Statement

West Texas A&M University must develop and update a plan of action and milestones for the information system to document the organization’s planned remedial actions to correct weaknesses or deficiencies noted during the assessment of the security controls and to reduce or eliminate known vulnerabilities.

Applicability

This control applies to all West Texas A&M information resources. The intended audience for this control includes all information resource owners and custodians of information resources.

Implementation

The ISO will work with resource owners and custodians to develop and maintain a plan of action for remedial actions to correct deficiencies noted during the assessment of the security controls.