Ron Ross

Fellow, National Institute of Standards and Technology (NIST)

Ross is a Fellow at NIST. His focus areas include cybersecurity, systems security engineering, cyber resiliency, security architecture, privacy, and risk management. Ross leads the FISMA Implementation Project and the Systems Security Engineering Initiative, which includes the development of cybersecurity and privacy standards and guidelines for the federal government, contractors, and the U.S. critical infrastructure.

DevSecOps: Rethinking Cybersecurity for the 21st Century

Presented by Ron Ross • June 10, 2020

NIST fellow Ron Ross has long been affiliated with risk management and frameworks in support of federal government mandates. Now he's shifting his focus to the future - specifically to what he describes as "the game-changing benefits of DevSecOps." In this session, Ross discusses: DevOps vulnerabilities The role...

When Perimeter Defenses Are Compromised: Applying Zero Trust Concepts to Achieve Cyber Defense-In-Depth

Presented by Ron Ross • May 18, 2020

The Advanced Persistent Threat (APT) is extremely dangerous to the national and economic security. To address this reality in the 21st century, the one-dimensional protection strategy focused solely on perimeter-based defenses must be transitioned to a new multidimensional, defense-in-depth protection strategy that...

When Perimeter Defenses Are Compromised: Applying Zero Trust Concepts to Achieve Cyber Defense-In-Depth

Presented by Ron Ross • May 14, 2020

Developing Cyber Resilient Systems: An National Imperative for Critical Systems Operating in Hostile Cyber Space

Presented by Ron Ross • November 18, 2019

For the Nation to survive and flourish in the 21st century, where hostile actors in cyberspace are assumed and technology will continue to dominate every aspect of our lives, we must develop trustworthy, secure systems that are cyber resilient. Cyber resilient systems are systems that have security measures or...

Protecting the Nation's Critical Assets: When Cyber Hygiene Is Not Enough

Presented by Ron Ross • November 7, 2018

As we push computers to "the edge," building an increasingly complex world of interconnected information systems and devices, security and privacy continue to dominate the national dialogue. The Defense Science Board in its 2017 report, Task Force on Cyber Defense, provides a sobering assessment of the current...

Risk Management Framework: Learn from NIST

Presented by Ron Ross • November 2, 2011

From heightened risks to increased regulations, senior leaders at all levels are pressured to improve their organizations' risk management capabilities. But no one is showing them how - until now. Learn the fundamentals of developing a risk management program from the man who wrote the book on the topic: Ron Ross,...