Ron Ross

Last updated

Ron Ross
Dr. Ronald S. Ross.png
Dr. Ron Ross
Born
United States
NationalityAmerican
Alma mater United States Military Academy (B.S.)
Naval Postgraduate School (M.S., Ph.D.)
Defense Systems Management College
OccupationComputer scientist
Years active1990s–2025 (government service)
Employer National Institute of Standards and Technology (NIST)
Known forNIST SP 800-53, SP 800-37, SP 800-160
TitleNIST Fellow, Senior Computer Scientist
Awards
Military service
Allegiance United States
Branch United States Army
Years of service20 years
Rank Lieutenant Colonel (Retired)
UnitMechanized Infantry; Army Acquisition Corps
Awards

Ronald S. Ross is an American computer scientist, retired United States Army lieutenant colonel, and senior cybersecurity advisor best known for leading the development of federal information security standards at the National Institute of Standards and Technology (NIST). Widely regarded as one of the most influential figures in federal cybersecurity policy, Ross was a principal author of NIST’s most widely used frameworks, including SP 800-53, SP 800-37, and SP 800-160. His work has shaped cybersecurity practices across the United States federal government, defense contractors, and private industry. He has received multiple national honors for his contributions to cybersecurity policy, secure systems engineering, and public service. [1] [2] [3]

Contents

Early life and education

Ross graduated from the United States Military Academy at West Point and earned a master’s and doctorate in computer science from the Naval Postgraduate School, with a focus on artificial intelligence and robotics. He also completed studies at the Defense Systems Management College. [2] [1]

Cadet color guard during a formal parade at the United States Military Academy USMA Color Guard on Parade.jpg
Cadet color guard during a formal parade at the United States Military Academy

Military service

Ross served 20 years in the United States Army, where he was commissioned as a Second Lieutenant and served as a Mechanized Infantry and Army Acquisition Corps officer. He completed Airborne training and held technical and leadership roles in secure computing, information assurance, and risk management, retiring with the rank of lieutenant colonel. [4]

Paratrooper descends under the T-11 parachute during its first operational jump by the United States Army Flickr - The U.S. Army - First jump with the new T-11 parachute.jpg
Paratrooper descends under the T-11 parachute during its first operational jump by the United States Army

Military insignia

Below are the official insignia representing his military rank, branch of service, qualifications, and decorations:

InsigniaDescription
US-O5 insignia.svg Lieutenant Colonel (O-5), United States Army
USA - Army Infantry Insignia.png Branch insignia of the U.S. Army Infantry
US Army Basic Parachutist Badge.png Basic Parachutist Badge
Meritorious Service Medal ribbon.svg Meritorious Service Medal

Civilian career

After retiring from the military, Ross began his civilian service at the Institute for Defense Analyses before joining the National Institute of Standards and Technology (NIST) as a senior computer scientist. He was named a NIST Fellow, the agency’s highest honorary recognition, for his pioneering leadership in cybersecurity and systems security engineering. [2]

Ross was a principal architect of key cybersecurity standards and frameworks used across the federal government and private sector. He served as lead author on foundational NIST publications, including:

Diagram of the NIST Cybersecurity Framework, illustrating the five core functions: Identify, Protect, Detect, Respond, and Recover Framework-01.png
Diagram of the NIST Cybersecurity Framework, illustrating the five core functions: Identify, Protect, Detect, Respond, and Recover

Cybersecurity Frameworks and Risk Management

These works define risk management practices and cybersecurity baselines used across the U.S. federal government and private sector.

Security and Privacy Control Catalogs (SP 800-53 series)

These publications serve as core reference frameworks for federal and private-sector information system security.

Engineering-Based Cybersecurity and System Design

These works lay the foundation for secure systems engineering and cyber-resilience, emphasizing mission assurance and trust.

Controlled Unclassified Information (CUI) and Advanced Protections

These publications support implementation of DFARS, CMMC, and other regulatory programs for contractors handling sensitive government data.

Impact and scholarly analysis

SP 800-53, particularly Revision 5, has received significant attention in both academic and policy circles for its role in shaping federal cybersecurity standards. According to a 2022 analysis, SP 800-53's outcome-based controls and integration of privacy requirements provide a scalable and flexible framework adaptable to both federal and private-sector organizations. [5] The publication's baseline tailoring and modular approach allow agencies and enterprises to align controls with specific mission and risk profiles, enhancing resilience across complex systems.

Dr. Ron Ross, as the principal architect and longtime lead author of SP 800-53, played a central role in developing its structure, integrating privacy and supply chain safeguards, and harmonizing the controls with the Risk Management Framework (RMF) and related NIST publications. His leadership ensured that SP 800-53 evolved to meet emerging cyber threats while maintaining compatibility with both federal and commercial best practices.

