The present and future state of Federal IT has monumental challenges to address – modernization, data utilization, and automation just to name a few – but none are so critical, or enduring, as cybersecurity. It’s the threat that will never fully go away – and where eternal vigilance, and innovation, are the price of liberty. […]
A privacy impact assessment of the Continuous Diagnostics and Mitigation (CDM) program’s Shared Service Platform has raised no big privacy concerns, according to a report dated Dec. 19, 2019, and reviewed by the Department of Homeland Security’s (DHS) Acting Chief Privacy Officer. […]
Ross Foard, Senior Engineer in the Continuous Diagnostics and Mitigation (CDM) Program Office at the Cybersecurity and Infrastructure Security Agency (CISA), said on Dec. 4 that many Federal agencies are completing work on the second of four phases of the CDM program. […]
According to a Congressional Budget Office (CBO) report released Nov. 21, the Advancing Cybersecurity Diagnostics and Mitigation Act, H.R. 4237, would cost less than $500,000 to implement over the next five years if the legislation becomes law. […]
Kevin Cox, program manager for the Department of Homeland Security’s (DHS) Continuous Diagnostics and Mitigation (CDM) program, today discussed the program’s progress in generating AWARE (Agency-Wide Adaptive Risk Enumeration) algorithm scores for Federal agencies to track relative security status, and about how the program plans to refine the scoring process in the future. […]
The Continuous Diagnostics and Mitigation (CDM) program has an important role to play in protecting Federal systems, but the adoption process can be downright scary for some agencies. On Halloween, MeriTalk will host a webinar to dig through the skeletons and challenges in CDM’s closet, shine a flashlight on the success stories of the program, and ultimately help demystify the CDM program for vendors and agencies alike. […]
The Advancing Cybersecurity Diagnostics and Mitigation Act, H.R. 4237, was unanimously approved by the House Homeland Security Committee on Oct. 23. […]
Efforts to advance mobile and cloud services discovery on Federal networks are among the top priorities of the Continuous Diagnostics and Mitigation (CDM) program in FY2020, said CDM Program Manager Kevin Cox this week. […]
Federal CISO Grant Schneider said today that the Trump administration is busy developing implementation plans for various aspects of the National Cyber Strategy that the White House released in September 2018, and that the Continuous Diagnostics and Mitigation (CDM) program is included in that effort. […]
Using cloud-based tools has helped the Small Business Administration (SBA) meet the intent of the Continuous Diagnostics and Mitigation (CDM) program as budget constraints have caused SBA to be more creative with its resources, the agency’s CIO said today. […]
When cybersecurity works at its best, you barely know anything about it. Because highly secure and efficient networks rarely create their own reasons to make the news. […]
Perhaps the most ambitious and transformational information security project ever attempted by the Federal government – the Continuous Diagnostics and Mitigation (CDM) program – is set to go under the microscope on October 10 at MeriTalk’s CDM Central conference dedicated to navigating the Federal cybersecurity roadmap. […]
Tenable’s Federal Business Development Manager Chris Jensen Shares his Thoughts on CDM Progress, Priorities, and Challenges […]
Now seven years from the launch of the Department of Homeland Security’s (DHS) Continuous Diagnostics and Mitigation (CDM) program, aimed at engineering lasting improvement in Federal agency network security, the move from legacy to cloud-based infrastructure is accelerating rapidly toward the next world of managed services. […]
A plethora of still-developing advanced technologies – plus new systemic approaches that recognize the growing dominance of cloud and managed services – will be key drivers of security improvements for Federal agencies several years from now as they continue to implement the Continuous Diagnostics and Mitigation (CDM) program. […]
It’s an interesting time to take stock of DHS CISA’S Continuous Diagnostics and Mitigation (CDM) program – the big question, seven years in, is CDM improving Federal cyber security? That’s what Hill leaders want to know – and that’s why MeriTalk surveyed 160 Federal government and industry CDM stakeholders to grade the program’s effectiveness. […]
The Department of Homeland Security’s (DHS) Strengthen Federal Cybersecurity Cross-Agency Priority (CAP) goal plan is likely to meet its fiscal year 2019 target for Federal agencies having capabilities to manage user access and privileges that will be monitored on the Federal CDM Dashboard. […]
A sampling of many of the most important private-sector players supplying technology and services through the Continuous Diagnostics and Mitigation (CDM) Program reveals optimism about the pace of Federal agency implementation of the program. […]
Kevin Cox, program manager for the Department of Homeland Security’s (DHS) Continuous Diagnostics and Mitigation (CDM) program, today detailed several priorities for the program office in FY2020 that begins next month. Those include focus on the Agency-Wide Adaptive Risk Enumeration (AWARE) algorithm, the new dashboard ecosystem, enterprise mobility management, cloud security, and protection of high-value assets. […]
Grant Schneider, the Federal government’s chief information security officer, said the Office of Management and Budget (OMB) is aiming to provide “maximum support” to Federal agencies as they work to improve network security. […]
Reps. John Ratcliffe, R-Texas, and Ro Khana, D-Calif., announced today that they will formally introduce the Advancing Continuous Diagnostics Mitigation (CDM) Act later this week. The House bill, which was dropped off on the House floor today, is identical to its Senate companion bill which was introduced on July 30. […]
Kevin Cox, Program Manager for the Department of Homeland Security’s Continuous Diagnostics and Mitigation (CDM) Program, sat down with MeriTalk in June to talk about a range of new and ongoing program activities that are vital to improving Federal agency security. […]
MeriTalk sat down in June with Kevin Cox, Program Manager for the Department of Homeland Security’s Continuous Diagnostics and Mitigation (CDM) Program, to get the latest on program priorities for the coming months and beyond. […]
Rep. John Ratcliffe, R-Texas, confirmed to MeriTalk that he will reintroduce the Advancing Cybersecurity Continuing Diagnostics and Mitigation (CDM) Act. His office said to expect the bill “within the next month or so.” […]
While the Continuous Diagnostics and Mitigation (CDM) program is here to stay for Federal agencies, taking proper approaches to data classification, collection, and analysis are key components to optimizing the program’s aims, security experts said last week at MeriTalk’s Cyber Security Brainstorm event. […]
John Felker, who last month was named assistant director of the Cybersecurity and Infrastructure Security Agency’s (CISA) Integrated Operations Division (IOD), on Thursday discussed IOD’s plans to integrate operations of CISA’s three primary component organizations in order to produce better cyber threat data intelligence that will include inputs from Continuous Diagnostics and Mitigation (CDM) programs implemented by Federal agencies. […]
Sens. Maggie Hassan, D-N.H., and John Cornyn, R-Texas, reintroduced the Advancing Cybersecurity Continuing Diagnostics and Mitigation (CDM) Act on July 30. […]
MeriTalk recently connected with George Young, Vice President of U.S. Public Sector at Elastic, for insight into how the Department of Homeland Security’s CDM (Continuous Diagnostics and Mitigation) Program might soon evolve. […]
The Department of Homeland Security’s (DHS) Continuous Diagnostics and Mitigation (CDM) program aimed at helping Federal agencies fundamentally improve network security is moving ahead in a number of significant, future-leaning areas at the program level to advance its broad cybersecurity mission. […]
News emerged on May 9 that a Russian hacker collective known as Fxmsp claimed to have breached three major U.S.-based antivirus companies. The hackers said they “worked tirelessly” for the first quarter of 2019 to obtain access to the companies’ internal networks, where they extracted sensitive antivirus source code, artificial intelligence models, web security software, and security plug-ins. […]