Planned NDAA amendment would codify CISA’s role in cyber vulnerability program

Planned NDAA amendment would codify CISA’s role in cyber vulnerability program

A contracting scare that briefly cast uncertainty over a key cyber vulnerability-tracking program is prompting lawmakers to add a measure to the annual defense authorization bill that would establish the program within the Cybersecurity and Infrastructure Security Agency. The proposal would formally house the Common Vulnerabilities and Exposures program under CISA, require a joint modernization plan with the National Institute of Standards and T…