NASA SEWP V CONTINUOUS DIAGNOSTICS AND MITIGATION (CDM) Catalog

Graphic with an outer circle labeled Dashboard and inner circles labeled Asset Management, Identity and Asset Management, Network Security Management, and Data Protection Management

The NASA SEWP CDM Catalog consists of products that have been approved on the CDM Approved Products List (APL). The APL supports the Cybersecurity and Infrastructure Security Agency’s (CISA) CDM Program and is available for use by all Federal Agencies. The CDM APL is the authoritative catalog for approved products that meet CDM technical requirements, including tools, associated maintenance, and other related activities such as training. Software and hardware manufacturers and resellers can submit products for consideration monthly. CISA reviews each submission against established CDM Program criteria to validate the vendor’s claim that each product meets the requirements for the capability category for which it was submitted. Products are organized by the following CDM capability areas:

Asset Management: Identifies the existence of hardware, software, configuration characteristics, and known security vulnerabilities.
Identity and Access Management: Identifies and determines the users or systems with access authorization, authenticated permissions, and granted resource rights.
Network Security Management: Prepares for events/incidents, gathers data from appropriate sources; and identifies incidents through data analysis.
Data Protection Management: Focuses on protecting sensitive data (especially privacy) covered by data discovery/classification, protection, loss prevention, breach/spillage mitigation, and information rights management.
Potential CDM Capabilities: Includes CDM cybersecurity tools and technology not in any other group.

Contract Holder / Provider Guidance

NASA SEWP Contract holders who want to sell their products on the CDM Catalog must first get their products approved on the APL. More information about how to submit products onto the APL can be found on the CDM Approved Products List (APL) | CISA. The CDM catalog will refresh each month in cadence with the refreshed APL.

Buying Guidance

All Federal Agencies can make purchases from the NASA SEWP CDM Catalog. Non-federal entities can buy from the catalog with a Letter of Authorization.

Please submit your CDM APL questions to csd_cb.acqbudg@cisa.dhs.gov.
Please submit any NASA SEWP questions to help@sewp.nasa.gov.