Case Study: Department of Veterans Affairs achieves IoT security and CDM compliance with Merlin International

Department of Veterans Affairs - Customer Case Study

The Department of Veterans Affairs (VA) needed to secure one of the largest IoT environments in the public sector, spanning 56 regional offices, 300 veterans centers, 145 hospitals, and about 1,233 outpatient care sites. With 1.65 million network-connected devices in use, VA faced the challenge of continuously discovering, classifying, and controlling a vast mix of traditional and IoT devices while meeting DHS Continuous Diagnostics and Mitigation (CDM) requirements. Merlin International helped address this challenge with an agentless network access control and IoT cybersecurity approach.

Merlin International implemented a solution that provided enterprise-wide visibility and control across VA offices, healthcare facilities, and data centers, using passive and active methods to identify devices, assess posture, and apply CDM-driven policies. The result was that the VA could meet CDM discovery, classification, and control requirements while improving incident response, automating workflows, and protecting its rapidly changing IoT footprint. Merlin International’s deployment delivered agentless visibility and control for 1.65 million network-connected devices.