CDM330 is a CISA course on the basics of the High Value Asset (HVA) program and how agencies manage HVAs using the CDM Agency Dashboard. CISA describes its CDM dashboard training as instructor-led and hands-on, with simulated labs in a cyber virtual learning environment (CVLE). The public course description does not provide a detailed lesson sequence or click-by-click dashboard instructions.
What CDM330 covers
CISA’s description of CDM330 says it covers HVA program basics and demonstrates managing HVAs in the CDM Agency Dashboard. A January–February 2025 bulletin listed the session as four hours; that is a historical listing, not confirmation of the duration of every later offering. CISA’s January–February 2025 Cyber Training Bulletin provides the earlier course description.
As an Amazon Associate I earn from qualifying purchases.
The September–October 2026 CISA training bulletin describes the wider CDM training format as instructor-led, hands-on instruction using simulated labs in a CVLE. It identifies dashboard training content that includes HVA reporting. This describes the training environment and current content broadly; it does not establish CDM330’s exact exercises or dashboard workflow.
Who should take the course
CISA targets CDM dashboard courses to Federal Civilian Executive Branch (FCEB) employees and supporting contractors who monitor, manage, or oversee information-system controls. Relevant roles include:
- Information system security officers (ISSOs)
- CDM points of contact
- Information system security managers (ISSMs)
- Personnel who prepare or report cybersecurity metrics
The course is most relevant if your work includes HVA oversight or reporting through the agency’s CDM program. The public description does not state prerequisites or promise a particular certification or job qualification.
What “high value asset” means in CDM
In CISA’s CDM context, HVA protection falls under Data Protection Management, a capability focused on protecting high value assets. CISA describes HVAs as networks essential to agency functions, networks designated essential to maintaining the security and resiliency of the federal civilian .gov enterprise, or both. That program definition is more specific than simply calling any sensitive computer an HVA. See the CDM Program Data Protection Management Fact Sheet.
Rank #2
How the CDM dashboard fits into HVA management
The CDM program gives agencies and the federal government visibility into cybersecurity information. CISA says asset information is reported to agency and federal dashboards. Separately, Binding Operational Directive 23-01 identifies outcomes that include maintaining an up-to-date network-asset inventory, identifying vulnerabilities, and providing asset and vulnerability information to the CDM Federal Dashboard. These are broader program and directive contexts, not a list of tasks confirmed for CDM330.
In practical terms, the dashboard is part of the information and reporting environment agencies use to understand assets and security conditions. CDM330’s published scope connects that environment to HVA management and reporting, but does not publicly document specific screens, fields, or procedures. CISA’s Asset Management Fact Sheet and BOD 23-01 describe this wider context.
How CDM330 relates to other dashboard training
CISA’s course catalog describes other CDM dashboard learning areas. They address distinct operational tasks, so their content should not be assumed to be part of CDM330:
| Training area | Operational focus |
|---|---|
| Asset management | Hardware and software queries, inventory visibility, and using reports to support risk-based decisions. |
| Vulnerability management | Identifying risks and prioritizing mitigation. |
| Identity management | PRIV, CRED, TRUST, and BEHAVE capabilities. |
| Configuration management | Security settings, STIGs, and the contribution of configuration scoring to risk scoring. |
| HVA data protection and reporting | Protecting HVAs through CDM’s Data Protection Management capability and reporting HVA information. |
The catalog also describes analyst training for routine queries, discrepancy review, continuous monitoring, and reporting. These are adjacent dashboard subjects; CISA’s public CDM330 description does not establish that they are included in that course. See CISA’s CDM Dashboard Courses catalog.
Rank #4
Version and course availability
CISA’s September–October 2026 training bulletin identifies Enterprise Security (ES) 6.8 as the version used in its training environment. It also lists current training content spanning FISMA Automation, HVA reporting, Cyber Hygiene (CyHy), Secure Cloud Business Applications (SCuBA), and other dashboard capabilities. This is the version stated for that bulletin’s training environment, not a claim about the version deployed by every agency.
Recommended Free Tools
The same bulletin listed a CDM330 session for September 24, 2026. That date has passed. CISA had listed CDM330 in earlier 2026 bulletins as well, but those past offerings do not establish a future schedule or current registration availability. Check the September–October 2026 Cyber Training Bulletin and CISA’s current training listings for updated dates.
Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
