How are the tag records managed by the CVE Program?

There is a list of some tags described https://nvd.nist.gov/vuln/vulnerability-detail-pages and some more in VulnoGram. 

- What is the current official source for vulnerability tags?
- How are namespaces managed? Is it possible to define and use our own namespace if needed?
- Is there a straightforward process to propose new tags?

