|
|||||
IMPORTANT: This page has been archived. Please see the Board Charter for the most current information.
This document formalizes the high-level process that is used for identifying, evaluating, and adding members to, and removing members from, the CVE Board. Background discussion of the development of this process is contained in the summaries for CVE Board meetings that were held in March 2001 and June 2001, available at:
https://cve.mitre.org/community/board/archives/2001-03/msg00014.html
https://cve.mitre.org/community/board/archives/2001-07/msg00000.html
Organizations are limited to two representatives on the Board. Each organization is encouraged to have two representatives, a technical implementer and a subject matter experts (SMEs), on the Board. Technical implementers include content team members, vulnerability analysts, security researchers, and incident responders. SMEs include product managers, product strategists, chief technology officers, and marketing representatives.
MITRE identifies a prospective Board member ("prospect"), typically through one of the following scenarios:
The prospect is evaluated by MITRE through one or more discussions. At least one discussion, an "interview," is held face-to-face or by phone.
Based on these discussions, MITRE determines if the prospect is qualified to be a Board member, and the process moves to the Board Review step.
If the prospect is approved by MITRE after the Board Feedback step, then MITRE adds the prospect as a full member to the Board.
MITRE, as the moderator of the Board, reserves the right to remove Board members. Members to be considered for removal can be identified through one of the following scenarios:
Removal may be based on:
To maintain the limit of two representatives per organization on the CVE Board, if a merger or acquisition results in an organization having more than two individuals on the Board, then the organization must choose which two individuals will remain on the Board.
MITRE, as moderator, will represent the Board and hold directed discussions with the member being considered for removal regarding the issue at hand, manners to resolve, and potential resignation if applicable. If the situation is unable to be resolved in this manner, the individual's removal will be formalized by a private Board vote. If the Board is unable to reach a consensus, MITRE will make the final decision.