U.S. Flag Official website of the Department of Homeland Security
TLP:WHITE

CDM Training

Welcome to the Continuous Diagnostics and Mitigation (CDM) Training Program instructor-led and online learning activities page. Here you will find resources to help develop knowledge and understanding about the CDM Program. The resources available on this page are:

On this page:
Upcoming Events
Past Events
Online Learning  

CDM Training Webinars

Congressional Interest and Support for the Continuous Diagnostics and Mitigation (CDM) Program

This 5-minute video demonstrates the interest from Congress in the CDM program from DHS.  It uses testimony from Representative Gerry Connolly from Virginia's 11th congressional district, Representative John Ratcliffe from Texas's 4th congressional district and Mr. Kevin Cox from the CDM PMO to illustrate the value and benefit of what the CDM program is doing for Federal Agencies.
 
Please note that the video may take 10 to 15 minutes to load and play on Government Furnished Equipment (GFE).
 
Congressional Interest and Support for the Continuous Diagnostics and Mitigation (CDM) Program Video
Congressional Interest and Support for the Continuous Diagnostics and Mitigation (CDM) Program Transcript

Using the Dashboard to Drive Your Vulnerability Management Work Plan – On Demand CDM Course

Learn how to use the Continuous Diagnostics and Mitigation (CDM) dashboard and the Agency-Wide Adaptive Risk Enumeration (AWARE) scoring to understand your agencies exposure to vulnerabilities, to determine which vulnerabilities are critical and thus need prioritized mitigation actions, and how to track, manage, and report mitigation progress.
This 1 hour on-demand session provides participants with an introduction to the following CDM AWARE topics:

  1. Foundational knowledge needed to prepare your agency to use the CDM Dashboard AWARE risk algorithm effectively.
  2. Overview of the CDM AWARE methodology.
  3. How to use AWARE to prioritize mitigation activities to fix the most vulnerable assets first.

Please note that the video may take 10 to 15 minutes to load and play on Government Furnished Equipment (GFE).

Webinar Video
Webinar Presentation Slide Deck
Certificate of Attendance

Using the Continuous Diagnostics and Mitigation Dashboard to Combat WannaCry Ransomware

This 15-minute video explains how a Federal Agency can use the CDM dashboard to identify and mitigation system vulnerabilities that are exploited by the WannaCry Ransomware malware.  The video demonstrates tasks that can be carried out in the CDM agency dashboard to manage risks to agency systems and information that might be otherwise taken advantage of by this negative threat.
 
Please note that the video may take 10 to 15 minutes to load and play on Government Furnished Equipment (GFE).

CDM WannaCry Video
CDM WannaCry Transcript

Upcoming Events

  • July 17, 2018
    10:00 am EDT to 12:00 pm EDT
    Creating Measurements for Hardware & Software Assets Using the Agency Dashboard

    Are you ready to discover if your agencies hardware assets are associated with a FISMA system? Are you ready to use the CDM Agency Dashboard to easily find legacy software? Join us on July 17th to learn how to use the CDM Agency Dashboard to create queries specific to finding measurements for hardware and software assets. You will learn to build and run a query (search) to identify the hardware devices not associated to a FISMA container– hardware devices not associated with an authorized FISMA container is an unauthorized device on the network. You will also learn to create a query for finding legacy software on the network – legacy software can be an unauthorized software asset on the network.
    This online course will use Adobe Connect for the webinar portion and the STEPfwd learning platform for the interactive, hands-on lab activities. Please note that you will need to create a STEPfwd account and complete the introductory lab prior to the class start date.
    Please register by Wednesday, July 11, 2018. Attendance is limited to 40 people per session and will be granted on a first-come, first-served basis. Early registration is highly recommended.
    To register for this event, please visit this link:
    Morning Session (10:00 a.m. - 12:00 p.m.)
     

  • July 17, 2018
    1:00 pm EDT to 3:00 pm EDT
    Creating Measurements for Hardware & Software Assets Using the Agency Dashboard

    Please register by Wednesday, July 11, 2018. Attendance is limited to 40 people per session and will be granted on a first-come, first-served basis. Early registration is highly recommended.
    To register for this event, please visit this link:
    Afternoon Session (1:00 p.m. - 3:00 p.m.)

