Becoming A CNA—Myths versus Facts

Host Shannon Sabens of CrowdStrike chats with Julia Turkevich of the U.S. Cybersecurity and Infrastructure Security Agency (CISA) about the myths and facts of partnering with the CVE Program as a CVE Numbering Authority (CNA). Truth and facts about the following myths are discussed: Myth #1: Only a specific category of software vendors can become CNAs. Myth #2: Organizations cannot leverage their existing vulnerability management and disclosure processes when they become a CNA. ...