Academic studies have also highlighted the practical value of SP 800-53. A 2022 arXiv publication found that implementing a targeted group of just 20 SP 800-53 controls could address more than 70 percent of the techniques identified in the MITRE ATT&CK framework, underscoring its relevance for countering advanced cyber threats. [6]

YearMilestoneDescription
2005SP 800-53 Rev. 1Initial release of Security Controls for Federal Information Systems under FISMA, providing a unified catalog of security controls. [7]
2009SP 800-53 Rev. 3Expanded to address new threats, incorporated privacy controls, and introduced security control baselines for low, moderate, and high systems. [8]
2013SP 800-53 Rev. 4Integrated cyber resilience concepts, mobile/IoT coverage, and supply chain risk management controls. [9]
2017Draft SP 800-53 Rev. 5Public draft released to fully integrate privacy controls, reorganize control families, and harmonize with international standards. [10]
2020SP 800-53 Rev. 5 (Final)Final modernization of the control catalog with outcome-based structure, enhanced privacy safeguards, and supply chain controls. [11]
2024SP 800-53 Rev. 5.1Minor update aligning with SP 800-171 Rev. 3 and CUI protection changes, refining privacy and security control mappings. [12]

Similarly, the Risk Management Framework (RMF), as defined in SP 800‑37 Rev. 2, has been praised for institutionalizing a lifecycle-based approach to information security, combining systems engineering with ongoing authorization and continuous monitoring. According to FedTech Magazine, the RMF enables agencies to "select and deploy the appropriate safeguards" while embedding risk decisions into enterprise governance processes. [13]

Diagram of the Risk Management Framework Revision 2, showing the steps: Categorize, Select, Implement, Assess, Authorize, and Monitor Risk Management Framework RMF Rev. 2.png
Diagram of the Risk Management Framework Revision 2, showing the steps: Categorize, Select, Implement, Assess, Authorize, and Monitor

A 2024 agency implementation case study observed that the RMF contributed to improved compliance maturity, enhanced automation, and a shift toward proactive cyber risk governance, although challenges in integration and resource constraints remained. [14] Experts credit Ross with championing the engineering-based cybersecurity mindset reflected in SP 800‑160, helping bridge the gap between traditional information assurance and resilient systems design. [15]

Together, these analyses affirm that the frameworks authored or co-authored by Ross have shaped national and international approaches to information assurance, privacy protection, and cyber resilience in both policy and practice. The table below highlights key milestones in U.S. federal cybersecurity risk management from DIACAP to NIST-aligned frameworks.

2006
DIACAP replaces DITSCAP as DoD's certification and accreditation process [16] 		→2010
OMB and CNSS launch the Joint Task Force Transformation Initiative [17] 		→2014
RMF introduced for DoD systems, aligning DIACAP with NIST standards [18] 		→2018
SP 800-37 Rev. 2 updates RMF to include privacy and continuous monitoring [19] 		→2020
SP 800-53 Rev. 5 modernizes control catalog; adds privacy & supply-chain safeguards [20] 		→2024
SP 800-171 Rev. 3 and 800-171A Rev. 3 update CUI protection standards [21]

Ross’s contributions to each phase:

2006 – DIACAP: While still in uniform, Ross was active in the information assurance community, helping set conditions for a shift from checklist-based certification to unified, risk-based methods.

2010 – Joint Task Force Transformation Initiative: Served as a founding member, coordinating NIST, DoD, ODNI, and CNSS to harmonize federal security guidance.

2014 – RMF introduction for DoD: Lead author of SP 800-37, providing the RMF methodology adopted by DoD to replace DIACAP.

2018 – SP 800-37 Rev. 2: Expanded RMF to integrate privacy risk, automation, and ongoing authorization in alignment with evolving mandates.

2020 – SP 800-53 Rev. 5: As principal architect, led the shift to outcome-based controls, adding privacy and supply-chain protections.

2024 – SP 800-171 Rev. 3 / 171A Rev. 3: Contributed to refining CUI protection requirements supporting DFARS and CMMC, aligning with SP 800-53 baselines.

