What’s next for CISA’s CDM program that gives cybersecurity tools to federal agencies
CISA officials outline future plans for the CDM program, emphasizing speed, automation, unified data, and data-driven federal risk management.
Speaking at an Elastic Federal Cyber Defense Breakfast, CISA officials described next steps for the Continuous Diagnostics and Mitigation (CDM) program that supplies cybersecurity tools to federal agencies. Acting deputy program manager Richard Grabowski named velocity, unification, and data-driven risk management as core goals, including a three-year roadmap to expand SIEM-as-a-Service. Federal CISO Mike Duffy urged aggregating demand across agencies, buying outcomes rather than products, and designing acquisition for continuous improvement. CISA's Matt House tied the program's evolution to post-SolarWinds needs for a government-wide common operating picture.
- CDM program priorities: velocity, unification, and data-driven risk management
- Three-year roadmap to expand cloud-based SIEM-as-a-Service offering
- Federal CISO pushes outcome-based acquisition and agency demand aggregation
- Evolution driven by post-SolarWinds need for common operating picture
From the original article
3 min read at cyberscoop.com
Three feds spoke about future plans for the Continuous Diagnostics and Mitigation program, and lessons they’ve learned. The post What’s next for CISA’s CDM program that gives cybersecurity tools to federal agencies appeared first on CyberScoop.
By Tim Starks · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.