Archived Content
In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.The Continuous Diagnostics and Mitigation (CDM) Program provides a dynamic approach to fortifying the cybersecurity of government networks and systems. The CDM Program delivers cybersecurity tools, integration services, and dashboards that help participating agencies improve their security posture by:
- Reducing agency threat surface
- Increasing visibility into the federal cybersecurity posture
- Improving federal cybersecurity response capabilities
- Streamlining Federal Information Security Modernization Act (FISMA) reporting
The CDM Program was developed in 2012 to support government-wide and agency-specific efforts to provide risk-based, consistent, and cost-effective cybersecurity solutions to protect federal civilian networks across all organizational tiers.
To learn more, read the CDM Program Overview fact sheet (pdf, 308KB).
CDM Solutions and Success Stories
CDM Solutions for Federal Agencies
The CDM Program assists agencies to better understand and strengthen their network defense.
Department of Veterans Affairs Success Story
Discover how the Department of Veterans Affairs (VA) obtained further visibility into its networks through the implementation CDM hardware.
Small Business Administration Success Story
The SBA used CDM services and tools to secure its IT infrastructure.
Department of Health and Human Services Success Story
Understand how the HHS worked with the CDM program to strengthen its cybersecurity threat intelligence.
CDM Capabilities
CDM Capabilities: Asset Management
Discover the CDM program's Asset Management capability.
CDM Capabilities: Identity and Access Management
Learn more about the CDM program's Identity and Access Management capability.
CDM Capabilities: Network Security Management
To learn more about the CDM program's Network Security Management capability.
CDM Capabilities: Data Protection Management
To learn more about the CDM program's Data Protection Management capability.
Agency and Federal Dashboards, AWARE, Shared Services Platform
CDM Agency and Federal Dashboards
The CDM Agency Dashboards receive and display information from CDM tools and then push summarized information for display.
Agency-Wide Adaptive Risk Enumeration (AWARE)
AWARE provides participating agencies with situational awareness of cyber risk and enables timely remediation of threats and vulnerabilities.
CDM Program Shared Services Platform
The CDM Shared Services Platform provides non-CFO Act agencies with access to CDM capabilities.
CDM Mobile and Cloud Resources
CDM: Mobile
Learn more about the CDM program's focus on securing mobile assets across the Federal Enterprise.
CDM: Cloud
The CDM Program continues to evolve to equip agencies with monitoring tools and capabilities to understand the cloud environment.
CDM Acquisition Approach and Program Training
Resources
CDM Program Overview Fact Sheet
This document provides an overview of the CDM program.
CDM Capabilities: Asset Management
Discover the CDM program's Asset Management capability.
CDM Capabilities: Identity and Access Management
Learn more about the CDM program's Identity and Access Management capability.
CDM Capabilities: Network Security Management
To learn more about the CDM program's Network Security Management capability.
CDM Capabilities: Data Protection Management
To learn more about the CDM program's Data Protection Management capability.
CDM Program Dashboard Ecosystem
The CDM Program Dashboard Ecosystem is a collective place for agencies to use to better understand, prioritize, and mitigate cyber risks.
CDM Program AWARE Scoring Fact Sheet
This Fact Sheet assists agencies with the risk-scoring methodology that enables timely remediation of threats and vulnerabilities.
CDM Program Shared Services Platform
The CDM Shared Services Platform provides non-CFO Act agencies with access to CDM capabilities.
Contact Us
For other CDM Program questions, email CDM@cisa.dhs.gov.
Careers with CISA
Are you interested in joining the CISA team?