slug: cybersecurity-and-infrastructure-security-agency
provider: Cybersecurity and Infrastructure Security Agency
generated_by: planning/capability-mapping/scripts/classify_capabilities.py
model: claude-opus-5
frame:
- Public Sector & Government
min_confidence: 0.7
capability_model:
  source: https://github.com/vincentmakes/turbo-ea-capabilities
  license: CC-BY-4.0
  attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities,
    CC BY 4.0
  notice: NOTICE
edge_count: 1
edges:
- tag: KEV
  spec_file: cybersecurity-and-infrastructure-security-agency-kev-api-openapi.yml
  capability_id: BC-620.40
  capability_id_l1: BC-620
  capability_name: Vulnerability Management
  confidence: 0.8
  evidence: 'the authoritative source of vulnerabilities that have been actively exploited in the wild
    ... agencies are required ... to remediate KEV-listed vulnerabilities by the dueDate; schemas: KevVulnerability,
    KevCatalog'
  reason: The feed supplies an authoritative catalogue of exploited vulnerabilities consumed to drive
    remediation, which is squarely vulnerability management input. It is a published feed rather than
    a scanning tool, hence 0.8.