CNA Onboarding Process Myths Versus Facts скачать в хорошем качестве

CNA Onboarding Process Myths Versus Facts

Shannon Sabens of CrowdStrike chats with Dave Morse, program coordination lead for the CVE Program, about the myths and facts of the CVE Numbering Authority (CNA) partner onboarding process. Truth and facts about the following topics are discussed: duration and complexity of the onboarding process; the fact that there is no fee to participate; ease of incorporating assigning CVE Identifiers (CVE IDs) and publishing CVE Records into an organization’s existing coordinated vulnerability disclosure (CVD) processes; availability of automated tools for CNAs; the CVE JSON Record format and available guidance; that the “homework” in the onboarding process are merely a few practice exercises; role of Roots and Top-Level Roots and how they help CNAs; importance of CNAs determining their own scopes; disclosure policies; the community aspect of being a CNA and the availability of peer support; the value of CNAs participating in one or more CVE Working Groups, especially the CNA Organization of Peers (COOP); and much more! LINKS: How to become a CNA partner – https://www.cve.org/PartnerInformatio... Partner onboarding process overview – https://www.cve.org/PartnerInformatio... Benefits of being a CNA partner – https://www.cve.org/PartnerInformatio... COOP - https://www.cve.org/ProgramOrganizati...