CGRC : Certified in Governance Risk and Compliance Questions and Answers Get Full PDF Question.51 Which reference describes what should be contained in a POA&M?(A) OMB M 02-11(B) OMB M 02-03(C) NIST SP 800-37 Rev 1(D) OMB M 02-01 51. Click here to View Answer Correct Answer : (D) OMB M 02-01 Pages: 1 2 3 4 5 6 7 8 9 10