Business units are not timely creating POA&Ms or consistently entering required POA&M information, TIGTA found. For example, almost a third (32%) of 4,370 plans created on or after Jan. 1, 2018, ...