# CISA Transitions Vulnerability Response Leadership

CISA vulnerability-response branch chief Lindsey Cerkovnik is leaving the agency after nearly six years, creating a leadership transition for work that includes oversight of the Common Vulnerabilities and Exposures (CVE) Program, industrial-control-system vulnerabilities, and the Known Exploited Vulnerabilities catalog. CISA extended the federal contract supporting the CVE Program in 2025 after it nearly expired, but the reports identify no current solicitation, contractor, contract value, or replacement official.

- The transition affects a CISA function central to vulnerability prioritization, coordinated disclosure, and remediation support; increasing AI-assisted vulnerability discovery adds to the importance of sustained program capabilities.
- Contractors supporting vulnerability management can evaluate how their capabilities align with CVE operations, industrial-control-system vulnerability work, and the Known Exploited Vulnerabilities catalog.
- The 2025 contract extension is relevant procurement history, but the signals do not identify a new acquisition or provide details supporting a specific bid action.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity
**Published:** October 23, 2026

### Government Entities
- Cybersecurity and Infrastructure Security Agency (CISA)

### Sources
- [CISA vulnerability response chief departing agency after nearly six years - Nextgov/FCW](https://www.nextgov.com/cybersecurity/2026/10/cisa-vulnerability-response-chief-departing-agency-after-nearly-six-years/416786) - Nextgov/FCW
- [Senior CISA official departs agency amid vulnerability tracking challenges | brief | SC Media](https://www.scworld.com/brief/senior-cisa-official-departs-agency-amid-vulnerability-tracking-challenges) - SC Media