CYBERSECURITYTRACKER
Permanent story citation

What’s next for CISA’s CDM program that gives cybersecurity tools to federal agencies

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7431

As cited

Copy frozen at (site build).

government policy

What’s next for CISA’s CDM program that gives cybersecurity tools to federal agencies

The Cybersecurity and Infrastructure Security Agency (CISA) is focusing on three core goals for its Continuous Diagnostics and Mitigation (CDM) program: velocity, unification, and data-driven risk management. CISA officials outlined a three-year roadmap to expand and enhance the program's Security Information and Event Management (SIEM) as a Service offering, while the federal chief information security officer emphasized acquiring outcomes rather than products and designing for continuous improvement. The CDM program has evolved since the SolarWinds breach to provide federal agencies with greater operational visibility for coordinated threat response.

Why it matters: Federal agencies and their security teams depend on CDM tools and capabilities to detect and respond to threats; practitioners should track the program's acceleration roadmap and three-year SIEM enhancements to understand how federal acquisition models and shared capabilities will evolve.

VendorsSolarWinds
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary