Plan (Glossary)

An artifact or collection of artifacts that provides oversight for implementing defined CMMC policies. A plan should include a mission and/or vision statement, strategic goals/objectives, relevant standards and procedures, and the people, funding, and tool resources needed to implement the defined CMMC policies.  Unlike Procedures, Plans are inherently intended to be more flexible because the nature of an event can vary.