Skip to main content
U.S. flag

An official website of the United States government

Here’s how you know

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

HTTPS

Secure .gov websites use HTTPS
A lock (LockA locked padlock) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Free Cyber ServicesSecure by design Secure Our WorldShields UpReport A Cyber Issue

Cybersecurity & Infrastructure Security Agency logo America’s Cyber Security Defense Agency National Coordinator For Critical Infrastructure Security and ResilienceCybersecurity & Infrastructure Security Agency logo America’s Cyber Security Defense Agency National Coordinator For Critical Infrastructure Security and Resilience
CISA Logo

Search

 

America's Cyber Defense Agency
 
  • Topics
    Cybersecurity Best Practices
    Cyber Threats and Advisories
    Critical Infrastructure Security and Resilience
    Election Security
    Emergency Communications
    Industrial Control Systems
    Information and Communications Technology Supply Chain Security
    Partnerships and Collaboration
    Physical Security
    Risk Management
    How can we help?
    GovernmentEducational InstitutionsIndustryState, Local, Tribal, and TerritorialIndividuals and FamiliesSmall and Medium BusinessesFind Help LocallyFaith-Based CommunityExecutivesHigh-Risk Communities
  • Spotlight
  • Resources & Tools
    All Resources & Tools
    Services
    Programs
    Resources
    Training
    Groups
  • News & Events
    News
    Events
    Cybersecurity Alerts & Advisories
    Directives
    Request a CISA Speaker
    Congressional Testimony
    CISA Conferences
    CISA Live!
  • Careers
    Benefits & Perks
    HireVue Applicant Reasonable Accommodations Process
    Hiring
    Resume & Application Tips
    Students & Recent Graduates
    Veteran and Military Spouses
  • About
    Divisions & Offices
    Regions
    Leadership
    Doing Business with CISA
    Site Links
    CISA GitHub
    CISA Central
    Contact Us
    Subscribe
    Transparency and Accountability
    Policies & Plans

Free Cyber ServicesSecure by design Secure Our WorldShields UpReport A Cyber Issue

Breadcrumb
  1. Home
  2. Resources & Tools
  3. Programs
  4. Continuous Diagnostics and Mitigation (CDM) Program
Share:

Resources & Tools

  • All Resources & Tools
  • Services
  • Programs
  • Resources
  • Training
  • Groups

Continuous Diagnostics and Mitigation (CDM) Program

Related topics:
Cybersecurity Best Practices

​The Continuous Diagnostics and Mitigation (CDM) Program provides a dynamic approach to fortifying the cybersecurity of government networks and systems. The CDM Program delivers cybersecurity tools, integration services, and dashboards that help participating agencies improve their security posture by:

  • Reducing agency threat surface
  • Increasing visibility into the federal cybersecurity posture
  • Improving federal cybersecurity response capabilities
  • Streamlining Federal Information Security Modernization Act (FISMA) reporting

The CDM Program was developed in 2012 to support government-wide and agency-specific efforts to provide risk-based, consistent, and cost-effective cybersecurity solutions to protect federal civilian networks across all organizational tiers.

To learn more, read the CDM Program Overview fact sheet (pdf, 308KB).

Video Overview

Learn more about CDM’s capabilities and how the program works.

The Evolution of CDM

AWARE: Measuring Cybersecurity Performance

CDM Solutions and Success Stories

Evolving CDM to Transform Government Cybersecurity Operations and Enable CISA’s Approach to Interactive Cyber Defense

JUL 21, 2023 | BLOG
Read more from Associate Director Michael Duffy about the CDM Program’s journey during its first 10 years and learn more about how the program contributes to the Federal Government’s cyber defenses.

CDM Solutions for Federal Agencies

The CDM Program assists agencies to better understand and strengthen their network defense.

