CWE

Common Weakness Enumeration

A community-developed list of SW & HW weaknesses that can become vulnerabilities
New to CWE? click here!
CWE Most Important Hardware Weaknesses
CWE Top 25 Most Dangerous Weaknesses
Home > Community > CWE Board  
ID

CWE Board

The mission of the CWE Board is to set and promote the goals and objectives of the CWE Program to ensure the ongoing adoption, coverage, and quality of Common Weakness Enumeration (CWE™).

The Board operates according to the CWE Board Charter and the CWE Professional Code of Conduct. Members of the CWE Board include Technical Implementers that provide input and guidance regarding the creation, design, review, maintenance, and applications of CWE entries; Subject Matter Experts (SMEs) who are domain experts in weakness and/or attack pattern fields and represent a significant constituency related to, or affected by, CWE; and Advocates who actively support and promote CWE throughout the community in a highly visible and responsible manner.

Through open and collaborative discussions, Board members provide critical input regarding domain coverage, coverage goals, operating structure, and strategic direction.

All Board discussions are archived for the community:


Board Members

Paul Anderson, GrammaTech

Bill Curtis, Consortium for IT Software Quality (CISQ)

Chris Eng, Veracode

Jason Fung, Intel

Robin Gandhi, University of Nebraska Omaha

Jay Gazlay, Cybersecurity and Infrastructure Security Agency (CISA)

Alex Hoole, OpenText

Joe Jarzombek, Synopsys

Jason Lam, SANS

Jason Oberg, Cycuity

Deana O’Meara, NVIDIA

Kurt Seifried, Cloud Security Alliance

Alec Summers, MITRE (CWE/CAPEC Board Moderator)

Chris Turner, National Institute of Standards and Technology (NIST)

Jeremy West, Red Hat, Inc.


Past Board Members

Pietro Braione

Chris Levendis

Andrew van der Stock

Back to top
Page Last Updated: April 18, 2024
 

Use of the Common Weakness Enumeration (CWE™) and the associated references from this website are subject to the Terms of Use. CWE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and managed by the Homeland Security Systems Engineering and Development Institute (HSSEDI) which is operated by The MITRE Corporation (MITRE). Copyright © 2006–2024, The MITRE Corporation. CWE, CWSS, CWRAF, and the CWE logo are trademarks of The MITRE Corporation.