Wednesday, August 20, 2025

CISA Publishes 30-day Notice for KEV ICR

Today, CISA published a 30-day information collection request notice in the Federal Register (90 FR 40637-40638) for “Actively Exploited Vulnerability Submission Form”. The dedicated form on the CISA website will allow for external reporting of vulnerabilities that the reporting entity believe to be Known Exploited Vulnerabilities (KEV) eligible. The 60-day ICR notice was published on February 29th, 2025. No comments were received for the 60-day ICR notice.

CISA continues to report the following burden estimate:

 

CISA is soliciting public comments on this ICR notice. Normally a person wishing to comment could follow the instructions provided in the Federal Register listing for this notice, but with the current problems being experienced by OMB’s RegInfo web site alternative methods are required. According to OMB’s instructions, comments should be emailed to MBX.OMB.OIRA.ICRComments@omb.eop.gov. The subject line should read: “ICR Comment - 1670-NEW - Actively Exploited Vulnerability Submission Form”. Comments should be submitted by September 19th, 2025.

No comments:

 
/* Use this with templates/template-twocol.html */