|
§Can a board member change their vote before the voting period ends? –9:45-10:15 – After interview discussion §ID Reservation is expected to be available in AWS for testing on Friday Aug 28 th . We will be soliciting information from the CNAs for the User Registry on or around Friday August 21. §Can a board member change their vote before the voting period ends? –The group agreed CVE Board members can change their vote if the voting period is still open. The CVE Board charter will be updated to reflect this decision (Action: 08.19.01). –The CVE Board membership participation query (asking who would like to continue to remain on the CVE board) resulted in three CVE Board members retiring from the Board (Harold Booth, Bill Wall, and Scott Moore). All three Board members are now listed as Past CVE Board members on the CVE website. –9:15-9:45 – Conduct interview –9:45-10:15 – After interview discussion –The group continued their discussion about the need for more diverse representation, specifically the end user and a passion for CVE and vulnerability management on the CVE Board. This nomination will help with diversifying the Board by representing the end user's perspective. –The CNAs will be able to tie into ID reservation, to do beta testing and penetration testing. An email will be sent by the end of the week, to the CNA Discussion list, to solicit testers. The test environment, once public, will be in API. –The first sprint planning will be post IDR deployment, focused on bug fixes and artifact development. §David provided an update on the Command Line Client Tool that he is developing and based in Java. The Command line client will allow you to connect to the ID Reservation service, where you can request a set of CVE ID's. §Tod asked if MITRE resources are being pulled from content to help with development. Tod has heard rumors that response time for CVE requests are slow. There was a Reddit compliant, that indicated the users has not received a response in at least 30 days. The CVE program reached out to the user on Reddit via private email to offer assistance. §The group talked about the current ticketing system and suggested status updates be provided to users automatically for their requests rather than making them contact MITRE again, which will generate another ticket to process. §Chris expressed the need to replace the current ticketing system, with the new ticketing system will allow users to log into the ticketing systems and users can check the status of their requests. §The CVE Board meeting recordings archives are in transition to a new platform. Once the new platform is ready, the board recordings will be readily available to CVE Board Members. Until then, to obtain a recording of a CVE Board Meeting, please reach out to Jo Bazar (). |