CNA Onboarding Process Myths Versus Facts

Shannon Sabens of CrowdStrike chats with Dave Morse, program coordination lead for the CVE Program , about the myths and facts of the CVE Numbering Authority (CNA) partner onboarding process. Truth and facts about the following topics are discussed: duration and complexity of the onboarding process; the fact that there is no fee to participate; ease of incorporating assigning CVE Identifiers (CVE IDs) and publishing CVE Records into an organization’s existing coordinated vulnerability disclosure (CVD) processes; availability of automated tools for CNAs; the CVE JSON Record format and available guidance; role of Roots and Top-Level Roots and how they help CNAs; importance of CNAs determining their own scopes ; disclosure policies; the community aspect of being a CNA and the availability of peer support; the value of CNAs participating in one or more CVE Working Groups , especially the CNA Organization of Peers (COOP) ; and much more!

You can listen to CNA Onboarding Process Myths Versus Facts online on Radio and Podcast. Open the player on this page to stream the available audio.

CNA Onboarding Process Myths Versus Facts is an episode from We Speak CVE by CVE Program.

This episode is 24:33 long.

This episode was published on Oct 1, 2024.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from We Speak CVE when more episodes are available from the podcast feed.