[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYkbMeg-X20A4uaieDzBjNf5LDHGQEC_8FY2U-SttuRc":3},{"article":4,"iocs":52,"watch_terms":53,"solutions":54,"lesson":57},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"0956f124-aac8-492b-a75a-01d4bbd2b689","Federal audit reveals NIST’s NVD is plagued by poor planning and duplication","federal-audit-reveals-nist-s-nvd-is-plagued-by-poor-planning-and-duplication-02269c","A report from the Commerce Inspector General details how mismanagement allowed a backlog of 27,000 unprocessed security flaws to grow unchecked, while the agency duplicated work with a similar CISA program. The post Federal audit reveals NIST’s NVD is plagued by poor planning and duplication appeared first on CyberScoop.","A Department of Commerce Inspector General report revealed that NIST's National Vulnerability Database has been severely mismanaged due to poor strategic planning, inefficient processes, and lack of coordination with CISA's competing Vulnrichment program. The audit found a backlog of over 27,000 unprocessed security flaws, with analysts spending 80% of their time on redundant tasks like severity scoring that matched independent evaluators only 12% of the time. The report identified at least 21,000 cases of duplicated work between the two federal programs from May 2024 to December 2025, wasting approximately $200,000.","Commerce IG audit exposes NIST NVD mismanagement, 27K backlog, and duplicate work with CISA.","https:\u002F\u002Fcyberscoop.com\u002Fnist-nvd-audit-mismanagement-duplication\u002F","https:\u002F\u002Fcyberscoop.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F3\u002F2017\u002F06\u002FImplementing-Digital-Authentication-In-Accordance-with-the-new-NIST-languages.jpg","2026-05-29T16:07:04+00:00","2026-05-29T18:00:26.072181+00:00",7,[17,20,22,25,27,29],{"name":18,"type":19},"NIST","vendor",{"name":21,"type":19},"CISA",{"name":23,"type":24},"National Vulnerability Database (NVD)","product",{"name":26,"type":24},"Vulnrichment",{"name":28,"type":24},"Common Vulnerabilities and Exposures (CVE)",{"name":30,"type":31},"KEV Catalog","technology","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":32,"icon":34,"name":35,"slug":36},null,"Policy","policy",[38,42,47],{"category":39},{"id":40,"icon":34,"name":18,"slug":41},"217d3263-c763-41ca-875e-06901f522fe0","nist",{"category":43},{"id":44,"icon":34,"name":45,"slug":46},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":48},{"id":49,"icon":34,"name":50,"slug":51},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21,23],{"controls":55,"vendors":56},[],[],{"slug":58,"title":59,"body":60,"framework_refs":61,"framework_notes":66},"poor-strategic-planning-cripples-federal-vulnerability-database-operations","Poor Strategic Planning Cripples Federal Vulnerability Database Operations","NIST's National Vulnerability Database suffered from fundamental management failures including lack of strategic planning, inefficient processes, and poor coordination with other federal programs. The resulting 27,000 vulnerability backlog and 80% time waste on redundant tasks demonstrates how operational dysfunction can severely impact critical cybersecurity infrastructure. When the primary source for vulnerability intelligence fails to function effectively, it creates cascading risks across all organizations that depend on timely and accurate vulnerability data for their security programs.",[62,63,64,65],"CIS Control 7","NIST SP 800-40","NIST SP 800-30","ISO 27001 A.12.6.1",{}]