FedRAMP Import · POA&M Tracker

✓Upload workbook

✓Select worksheets

3Map columns

4Validate

5Import

Northwind-GovCloud-POAM-2026-08.xlsx

2.1 MB · FedRAMP POA&M template v3 detected · uploaded just now by Dana Mitchell

Template recognised

Worksheets selected

Open POA&M Items142 data rows

Closed POA&M Items218 data rows

Configuration Findings31 data rows

Column Mapping — Open POA&M Items

26 of 27 columns matched automatically from the template header row

One column needs your attention. “Supporting Documents” holds file names rather than uploaded files — those rows will import as text references, not attachments.

Col	Spreadsheet Header		Required	Sample Value
B	POAM ID	→	Mandatory	V-0142-AC(2)
C	Controls	→	Mandatory	RA-5, SC-13
D	Weakness Name	→	Mandatory	Red Hat Update for glibc security
E	Weakness Description	→	Mandatory	The remote host contains one or more…
F	Weakness Detector Source	→	Mandatory	Tenable Nessus
H	Asset Identifier	→	Mandatory	172.246.15.3 (80/TCP)
I	Point of Contact	→	Mandatory	John Doe — Example CSP
R	Original Risk Rating	→	Mandatory	Moderate
X	Supporting Documents	→	Situational	\\fileshare\poam\evidence\0142.pdf
Z	BOD 22-01 tracking	→	Situational	Yes
AB	CVE	→	Situational	CVE-2026-0714

Showing 11 of 27 mapped columns

Validation Preview

From the last dry run — nothing has been written yet

Ready to import

331

Warnings

Blocking errors

Row	Severity	Column	Issue
31	Error	POAM ID	Duplicate of row 18 — V-0087-SI(2) already appears in this sheet
44	Error	Original Risk Rating	Value “Critical” is not in the template list (Low, Moderate, High)
52	Error	Scheduled Completion Date	Not a valid date — cell contains “TBD”
67	Warning	Point of Contact	“A. Sandoval” does not match any user in this organization
89	Warning	Asset Identifier	Asset 10.42.9.6 is not present in the Integrated Inventory Workbook
104	Warning	Deviation Rationale	Risk adjustment is “Yes” but no rationale was supplied

7 errors must be resolved or skipped before importing.

Import Options

Match existing items by POA&M IDUpdate in place rather than creating duplicates

Create findings for imported itemsKeeps the finding → POA&M chain intact

Overwrite remediation plansOff by default — local edits are preserved

Recalculate due dates from risk rating

Write every row to the audit trail

Assign imported items to

Recent Imports

2026-07 monthly ConMon
348 rows · 12 created · 336 updated

Aug 3 · J. Brooks

2026-06 monthly ConMon
341 rows · 19 created · 322 updated

Jul 2 · J. Brooks

SAR risk exposure table
Rolled back — wrong system selected

Jun 14 · D. Mitchell

Export

Produce a submission-ready workbook in the same template, with the Open, Closed and Configuration Findings worksheets populated.