New CDM Dashboards in Place at Three Agencies, Seven More on Tap

Continuous Diagnostics and Mitigation (CDM) Program Manager Kevin Cox said on Oct. 13 that the program office is making progress on one of its key goals for Fiscal Year 2021 – connecting Federal agencies to its second-generation Elasticsearch dashboard.

Speaking at the CISQ Cyber Resilience Summit, Cox said thus far three Federal agencies have the new dashboard in place, and that the program office is working with another seven agencies to get the dashboard installed. On top of that, Cox said the CDM program office has put in place communications infrastructure with a total of 60 agencies that will help “make a lot of progress” on the dashboard rollout effort.

He listed agency dashboard installations as a key priority for FY2021 as part of “achieving the promise of CDM … so agencies can bring it to bear in working to manage risk in their environment.”

The program office contracted for the dashboard last year after finding that it needed a big data platform that Cox said “will give us scalability, high performance, customization, and analytics” capabilities. The agency dashboards feed information up to a Federal-level dashboard “so Federal leadership can see what the landscape looks like,” he said.

Cox said the program office hopes to have all of the new dashboards in place by the end of the fiscal year, along with the Federal-level dashboard, “and start to really operationalize the CDM data.”

Cox also talked about a variety of pilots that the program office is running with various agencies covering data protection management, and cloud service security.

On the data protection management, Cox said “we are making good progress there,” adding that the program office is “having good discussions with other agencies” for additional pilots.

Regarding cloud security pilots, he said the program office is working with a “handful of agencies” and the National Cybersecurity Center of Excellence (NCCoE) at the National Institute of Standards and Technology (NIST) on those pilot efforts.

Read more at: Meri Talk