3.0 STATEMENT OF WORK (SOW) - General Services …

The on-going monitoring process will align with Tasks M-1 – M-7 of the RMF, as well as the NIST SP 800-53 CA and Cybersecurity Framework DE.CM families of controls. Any issues identified that could increase the risk of the system to an unacceptable level will be documented and tracked to completion by a Plan of Action and Milestones (POA&M). ................
................