Continuous Diagnostics and Mitigation (CDM) Training

Continuous Diagnostics and Mitigation Training Privacy Act Statement

View Statement

Authority: 5 U.S.C. § 301 and 44 U.S.C. § 3101 authorize the collection of this information.

Purpose: The purpose of this collection is to provide individuals access to Cybersecurity and Infrastructure Security Agency (CISA) Continuous Diagnostics and Mitigation (CDM) Training and information using CISA Webex.

Routine Uses: The information collected may be disclosed as generally permitted under 5 U.S.C. § 552a(b) of the Privacy Act of 1974, as amended. This includes using the information, as necessary and authorized by the routine uses published in DHS/ALL-002 - Department of Homeland Security (DHS) Mailing and Other Lists System November 25, 2008, 73 FR 71659.

Disclosure: Providing this information is voluntary; however, failure to provide this information may prevent DHS from contacting you in the event there are queries about your request or registration.

CDM Dashboard Cyber Range Training

CISA provides interactive training that uses a recent production version of the CDM Agency Dashboard in a virtual environment with notional data. This environment provides participants with a place to safely explore and practice using the CDM dashboards and helps ensure there is no risk of unintended modifications to live operational data.

The CISA CDM Agency Dashboard training courses include the following:

CDM141: Introduction to the CDM Agency Dashboard

This four-hour introductory course is intended for individuals with limited familiarity and experience with the CDM Program. It offers a comprehensive overview of the CDM Program and fundamental features of the CDM Agency Dashboard, including its architecture and user interface, as well as its primary functionalities. The curriculum equips learners to begin their CDM journey by covering aspects such as dashboard navigation, conducting queries and data searches, generating customized reports, and sharing information.

Participants will engage in practical exercises that reinforce course concepts through interactive CDM Agency Dashboard hands-on lab activities delivered via our virtual training platform using notional data within the virtual learning environment. Each lab includes detailed guides featuring step-by-step instructions and knowledge check questions to assess applied understanding. Instructions are supplemented with visual cues and additional information to assist all students in confidently completing each task and comprehending underlying principles.

CDM142: Asset Management with the CDM Agency Dashboard

Asset management is a fundamental aspect of cybersecurity. This four-hour course examines the essential capabilities of CDM, including Hardware Asset Management (HWAM), Software Asset Management (SWAM), and Configuration Settings Management (CSM). Additionally, the course presents and demonstrates recent enhancements to CDM Agency Dashboards, such as Remediated and Open Vulnerabilities, Data Quality Reporting, STIG Reference Data, Federal Information Security Modernization Act (FISMA) Metrics, and Mobile Device Management.

Participants will apply these concepts through interactive hands-on labs using the CDM Agency Dashboard, facilitated via our virtual training platform with notional data in the virtual learning environment. Each lab activity is accompanied by comprehensive guides containing step-by-step instructions and knowledge checks designed to validate participants’ applied understanding. The lab guides feature clear visual cues and supplemental information to support all students to confidently execute each procedure and comprehend its purpose.

CDM144: Vulnerability and Risk Management Using the CDM Agency Dashboard

This four-hour course provides a comprehensive overview of risk management principles and fundamentals, with an emphasis on the core CDM Vulnerability Management (VUL) capability as utilized by the CDM Agency Dashboard. Participants will learn how the CDM Agency Dashboard supports the identification, validation, and mitigation of risk. The curriculum covers newly implemented features and functionalities within the CDM Agency Dashboard, including CISA Known Exploited Vulnerabilities (KEVs), Cyber Hygiene (CyHy), Risk, and Secure Cloud Business Applications (SCuBA) dashboards, along with guidance on reporting for each area.

The course offers practical experience through interactive hands-on lab activities in the CDM Agency Dashboard, accessible through a virtual training platform and with notional data in a virtual learning environment. For every lab activity, students receive detailed guides featuring step-by-step instructions and knowledge checks to assess their understanding. These guides incorporate visual cues and supplementary information to support all participants in confidently completing each step and comprehending its purpose.

