Continuous Diagnostics & Mitigation Tools

Continuous Diagnostics & Mitigation Tools provide federal agencies with capabilities and tools that:

Find cybersecurity risks on an ongoing basis.
Prioritize these risks based upon potential impacts.
Enable cybersecurity personnel to focus on the most significant problems first.

Approved Products List

CDM Tools support the Department of Homeland Security and Cybersecurity and Infrastructure Security Agency CDM program. The hardware and software products associated with this program undergo a DHS CISA qualification process to be added to the CDM Approved Products List, updated monthly. The CDM program sponsors a monthly “open season” to encourage original equipment manufacturers to refresh and add new, innovative tools to the APL.

How do I buy CDM Tools on MAS?

CDM Tools

Eligible users: Federal, state, local, and tribal agencies

NAICS: IT Consulting

PSC: IT Outsourcing

CDM Approved Products List

Our CDM Tools Special Item Number retired in 2022, and CDM Tools are now available through our Best in Class Hardware and Software SINs. CDM Tools buying guide [DOCX - 52 KB]

Eligible agencies can order on Multiple Award Schedule by issuing an RFI or RFQ to vendors through eBuy and GSA Advantage. Items with this symbol meet CISAs conformance requirements and are cataloged on the CISA CDM APL. Our CDM Tools buying guide [DOCX - 52 KB] can help you navigate your acquisition.

State, local, territorial, and tribal governments may be able to purchase through Cooperative Purchasing and Disaster Purchasing Programs.

eLibrary for solicitations, terms, socio-economic status.
Guidance and tools for MAS buyers.
GSA Advantage for vendor catalogs, price lists, and more.

Market Research as a Service tool.
Assisted Acquisition Services for cradle to grave buying support.
All available offerings on MAS.

How do I sell CDM Tools on MAS?

Current contract holders can submit a modification to add a SIN in the eOffer/eMod portal.

If you’re a vendor interested in selling your products listed under the CDM program, check out our CDM tools vendor guide [DOCX - 43 KB].
To become a CDM tools vendor, you’ll first need to meet CISA’s CDM capability functional requirements and be included on the APL.
Once on the APL, you can apply to sell through GSA Schedules and use the CDM symbol in GSA Advantage.

If you’re new to MAS, follow the MAS Roadmap guidance for preparing and sending an offer.

Need help? Contact the Vendor Support Center.