Continuous Diagnostics and Mitigation Program

The Continuous Diagnostics and Mitigation (CDM) Program Master Blanket Purchase Agreement (BPA) is a comprehensive cybersecurity contract vehicle established by the Department of Homeland Security (DHS) through the IT-70 Federal Supply Schedule. The BPA provides federal agencies with specialized IT tools, continuous monitoring solutions, and cybersecurity services designed to enhance network security and risk management across civilian government networks. The vehicle enables agencies to acquire advanced tools and sensors that implement a common set of capabilities for real-time network monitoring, threat detection, and security event analysis.

Task orders under this BPA consistently focus on cybersecurity software licensing, tools, and professional services, with values ranging from approximately $40,000 to over $117 million. Frequently winning prime contractors include Peraton Enterprise Solutions LLC, Northrop Grumman Systems Corporation, and Booz Allen Hamilton Inc. The BPA supports multiple federal agencies, with the Department of Homeland Security, Department of Transportation, Department of Health and Human Services, and Nuclear Regulatory Commission prominently represented. Task orders typically have durations between one to three years, with pricing models predominantly using firm fixed price structures. No specific small business set-aside designations were used in the task orders reviewed, and the contracts appear to be primarily focused on enterprise-level cybersecurity solutions for federal civilian agencies.