[COMPAT] NIST Recommendations for CVE-Compatible Products

["Steven M. Christey" <coley@mitre.org>]

All,

As discussed at the last teleconference and in the subsequent summary,
NIST has been developing a guidelines document that recommends that
government agencies should prefer CVE-compatible products.  This is a
concrete result from the newly publicized CVE Advisory Council
(http://cve.mitre.org/advisory/).

Attached is a Word document that contains the latest draft of the
recommendations.  If you have any feedback, you can send it to this list
or send it to me, Margie Zuk (mmz@mitre.org), Bob Martin
(ramartin@mitre.org), and Peter Mell (peter.mell@nist.gov).

- Steve

nist-cve-recommend.doc