NIST is finally getting help with the National Vulnerability Database backlog

Maryland-based security firm Analysis has been tasked with helping the National Institute of Standards and Technology (NIST) reduce the backlog of entrants to the US National Vulnerability Database (NVD), an agency representative said Tuesday.

“I can confirm that Analysis, Inc. won a competitive order to process support for incoming CVEs for inclusion in NVD. The base price of that work order is $865,657,” NIST spokesman Rich Press said in an email. The contract, which went into effect on May 8, simply states that the company will provide Internet security analysis and email support to NIST.

The award is part of a $125-million five-year framework agreement (or indefinite delivery/indefinite price contract, in US Federal government parlance) for Analysis and two other companies to provide support services to NIST.


Source link