Because vulnerability management has nothing to do with national security, right?
US government funding for the world's CVE program – the centralized Common Vulnerabilities and Exposures ...
theregister.co.uk