4 ms·
Can search these for the links 2023 > CISA had previously been supporting the NIST NVD program with approximately $3.7 million per year in interagency funding
by cma 2y ago
Can search these for the links
2023
> CISA had previously been supporting the NIST NVD program with approximately $3.7 million per year in interagency funding, which they have discontinued
2024
> While NIST has since reallocated $8.5 million to NVD for fiscal years 2024 and 2025
Assuming that's spread over both years it wasn't as big of an increase as I said, but is still an increase even inflation adjusted.
> 2025 article claims 30% increase in 2024 workload
Underfunding in the face of more workload isn't itself a funding cut.
- transpute 2y agoThanks for the pointer. Is this a lobbying org? https://www.fdd.org/analysis/policy_briefs/2025/03/21/delayed-vulnerability-analysis-puts-america-at-a-cybersecurity-disadvantage/ https://www.fdd.org/analysis/policy_briefs/2025/03/21/delaye... > While NIST has since reallocated $8.5 million to NVD for fiscal years 2024 and 2025, this funding remains a fraction of the $300 million to $400 million estimated to be needed annually to fully restore capacity, with an additional $120 million to $150 million required to prevent further system “deterioration.” Did NVD receive 300MM annual funding pre-2024? That would be a 98% funding cut.
- formerly_proven 2y ago300 million would’ve been a quarter of the NIST budget. Doubt.
- transpute 2y agoYeah, bizarre site. MITRE CVE/CWE budget is more transparent than NVD since it's a contract, listed on USAspending.gov.