# 2026-16270: CISA Begs OMB for More Time on Vulnerability Form Extensions

2026-16270, Infrastructure Security Division, Cybersecurity and Infrastructure Security Agency, Information Collection Activities; Submission to the Office of Management and Budget for Review and Approval; Comment Request; Cybersecurity and Infrastructure Security Agency Vulnerability Assessments, is a Federal Register notice from Homeland Security Department published 2026-08-11, effective Comments are encouraged and will be accepted until September 10, 2026. Submissions received after the deadline for receiving comments may not be considered.; PRIA reads it as touching household money (as of 2026-08-18).

- Canonical: https://policyrisk.com/federal-register/2026-16270
- As of: 2026-08-18
- Plain-text twin of the page above; the HTML and this file carry the same facts.

## Facts
- Document number: 2026-16270
- Title: Infrastructure Security Division, Cybersecurity and Infrastructure Security Agency, Information Collection Activities; Submission to the Office of Management and Budget for Review and Approval; Comment Request; Cybersecurity and Infrastructure Security Agency Vulnerability Assessments
- Type: Notice
- Agencies: Homeland Security Department
- Citation: 91 FR 51724
- Published: 2026-08-11
- Effective: Comments are encouraged and will be accepted until September 10, 2026. Submissions received after the deadline for receiving comments may not be considered.
- Comments close: 2026-09-10
- Significant: no
- Touches household money: yes
- Regulation identifier numbers: none
- Last updated: 2026-08-18

## In one line

CISA Begs OMB for More Time on Vulnerability Form Extensions

## Summary

The Infrastructure Security Division, an office within Cybersecurity and Infrastructure Security Agency submits the following information collection request) to the Office of Management and Budget for review and clearance. The is an extension of a previously cleared information collection request on November 15, 2023, with an expiration date of November 30, 2026. The purpose of this notice is to allow additional 60 days for public comments.

## Effects PRIA read

- Assessments Are Voluntary But Must Be Completed: cost, medium. CISA offers voluntary on-site and web-based vulnerability assessments that organizations may request. Participation is voluntary, but full completion of the assessment data collection is required if an organization wants a complete evaluation; the agency estimates 1,100 respondents with an estimate…
- Removed Questionnaires Cut Respondent Costs: benefit, medium. CISA removed three cyber-focused post-assessment questionnaires and decommissioned one system, which reduced respondent burden and cost. The agency reports a decrease in annual burden cost of $1,267,072 (from $1,907,757 to $640,685) and a decrease in annual government cost of $1,478,073 (from $2,22…
- Assessment Data Used for FEMA Grant Decisions: mixed, medium. Information collected in CISA vulnerability assessments is shared with the Federal Emergency Management Agency and is used to make Public Assistance grant determinations based on the information respondents supply.

## Related documents

- [2026-20660](https://policyrisk.com/federal-register/2026-20660): Optional Practical Training Fees, 2026-10-08
- [2026-20650](https://policyrisk.com/federal-register/2026-20650): Low-Value Shipments, 2026-10-08
- [2026-20087](https://policyrisk.com/federal-register/2026-20087): Clarification of Certain Mariner Training Requirements, 2026-10-01
- [2026-20016](https://policyrisk.com/federal-register/2026-20016): U.S. Citizenship and Immigration Services Employment-Based Immigrant Visa, Fifth Preference (EB-5) Fee Rule, 2026-09-30
- [2026-17390](https://policyrisk.com/federal-register/2026-17390): Automated Commercial Environment (ACE) Electronic Export Manifest for Rail Cargo, 2026-08-26
- [2026-17324](https://policyrisk.com/federal-register/2026-17324): Fee for Certain H-1B Petitions, 2026-08-25

## Sources
- [2026-16270 on federalregister.gov](https://www.federalregister.gov/documents/2026/08/11/2026-16270/infrastructure-security-division-cybersecurity-and-infrastructure-security-agency-information)
- [2026-16270 as published (PDF)](https://www.govinfo.gov/content/pkg/FR-2026-08-11/pdf/2026-16270.pdf)

## Related
- [Previous: 2026-16267, Notice of Council Updated NEPA Procedures](https://policyrisk.com/federal-register/2026-16267)
- [Next: 2026-16271, Renewal of Agency Information Collections of Previously Approved Collections; O…](https://policyrisk.com/federal-register/2026-16271)
- [All Federal Register documents](https://policyrisk.com/federal-register)

Source: PRIA, https://policyrisk.com/federal-register/2026-16270 (as of 2026-08-18).