CY2022 Administrative Subpoena for Vulnerability Notification Year in Review

This year in review of CISA’s implementation of its administrative subpoena for vulnerability notification authority provides an overview of key data points associated with CISA’s use of the authority between Jan. 1, 2022, and Dec. 31, 2022. Specifically, this summary identifies the number of subpoenas issued in Calendar Year (CY) 2022, the number of vulnerable devices apparently mitigated, and the number of entities notified and their responses.