CISA Published 30-day Notice for New Coordinated Disclosure ICR

Today, CISA published a 60-day information collection request (ICR) notice in the Federal Register (90 FR 40638-40639) for a new ICR on Vulnerability Reporting Submission Form. CISA intends to collect this  information as part of their on-going coordinated disclosure process. The 60-day ICR notice was published on October 30, 2024.

CISA continues to provide the following burden estimate:

 

CISA is soliciting public comments on this ICR notice. Normally a person wishing to comment could follow the instructions provided in the Federal Register listing for this notice, but with the current problems being experienced by OMB’s RegInfo web site alternative methods are required. According to OMB’s instructions, comments should be emailed to MBX.OMB.OIRA.ICRComments@omb.eop.gov. The subject line should read: “ICR Comment - 1670-NEW - Vulnerability Reporting Submission Form”. Comments should be submitted by September 19^th, 2025.