DOGE, CISA, Mitre and CVE: The Infrastructure of Vulnerability Management
DOGE’s planned defunding of the CVE system was reversed after industry pressure—funding is now secured for eleven months. The CVE system provides organizations with a unified foundation for systematic vulnerability management. In parallel, additional national and specialized identification systems exist, whose coordina
NIS2 Implementation: Critical Requirements for Legislation from CSIRT Perspective
Austria’s national CSIRT demands legal clarity on two key points of NIS2 implementation: first, authorization for nationwide vulnerability scanning and data processing beyond regulated entities—lessons from Dutch counterparts—and second, precise definition of support tasks for essential entities through cyber-threat in
NIS2 Implementation: Critical Success Factors from a CISO Perspective
Austria is preparing its NIS2 implementation; a CSIRT representative recommends two regulatory measures: first, national security teams should be allowed to support entities outside the NIS2 perimeter—as the Netherlands learned painfully; second, task definitions should clearly establish that CSIRTs promote independent