CDM203: Systems Security Analyst

This comprehensive four-hour course will outline the responsibilities of a System Security Analyst, focusing on risk management and continuous monitoring, as well as the effective use of the CDM Agency Dashboard to support these functions. Participants will learn how to search and save routine queries to facilitate recurring reporting duties and gain skills in identifying and analyzing system discrepancies within specified boundaries using the CDM Agency Dashboard. The course provides a job aid that details the daily, weekly, monthly, and quarterly tasks a System Security Analyst performs.

The curriculum incorporates practical exercises, featuring interactive hands-on lab activities with the CDM Agency Dashboard accessible through CISA’s training platform utilizing sample data within a virtual learning environment. Lab guides accompany each activity and provide thorough step-by-step instructions and knowledge checks designed to validate comprehension. The guides also present visual cues and supplementary information so all participants can confidently perform each task and understand its purpose.

CDM220: Binding Operational Directives (BOD) and Emergency Directives (ED) Reporting Using the CDM Agency Dashboard

This four-hour course provides an in-depth examination of the historical background, origins, and implementation of current federal cybersecurity directives, mandates, and policies. The course also addresses the utilization of the CDM Agency Dashboard capabilities to support and report compliance. The curriculum clarifies both Agency and CISA requirements and highlights key features for using the CDM Dashboard to assist with identifying, monitoring, and reporting on priority Binding Operational Directives and other data requests.

The course incorporates interactive hands-on laboratory activities with the CDM Agency Dashboard, accessible via our virtual training platform and utilizing simulated data within a virtual learning environment. Comprehensive guides accompany each lab activity and provide step-by-step instructions and knowledge checks to assess applied understanding. The instructions include visual indicators and supplementary information to help all participants confidently complete each step and comprehend its purpose.

CDM300: Advanced Analytics Using the CDM Agency Dashboard Instructor-Led | In-Person

This four-day in-person course integrates material from several intermediate and advanced courses, enhanced by CDM guest speakers, interactive activities, and opportunities for peer networking with agencies utilizing the CDM Agency Dashboard. The curriculum provides an overview of CDM’s Program history and development, examines CDM capabilities with a focus on architecture and data flows, and underscores the responsibilities of the Systems Security Analyst. Participants receive instruction on using the CDM Agency Dashboard interface to visualize, filter, and query security-related data to discover, analyze, report findings, and address federal mandates. The goal of the course is to improve situational awareness through specialized spaces and dashboards, and will cover topics such as Priority Risk, Known Exploited Vulnerabilities (KEVs), Endpoint Monitoring, Configuration Settings Management, High Value Assets (HVA), Federal Information Security Modernization Act (FISMA) Metrics, Secure Cloud Business Applications (SCuBA), as well as other mandates and special interest subjects. By combining foundational and advanced CDM dashboard concepts into one comprehensive learning experience, this course equips professionals with practical skills for using dashboards to help ensure compliance and strengthen cybersecurity defenses.

CDM301: Management Overview of CDM and the CDM Agency Dashboard

This comprehensive two-hour course is specifically developed for managers and leaders tasked with risk decision-making. It outlines the essential components of the Management Leadership Role as defined by the National Initiative for Cybersecurity Education (NICE) Framework, along with the requisite executive and senior-level management duties. The course also examines information assurance principles, identifies applicable Federal cybersecurity laws, and discusses the objectives of the CDM Program, including the benefits of utilizing the CDM Agency Dashboard to establish a cybersecurity baseline. Additionally, participants will receive a demonstration showcasing how the CDM Agency Dashboard supports enterprise-level risk-based decision making.

