Today, CISA published a 30-day information collection request notice in the Federal Register (90 FR 40637-40638) for “Actively Exploited Vulnerability Submission Form”. The dedicated form on the CISA website will allow for external reporting of vulnerabilities that the reporting entity believe to be Known Exploited Vulnerabilities (KEV) eligible. The 60-day ICR notice was published on February 29th, 2025. No comments were received for the 60-day ICR notice.
CISA continues to report the following burden estimate:
CISA is soliciting public comments on this ICR notice. Normally
a person wishing to comment could follow the
instructions provided in the Federal Register listing for this notice, but
with the current problems
being experienced by OMB’s RegInfo web site alternative methods are
required. According to OMB’s instructions, comments should be emailed to MBX.OMB.OIRA.ICRComments@omb.eop.gov.
The subject line should read: “ICR Comment - 1670-NEW - Actively Exploited
Vulnerability Submission Form”. Comments should be submitted by September 19th,
2025.

No comments:
Post a Comment