Generate POA&M entries for control gaps
generate_poam_entriesTurn a list of unimplemented NIST SP 800-171 controls into structured Plan of Action & Milestones (POA&M) entries, and - the part that decides whether the plan is usable - sort them by eligibility under 32 CFR 170.21. Most gaps CANNOT go on a CMMC Level 2 POA&M: the rule bars every requirement worth more than 1 point (excepting 3.13.11 when encryption is employed but not FIPS-validated), bars six named 1-point requirements outright, and permits no POA&M at all below a score of 88. Returns per-entry eligibility with the reason, the requirements that must close before the assessment, and the single 180-day closeout window. Call this when the user has assessment gaps and needs a remediation plan artifact.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| gaps | Yes | The unimplemented or partially implemented controls | |
| conditionalStatusDate | No | Conditional CMMC Status Date (YYYY-MM-DD), if one exists. The 180-day closeout window runs from this date - NOT from the day the plan is written - so without it no deadline can be computed. |