CDM330: Managing High Value Assets (HVA) Using the CDM Agency Dashboard

This four-hour course offers a comprehensive overview of foundational concepts related to the HVA Program and demonstrates effective HVA management using the CDM Agency Dashboard. Participants are introduced to essential HVA guidance, the HVA Management Lifecycle, and HVA tracking features available within the dashboard. To leverage these capabilities, users will identify, monitor, and prioritize mitigation activities concerning HVA assets. Enhanced operational visibility facilitates quicker response time and supports decision markers in assessing the criticality of actions.

The course emphasizes applied learning by incorporating interactive CDM Agency Dashboard lab exercises, accessible through CISA’s training platform, and utilizing simulated data in a virtual environment. Each lab is accompanied by detailed guides featuring step-by-step instructions and knowledge checks to reinforce understanding. Visual cues and supplementary information appear throughout so all participants can complete each task confidently and comprehend the underlying rationale.

CDM340: Managing CISA Data Feeds Using the CDM Agency Dashboard

This comprehensive four-hour course provides an in-depth overview of Network Managed Interfaces and their associated components. Participants learn about Binding Operational Directives regarding cloud configurations, network interfaces, asset discovery, and vulnerability enumeration. The curriculum includes instructions on fulfilling Cyber Hygiene (CyHy) and SCuBA requirements through the CDM Agency Dashboard, supplemented by laboratory exercises that demonstrate vulnerability identification via CyHy and SCuBA dashboards. Course materials reflect the latest enhancements and features available in the CDM Agency Dashboard.

CDM Agency Dashboard Micro-Learn Videos Series

Overview of CDM Agency Dashboard Micro-Learn Videos

These short micro-learning videos, ranging from 5 to 15 minutes, equip dashboard end-users with essential background and foundational knowledge. The content prepares participants for training events and real-world implementation by providing concise, targeted instruction on key aspects of the CDM Agency Dashboard.

Featured Micro-Learn Videos – on the CISA Learning Portal:

CDM Program Manager Matt House Q&A about the CDM Dashboard
- A question-and-answer session with CDM Program Manager Matt House, covering insights and practical information about the CDM Dashboard.
CDM Dashboard version ES-6 Demonstration and Overview
- An in-depth demonstration and overview of the ES-6 version of the CDM Dashboard, highlighting its features and capabilities.
CDM PMO Matt House speaks about the CDM Agency Dashboard
- Matt House, representing the CDM Program Management Office, discusses important aspects and benefits of the CDM Agency Dashboard.
CDM PMO Speaks about the CDM Agency Dashboard
- The CDM Program Management Office provides further insights into the CDM Agency Dashboard and its role in federal cybersecurity.
CSM – Concepts of Configuration
- An exploration of configuration concepts within the CDM Agency Dashboard's Configuration Settings Management (CSM) feature.
CISA’s Binding Operative Directive (BOD) 22-01 and the Known Exploited Vulnerabilities (KEV) Catalog
- A review of BOD 22-01 and the KEV Catalog, focusing on their relevance to CDM Dashboard operations.
Configuration Settings Management (CSM) with the CDM Agency Dashboard
- An instructional video on utilizing CSM with the CDM Agency Dashboard.
CSM – Understanding Benchmarks and Security Technical Implementation Guides (STIGs)
- An overview of benchmarks and STIGs within the Configuration Settings Management context.
Dashboard-as-a-Service (DBaaS) – Using the CDM DBaaS
- Guidance on employing the CDM DBaaS for streamlined operations and enhanced accessibility.
System Security Analyst Methodology
- A video detailing the methodology used by System Security Analysts working with the CDM Agency Dashboard.
System Security Analyst Overview
- An introduction to the roles and responsibilities of System Security Analysts utilizing the CDM Dashboard.
The Federal Dashboard and Cross Cluster Search
- An explanation of the federal dashboard and its cross-cluster search capabilities within the CDM environment.
FISMA Automation with the CDM Dashboard
- A look at how the CDM Agency Dashboard supports automation for the FISMA.
An Overview of HVAs
- A summary of HVAs and their management using the CDM Agency Dashboard.