Continuous Diagnostics and Mitigation (CDM) is starting to become a reality as an Information Systems Continuous Monitoring (ISCM) approach for civilian agencies across government. The Department of Homeland Security (DHS) is leveraging a Congressional appropriation to purchase critical cyber security products, including tools and sensors, that enhance and expand department and agency ISCM capabilities.

So where are we? OMB required all agencies to develop CDM/ISCM strategies by February 28, 2014. Further, agencies must finalize their CDM/ISCM implementation plans and meet initial purchasing requirements by the end of FY 2014. MeriTalk interviewed 152 Federal cyber security/CDM leaders to get under the hood and reveal progress to date.

On the other side of the road, industry partners play a critical role in the successful roll out of CDM – providing the tools, experience, and knowledge. This report takes a look under the hood into who’s doing what, progress made, and understanding challenges to date. It also provides the industry – CDM partners’ – points of view.