CDM Shared Services Success Story

PUBLICATION
Learn how the CDM Shared Services Platform (SSP) provides 75 eligible non-Chief Financial Officers (CFO) Act agencies with access to CDM cyber capabilities.
Download File (PDF, 172.6 KB)

Department of Agriculture Success Story

PUBLICATION
Learn how the Department of Agriculture (USDA) used a CDM Identity and Access Management (IDAM) tool to support their goal of centralizing the client IDAM services across the department into its Client Experience Center.
Download File (PDF, 198.53 KB)

CDM Capabilities

CDM Capabilities: Asset Management

MAY 28, 2021 | PUBLICATION
Discover the CDM program's Asset Management capability.

CDM Capabilities: Identity and Access Management

MAY 28, 2021 | PUBLICATION
Learn more about the CDM program's Identity and Access Management capability.

CDM Capabilities: Network Security Management

MAY 28, 2021 | PUBLICATION
To learn more about the CDM program's Network Security Management capability.

CDM Capabilities: Data Protection Management

MAY 28, 2021 | PUBLICATION
To learn more about the CDM program's Data Protection Management capability.

Agency and Federal Dashboards, AWARE, Shared Services Platform

CDM Agency and Federal Dashboards

PUBLICATION
The CDM Agency Dashboards receive and display information from CDM tools and then push summarized information for display.
Download File (PDF, 424.81 KB)

Agency-Wide Adaptive Risk Enumeration (AWARE)

OTHER
AWARE provides participating agencies with situational awareness of cyber risk and enables timely remediation of threats and vulnerabilities.
AWARE: Measuring Cybersecurity Performance

CDM Program Shared Services Platform

DEC 17, 2020 | PUBLICATION
The CDM Shared Services Platform provides non-CFO Act agencies with access to CDM capabilities.
Download File (PDF, 416.62 KB)

CDM Mobile and Cloud Resources

CDM: Mobile

Learn more about the CDM program's focus on securing mobile assets across the Federal Enterprise.

CDM: Cloud

The CDM Program continues to evolve to equip agencies with monitoring tools and capabilities to understand the cloud environment.

CDM Acquisition Approach and Program Training

CDM Acquisition Approach

CDM Program Training

Resources

CDM Program Overview Fact Sheet

DEC 17, 2020 | PUBLICATION
This document provides an overview of the CDM program.

Encrypted DNS Implementation Guidance

MAY 16, 2024 |
This document provides Federal Civilian Executive Branch (FCEB) agencies with actionable guidance for the implementation of encrypted DNS protocols and for enhancing the cybersecurity posture of their IT networks.
Download File (PDF, 1.44 MB)

CDM Data Model Document 5.0.1

DEC 04, 2024 | PUBLICATION
This document provides a comprehensive description of a common data schema that supports the associated Logical Data Model to ensure that prescribed diagnostic activities within CDM solutions are consistent across all participating federal agencies.
View Files

CDM ICAM Reference Architecture

PUBLICATION
This document refines and clarifies the CDM Program’s Identity and Access Management (IDAM) scope by providing a reference for how CDM IDAM capabilities may integrate into an agency’s ICAM architecture.
Download File (PDF, 4.36 MB)

Careers with CISA

Are you interested in joining the CISA team? 

Visit CISA Careers

Contact

For other CDM Program questions, email CDM@cisa.dhs.gov.

Tags

Topics: Cybersecurity Best Practices
Return to top
  • Topics
  • Spotlight
  • Resources & Tools
  • News & Events
  • Careers
  • About
Cybersecurity & Infrastructure Security Agency
  • Facebook
  • X
  • LinkedIn
  • YouTube
  • Instagram
  • RSS
CISA Central 1-844-Say-CISA SayCISA@cisa.dhs.gov
DHS Seal
CISA.gov
An official website of the U.S. Department of Homeland Security
  • About CISA
  • Budget and Performance
  • DHS.gov
  • FOIA Requests
  • No FEAR Act
  • Office of Inspector General
  • Privacy Policy
  • Subscribe
  • The White House
  • USA.gov
  • Website Feedback