Ron Ross

Computer Scientist and Fellow at NIST

Ron Ross is a Fellow at the National Institute of Standards and Technology. His focus areas include computer security, systems security engineering, trustworthy systems, and security risk management. Dr. Ross currently leads the NIST Systems Security Engineering Project which includes the development of standards and guidelines for the federal government, contractors, and United States critical infrastructure. He also supports the U.S. State Department in the international outreach program for cybersecurity and critical infrastructure protection. Dr. Ross previously served as the Task Leader for the Joint Task Force, an interagency group that includes the Department of Defense, Office of the Director National Intelligence, U.S. Intelligence Community, and the Committee on National Security Systems, with responsibility for developing a Unified Information Security Framework for the federal government. He also served as the project leader for the Federal Information Security Modernization Act (FISMA) Implementation Project and is the former Director of the National Information Assurance Partnership, a joint activity of NIST and the National Security Agency. During his twenty-year military career, Dr. Ross served as a White House aide and senior technical advisor to the Department of the Army. He has lectured at Stanford University, Massachusetts Institute of Technology, Dartmouth College, Pepperdine University, Naval Postgraduate School, Ohio State University, Auburn University, Georgia State University, University of Maryland, University of Minnesota, U.S. Naval Academy, Hood College and given the Commencement address at George Washington University (School of Engineering).

Dr. Ross has authored or coauthored many publications on risk management, cybersecurity, systems security engineering, and cyber resiliency. These include: FIPS 199 (security categorization), FIPS 200 (security requirements), SP 800-30 (risk assessments), SP 800-37 (Risk Management Framework), SP 800-39 (enterprise risk management), SP 800-53 (security and privacy controls), SP 800-53A (security control assessments), SP 800-53B (security and privacy control baselines), SP 800-128 (security configuration management), SP 800-160, V1 (systems security engineering), SP 800-160, V2 (cyber resiliency), SP 800-171 (protection of controlled unclassified information), SP 800-171A (CUI security assessments), SP 800-172 (enhanced security requirements for advanced cyber-threats), and SP 800-172A (enhanced security requirement assessments).

Dr. Ross has received numerous public and private sector awards including the Presidential Rank Award, Samuel J. Heyman Service to America Medal for Homeland Security and Law Enforcement, Michael V. Hayden Lifetime Achievement Award, Department of Defense Superior Service Medal, National Security Agency Scientific Achievement Award, Department of Commerce Gold and Silver Medal Awards, Applied Computer Security Associates Distinguished Practitioner Award, GCN Government Executive of the Year Award, Vanguard Chairman’s Award, ICIT Pioneer Award, Government Technology Research Alliance Award, InformationWeek’s Government CIO 50 Award, Billington Cybersecurity Leadership Award, ISACA National Capital Area Conyers Award, ISACA Joseph J. Wasserman Award, AFFIRM President’s Award, Symantec Cyber 7 Award, SC Magazine’s Cyber Security Luminaries Award, (ISC)2 Lynn F. McNulty Tribute Award, American Bar Association Science and Technology Special Recognition Award, CES Government Technology Leadership Award, and 1105 Media Gov30 Award. He has also been recognized three-times as one of the Top 10 Influencers in Government IT Security and is a five-time recipient of the Federal 100 award for leadership and technical contributions to cybersecurity projects affecting the federal government. Dr. Ross has been inducted into the National Cyber Security Hall of Fame, selected as an (ISC)2 Fellow, and inducted into the Information Systems Security Association Hall of Fame receiving its highest honor of Distinguished Fellow.

Dr. Ross holds a Bachelor of Science degree in Engineering from the United States Military Academy at West Point. He also holds both Masters and Ph.D. degrees in Computer Science from the United States Naval Postgraduate School specializing in artificial intelligence and robotics.