Planned NDAA amendment would codify CISA’s role in cyber vulnerability program

The article outlines a proposed NDAA amendment to codify the Common Vulnerabilities and Exposures (CVE) program within CISA, create a 15-member CVE Board including CISA and NIST, mandate a joint modernization plan and improve vulnerability enrichment and public data, prompted by prior contracting uncertainty involving MITRE.