Skip to main content  CDM Frequently Asked Questions  What is
Continuous Diagnostics and Mitigation (CDM)?  Consistent with
the federal government’s four-year development of the
Information System Continuous Monitoring (ISCM) methodology, the
CDM program is a dynamic implementation approach to fortifying
the cyber security of computer networks and systems.  The CDM
Program provides capabilities and tools that enable network
administrators to know the state of their respective networks at
any given time, by identifying and ranking problems for priority
resolution.  Why is CDM needed?  The CDM Program helps
standardize security monitoring across the federal government.
CDM’s intent parallels national priority for hardening defenses
in federal networks. CDM has a number of benefits beyond those
associated with certification and accreditation and continuous
authorization supporting the Federal Information Security
Management Act (FISMA) of 2002. CDM offers commercial off-the-
shelf (COTS) tools, with robust terms