 3 failing rule evaluations
Remediate ia-5
Address non-compliance for control ia-5 with 4 failing rule evaluations
Remediate ia-5.1
Address non-compliance for control ia-5.1 with 31 failing rule evaluations
Remediate mp-2
Address non-compliance for control mp-2 with 12 failing rule evaluations
Remediate sa-3
Address non-compliance for control sa-3 with 2 failing rule evaluations
Remediate sa-8
Address non-compliance for control sa-8 with 2 failing rule evaluations
Remediate sc-28
Address non-compliance for control sc-28 with 3 failing rule evaluations
Remediate sc-28.1
Address non-compliance for control sc-28.1 with 3 failing rule evaluations
Remediate sc-8
Address non-compliance for control sc-8 with 4 failing rule evaluations
Remediate sc-8.1
Address non-compliance for control sc-8.1 with 4 failing rule evaluations