WORLDTECHCISA official Lindsey Cerkovnik leaves agency as security flaw tracking faces strain
Lindsey Cerkovnik, a senior official at the Cybersecurity and Infrastructure Security Agency, is stepping down from her role this week after close to six years in the post, according to Nextgov. Her exit comes at a time of rising concern about how long the vulnerability-tracking framework that governments and businesses depend on to spot and manage software flaws can remain sustainable.
Her role at the agency
Cerkovnik served as branch chief for vulnerability response and coordination, overseeing critical systems including the Common Vulnerabilities and Exposures Program. Since she took up the post in 2021, she has handled vulnerability work for industrial control systems and contributed to the Known Exploited Vulnerabilities catalog.
Before joining the agency, she spent more than four years at the Idaho National Laboratory.
A program under pressure
The framework has been unsettled before. Last year a federal contract that supports it came close to lapsing, which led to calls for firmer backing from Congress. Those calls have grown louder as artificial intelligence drives up the number of security weaknesses being found, placing heavier demands on the systems that record them.
Her departure also arrives as digital security comes under greater strain. The National Security Agency and the Federal Bureau of Investigation are urging organisations to fix serious flaws in widely used software such as PHP.
Open questions
- Who will take over Cerkovnik's responsibilities at CISA?
- Will congressional support for the vulnerability-tracking program be secured on a lasting basis?