IAF Generally Implemented an Effective Information Security Program for Fiscal Year 2020 in Support of FISMA

IAF's Chief Information Officer Develop and implement policies and procedures related to Plan of Action and Milestones to ensure all identified security weaknesses are tracked, prioritized, and remediated in a timely manner, including a process to evaluate the adequacy of justifications to extend estimated completion dates and determine the dependencies and completion of milestones that affect the estimated due dates to ensure that they are met.

IAF's Chief Information Officer create a monitoring plan to review and update policies and procedures in accordance with the timeliness requirements established in agency policies.