*About the RAM Update

Remediation Actions & Milestones (RAMs)

During the Assessment process, remediation actions will need to be identified for each objective that is not fully met. The i2ACT tool offers two options:

1. User Customized List of Remediation Actions & Milestones:

Often a remediation task will apply to multiple cybersecurity controls and remediation for a given control may involve multiple tasks.

In the new i2ACT tool, a given remediation task can be defined once and associated with multiple controls. The software allows the user to create a custom list of Remediation Actions and Milestones (RAMs) which will be stored in a database using a specific numbering system. These custom RAMs will be accessible by the user at any point during the assessment process.

2. I2 Suggested Remediation Actions & Milestones:

i2 also offers a set of “Best Practice” RAMs (over 400) that have been developed over the course of the last 10 years of Assessment and Compliance engagements. The RAMs can be purchased with the i2ACT Tool or can be purchased as an UPGRADE at any time after the initial purchase of the tool. .

**Coming Soon - CMMC Level 3

The i2ACT CMMC Level 3 product is under development and will be released when the CMMC Level 3 requirements have been finalized and become required for contractors handling highly sensitive Controlled Unclassified Information (CUI) on DoD programs.