Security automation standards sponsored by the U.S. Government have evolved significantly in the decade since MITRE created and released the Common Vulnerabilities and Exposures (CVE) dictionary. There are now more than two dozen individual standards in use or under development supporting a wide range of security information and functionality. These standards are supported by a variety of sponsors and governance models as well as an ever-growing community of developers, implementers, and users.