  • July 31, 2018
    10:00 am EDT to 11:30 am EDT
    Learn How DHS Will Use Your Agency’s Summary Data to Monitor Cybersecurity Across the Federal Landscape

    Are you wondering what happens to the summary data that your Continuous Diagnostics and Mitigation (CDM) Agency Dashboard feeds up to the Federal Dashboard? Join us for a webinar on July 31, 2018 to learn how exactly what kind of data  DHS analysts will see on the Federal Dashboard, how it improves situational awareness across the federal enterprise to understand risk exposure from critical vulnerabilities being exploited. You’ll also hear about how DHS analysts will soon begin to incorporate cyber threat data into the federal risk indicator score for your agency. 
    Join us on Tuesday, July 31, 2018 for a webinar presented by Ms. Judy Baltensperger of the Department of Homeland Security’s Continuous Diagnostics and Mitigation Program Management Office (CDM PMO). She will present a one-hour webinar on the Federal Dashboard, including some insights on current plans for future upgrades.

  • July 31, 2018
    1:00 pm EDT to 2:30 pm EDT
    Learn How DHS Will Use Your Agency’s Summary Data to Monitor Cybersecurity Across the Federal Landscape
  • August 7, 2018
    10:00 am EDT to 12:00 pm EDT
    Introduction to Creating Queries and Reports Using the Agency Dashboard

Past Events

  • May 22, 2018
    12:00 pm EDT to 1:00 pm EDT
    Protecting Data on the Network with Multi-Layered Data Protection Strategies

    Join us to hear Mr. John Simms of the Department of Homeland Security’s Federal Network Resilience Division present a one-hour webinar on the strategies for protecting data on the network. You will learn about several key data protection strategies such as encryption, segmentation, and digital rights management that should be used to reduce risk and protect data at rest, in use, and in transit.
    Webinar Video
    Webinar Presentation Slide Deck
    Certificate of Attendance

  • April 24, 2018
    12:00 pm EDT to 1:00 pm EDT
    Identifying and Protecting High Value Assets: A Closer Look at Governance Needs for HVAs

    Join us today, Tuesday, April 24, 2018 to hear insights on governance needs related to protecting HVAs.  Mr. Dave Wilkinson and Ms. Crystal Jackson of the Department of Homeland Security’s Federal Network Resilience Division will present a one-hour webinar on the importance of HVA governance.
    Webinar Video
    Webinar Presentation Slide Deck
    Certificate of Attendance

  • October 31, 2017
    12:00 pm EDT to 1:00 pm EDT
    Managing Risk Against Cyber Uncertainties: Using the Dashboard

    Join us on October 31, 2017 from 12:00 pm – 1:00 pm EDT for Managing Risk Against Cyber Uncertainties: Using the Dashboard presented by Mr. Dave Otto, Risk Scoring Lead from the Federal Network Resilience Division. Mr. Otto will briefly discuss the sordid history of information security-specific dashboard views in use across the federal enterprise, how dashboards collect, process, and present meaningful information, and how information properly summarized and displayed can highlight risks that agencies face. Mr. Otto will speak from experience on how near real-time information allows for prioritization of action: answering the age-old question, what issue should I fix first?
    Webinar Presentation Slide Deck (PDF | 2.07MB)
    Certificate of Attendance (PDF | 405.8KB)

  • August 17, 2017
    12:00 pm EDT to 1:00 pm EDT
    Credential Management (CREDMGMT): A Closer Look

    Join us on August 17th from 12:00 pm – 1:00 pm for Credential Management (CREDMGMT) Overview, presented by Mr. Derek Adams, DHS CDM Project Manager, and Ms. Paula Wells, CGI Federal CREDMGMT Program Manager. Mr. Adams will provide an introduction to the CREDMGMT task order, and discuss how an agency can identify the right stakeholders and engage them in implementing CREDMGMT successfully.  Ms. Wells will discuss how the CREDMGMT solution enables an agency to determine who is using their network and whether such use is under valid authorization.

  • July 20, 2017
    12:00 pm EDT to 1:00 pm EDT
    PRIVMGMT Overview & Update

    Join us on July 20th to hear Mr. Daniel Smith, Executive Director for CDM at ManTech, present a technical overview and demonstration of the CDM PRIVMGMT Solution.  During this webinar you will gain an understanding of why PRIVMGMT is important, how to handle the deployment of this CDM capability, and what to expect regarding Operations & Maintenance transition and support.  The presentation will also include an introduction to the Privilege Access Management tools (CyberArk, CA PAM, SailPoint, and Splunk), which facilitate the PRIVMGMT Solution.

Online Learning

The CDM Training Program has developed a library of online video vignettes, which allow the learner the ability to develop knowledge around key CDM concepts. Please visit the following websites to register for an account and access the video vignette content:
Government employees + contractors – FedVTE 
Non-government personnel – StepFWD 

Back to top

Back to Top