Federal agencies are using CDM Phase 3 to not only acquire products, but services and assessments to help improve their security posture.