The CDM Program

The Continuous Diagnostics and Mitigation (CDM) program is a dynamic approach to fortifying the cybersecurity of government networks and systems. CDM provides federal departments and agencies with capabilities and tools that identify cybersecurity risks on an ongoing basis, prioritize these risks based upon potential impacts, and enable cybersecurity personnel to mitigate the most significant problems first.

The CDM Program consists of the CDM Program Tools and Continuous Monitoring as a Service (CMaaS) Blanket Purchase Agreement (BPA) and the 132-44 CDM Tools Special Item Number (SIN).

The tools are available for purchase on either vehicle until the CDM/CMaaS BPA expires on August 11, 2018. After the BPA expires, customers will still be able to acquire CDM tools using the 132-44 CDM Tools SIN.

How To Order

Visit our How to Order page.

How to order through CDM

Back to Top

Guides and Directives

CDM guides and directives

Our Guides and Directives page has instructions and clarifications for agencies to meet FISMA requirements.

Back to Top

CDM Capabilities

Discover CDM capabilities

Our Industry Partners

CDM industry partners

Back to Top

Frequently Asked Questions (FAQs)

Read our CDM Program FAQs.


What is Continuous Diagnostics and Mitigation (CDM)?

How does the CDM program help protect networks?

How is the federal government using CDM?

Back to Top

print Share Icon Last Reviewed 2017-10-26