A Plan of Action and Milestones (POA&M) is. Remedial action plans, also known as plans of action and milestones (POA&M), help agencies identify and assess security weaknesses in information systems, set priorities, and monitor progress in correcting the weaknesses. POA&M is a document that.