Continuous Diagnostics and Mitigation (CDM)
HHS commits to continuous monitoring, after information security found ‘not effective’
HHS is working with the Department of Homeland Security to implement automated CDM tools.
CISA revising Zero Trust Maturity Model to better align it with CDM services
CISA has had several discussions with the Office of Management and Budget about developing metrics assessing agencies' progress adopting zero trust.
CDM increasing visibility into agencies post-Cyber Executive Order
Acting Program Manager Richard Grabowski tells FedScoop about changes to CISA's Continuous Diagnostics and Mitigation Program made since the cybersecurity executive order last May.
Dunkin: DOE’s cybersecurity posture ‘stronger’ than D grade reflects
The CIO responded to criticism her department's priorities aren't in order and leave it vulnerable to attack.
IRS cyber deficiencies leave taxpayer data at risk, IG report says
American Rescue Plan Act funds have helped address the problem, but more is needed to modernize aging systems.
CISA ordered to automate collection of cybersecurity metrics by April 2022
OMB expects to begin grading agencies with a compliance scorecard based on the data by the end of 2022.