What’s next for CISA’s CDM program that gives cybersecurity tools to federal agencies

CISA plans to accelerate the Continuous Diagnostics and Mitigation program, which provides federal agencies with cybersecurity tools. Priorities include task automation, data unification, and data-driven risk management; SIEM-as-a-Service will get a three-year development plan.

• Three CDM goals: speed, data unification, and data-driven risk management
• SIEM-as-a-Service to get three-year roadmap with staff expansion
• CISA will buy outcomes, not products, and aggregate agency demand
• Program evolves with lessons from SolarWinds attack on nine agencies