Uploaded May 2026 | Updated September 2026, 20 minutes ago
Lindsey Cerkovnik (CISA, US), Alec Summers (The MITRE Corporation, US)
As the Common Vulnerabilities and Exposures (CVE™) Program transitions from a period of growth to a new Quality Era, the global cybersecurity community faces a pivotal opportunity: to strengthen the foundations of vulnerability data so that defenders can make faster, more accurate, and more reliable decisions. Under the strategic vision outlined by Cybersecurity and Infrastructure Security Agency (CISA), the Quality Era prioritizes trust, responsiveness, and data quality alongside continued program federation – recognizing that comprehensive, timely, and high-fidelity vulnerability information is a cornerstone of effective cyber defense.
This joint presentation will talk about what the Quality Era means in practice. It will explore how improvements in governance, community partnerships, transparency, modernization, and vulnerability data enrichment are being pursued to meet the evolving needs of defenders worldwide. Speakers will share the emerging technical roadmap for elevating CVE Record quality, discuss efforts to expand collaboration and standardization, and highlight how a quality-first approach directly supports operational and strategic objectives across government, industry, and research.
Attendees will gain insight into why the CVE Program’s evolution matters now more than ever, how quality-focused initiatives align with broader cyber resilience goals, and what collective actions the ecosystem can take to ensure that CVE data remains trusted, actionable, and a public good well into the future.
---
Lindsey Cerkovnik is the Chief of CISA’s Vulnerability Response & Coordination (VRC) Branch. Her team is responsible for CISA’s Coordinated Vulnerability Disclosure
(CVD) process, the Known Exploited Vulnerabilities (KEV) catalog, and CISA’s Stakeholder Specific Vulnerability Categorization (SSVC) process. Lindsey and her team help to maintain, support, and advance the global vulnerability ecosystem by funding and overseeing the CVE and CVE Numbering Authority (CNA) programs, leading the production and dissemination of machine-readable vulnerability enrichment information, and engaging in valuable technical collaboration with the vulnerability research community.
Alec Summers is a principal cybersecurity engineer at the MITRE Corporation with diverse and extensive experience in software assurance and vulnerability management, as well as cyber operations, assessments, and supply chain risk management. He is the MITRE CVE and CWE Project Leader, managing teams that support vulnerability and weakness research & analysis, content production, program coordination, services development, and community engagement across a global partner base comprising industry, government, and academia. He serves as the moderator for the CVE Board and CWE Board. LinkedIn: linkedin.com/in/ajrsummers
Lindsey Cerkovnik (CISA, US), Alec Summers (The MITRE Corporation, US)
As the Common Vulnerabilities and Exposures (CVE™) Program transitions from a period of growth to a new Quality Era, the global cybersecurity community faces a pivotal opportunity: to strengthen the foundations of vulnerability data so that defenders can make faster, more accurate, and more reliable decisions. Under the strategic vision outlined by Cybersecurity and Infrastructure Security Agency (CISA), the Quality Era prioritizes trust, responsiveness, and data quality alongside continued program federation – recognizing that comprehensive, timely, and high-fidelity vulnerability information is a cornerstone of effective cyber defense.
This joint presentation will talk about what the Quality Era means in practice. It will explore how improvements in governance, community partnerships, transparency, modernization, and vulnerability data enrichment are being pursued to meet the evolving needs of defenders worldwide. Speakers will share the emerging technical roadmap for elevating CVE Record quality, discuss efforts to expand collaboration and standardization, and highlight how a quality-first approach directly supports operational and strategic objectives across government, industry, and research.
Attendees will gain insight into why the CVE Program’s evolution matters now more than ever, how quality-focused initiatives align with broader cyber resilience goals, and what collective actions the ecosystem can take to ensure that CVE data remains trusted, actionable, and a public good well into the future.
---
Lindsey Cerkovnik is the Chief of CISA’s Vulnerability Response & Coordination (VRC) Branch. Her team is responsible for CISA’s Coordinated Vulnerability Disclosure
(CVD) process, the Known Exploited Vulnerabilities (KEV) catalog, and CISA’s Stakeholder Specific Vulnerability Categorization (SSVC) process. Lindsey and her team help to maintain, support, and advance the global vulnerability ecosystem by funding and overseeing the CVE and CVE Numbering Authority (CNA) programs, leading the production and dissemination of machine-readable vulnerability enrichment information, and engaging in valuable technical collaboration with the vulnerability research community.
Alec Summers is a principal cybersecurity engineer at the MITRE Corporation with diverse and extensive experience in software assurance and vulnerability management, as well as cyber operations, assessments, and supply chain risk management. He is the MITRE CVE and CWE Project Leader, managing teams that support vulnerability and weakness research & analysis, content production, program coordination, services development, and community engagement across a global partner base comprising industry, government, and academia. He serves as the moderator for the CVE Board and CWE Board. LinkedIn: linkedin.com/in/ajrsummers
