CDM Success Stories in an Age of Cyber-attack Surface Expansion

This event qualifies for .1 CEUs

This event qualifies for 1 CPEs

This event qualifies for 1 CLPs

The cyber-attack surface has exploded to include more than just hardware and on premises devices. This can make implementing CDM and achieving success even more difficult-- one of the most common challenges has always been finding the time and resources to do so.

So how are agency cyber leaders keeping up?

While the Cybersecurity and Infrastructure Security Agency’s Continuous Diagnostics and Mitigation (CDM) program is now a dozen years old, it has always been intended as a comprehensive, risk-based security approach that enables federal agencies to quickly address threats in their environment.

For instance, CISA is looking to expand the program into providing tools to protect devices in the Internet of Things (IoT) and operations technology (OT) that historically had not been connected to the internet but now are rapidly being made more accessible.

Another way the CDM program is evolving is by becoming more modular and “more of a data-centric type of activity beyond just a toolset activity,” according to Richard Grabowski, the CDM deputy program manager. And cybersecurity professionals and technology asset managers alike should be aware of CDM Vulnerability Management (VUL) Capability.

Join us as thought leaders from government and industry discuss how the CDM program is changing to reflect the evolving threat environment and how agencies are working toward CDM success, despite the expanding attack surface.

Learning Objectives

Identify the components of an effective CDM compliance program for your agency, including confirming assets are functioning properly and tracking changes or additions to your assets
Evaluate the role that automation can play in the asset discovery and visibility process
Outline approaches that reduce your agency’s threat surface and improve response capabilities
Learn from peers how they’ve been able to keep up with the evolution of CDM

Speaker and Presenter Information

Hemant Baidwan

Hemant Baidwan

CISO

DHS OCIO (Pending Agency Approval)

John Schneider

Senior Systems Engineer,

Axonius Federal

Michael Kennedy

Contributing Editor,
FedInsider

Relevant Government Agencies

Air Force, Army, Navy & Marine Corps, Intelligence Agencies, DOD & Military, Office of the President (includes OMB), Dept of Agriculture, Dept of Commerce, Dept of Education, Dept of Energy, Dept of Health & Human Services, Dept of Homeland Security, Dept of Housing & Urban Development, Dept of the Interior, Dept of Justice, Dept of Labor, Dept of State, Dept of Transportation, Dept of Treasury, Dept of Veterans Affairs, EPA, GSA, USPS, SSA, NASA, Other Federal Agencies, Legislative Agencies (GAO, GPO, LOC, etc.), Judicial Branch Agencies, State Government, County Government, City Government, Municipal Government, CIA, FEMA, Office of Personnel Management, Coast Guard, National Institutes of Health, FAA, Census Bureau, USAID, National Guard Association, EEOC, Federal Government, State & Local Government, FDA, Foreign Governments/Agencies, NSA, FCC