Cloud security assessment and authorization

Ross played a central role in the development of the federal government’s first unified program for cloud security assessment and authorization. [22] Working with the General Services Administration, the Department of Defense (DoD), and the Department of Homeland Security (DHS), Ross and his team tested and validated the Risk Management Framework (RMF) for use by cloud service providers hosting sensitive federal information. [22] [23]

Federal Risk and Authorization Management Program (FedRAMP) FedRAMP logo banner.png
Federal Risk and Authorization Management Program (FedRAMP)

This work directly informed the creation of the Federal Risk and Authorization Management Program (FedRAMP), which standardizes security assessment, authorization, and continuous monitoring for cloud products and services used by U.S. federal agencies. [24] The initiative replaced a checklist-driven approach with a risk-based methodology that allowed agencies to classify data by criticality and apply security controls commensurate with its sensitivity. [22] According to NIST, this shift helped reduce duplicative compliance efforts, improve interoperability among federal systems, and enable more consistent security standards across civilian, defense, and intelligence networks. [23]

Collaborative leadership and national recognition

As a founding member of the Joint Task Force Transformation Initiative, Ross helped lead a government-wide effort to unify federal cybersecurity frameworks through collaboration among NIST, the Department of Defense, the Office of the Director of National Intelligence, and the Committee on National Security Systems. He also served as director of the National Information Assurance Partnership (NIAP), a joint initiative between NIST and the National Security Agency focused on evaluating the security of commercial IT products.

Defense Superior Service Medal.png For his leadership and contributions to national cybersecurity policy, Ross was awarded the Defense Superior Service Medal (in a civilian capacity). [1]

International collaboration

Ross has participated in initiatives to align United States federal cybersecurity frameworks with international standards and best practices. [25] Through his work at NIST and as a member of the Joint Task Force Transformation Initiative, he has contributed to efforts to harmonize guidance with the ISO/IEC 27000 series [26] and other globally recognized information security management standards. [27]

Ross has also engaged with counterparts in the European Union and other regions to promote common approaches to risk management, privacy protection, and control baselines. [1] His participation in events such as the European Cybersecurity Organization’s EU Cyber Act conference included discussions on interoperability between NIST Special Publications and emerging European frameworks. [28] These engagements have positioned Ross as a contributor to global cybersecurity governance, influencing the adoption of engineering-based security principles beyond the U.S. federal environment. [29]

Congressional testimony and media

In the aftermath of the SolarWinds supply chain compromise disclosed in December 2020, Ross's expertise was often called upon in both governmental and media forums. He provided analysis on the systemic weaknesses exploited in the attack, emphasizing that the incident underscored the urgency of adopting engineering-based cybersecurity practices. [30] Drawing on his leadership in developing the SP 800-53 control catalog and the Risk Management Framework, Ross argued that comprehensive supply chain risk management, secure software development lifecycles, and continuous monitoring are essential for defending against advanced persistent threats. [31] His guidance following the breach informed agency responses and contributed to updates in federal security control baselines. [32]

Building on these points, Ross testified before the United States Congress on multiple occasions regarding cybersecurity risk frameworks, supply chain security, and federal preparedness in response to major breaches, including the SolarWinds incident. [32] In his 2021 testimony before the House Science, Space, and Technology Committee, he emphasized the need for engineering-based cybersecurity grounded in system development lifecycles and risk awareness.

Illustration of the Systems development life cycle (SDLC), depicting phases such as planning, analysis, design, implementation, testing, and maintenance Systems development life cycle.svg
Illustration of the Systems development life cycle (SDLC), depicting phases such as planning, analysis, design, implementation, testing, and maintenance

"We have to move beyond compliance checklists and embrace cybersecurity as a vital part of mission assurance. That means building secure systems from the ground up—using proven engineering principles, automation, and continuous risk management to stay ahead of evolving threats." [32] – Dr. Ron Ross

His remarks underscored the role of frameworks such as the Risk Management Framework (RMF) and SP 800-53, which he helped develop, in supporting proactive, mission-aligned cybersecurity strategies.

Ross has also been interviewed in national media outlets including FedTech Magazine, BankInfoSecurity, and Federal News Network, where he has addressed topics such as zero trust architecture, continuous authorization, and cyber resilience in federal and critical infrastructure systems. [33]

The United States Capitol US Capitol west side (cropped).JPG
The United States Capitol

Lectures and academic engagements

Dr. Ron Ross has delivered invited lectures and participated in academic events at numerous universities and colleges across the United States. His speaking engagements have included prestigious institutions such as Stanford University, the Massachusetts Institute of Technology (MIT), Dartmouth College, the Naval Postgraduate School, and George Washington University. [1]

In these settings, Dr. Ross has shared insights on topics including cybersecurity risk management, federal information security policy, systems engineering, and emerging threats in national defense and critical infrastructure protection. His lectures frequently draw upon his leadership at the National Institute of Standards and Technology (NIST), where he helped develop the Risk Management Framework (RMF) and the NIST Cybersecurity Framework.

Building on the National Institute of Standards and Technology Boulder campus in Colorado NIST Boulder Building (5941062442).jpg
Building on the National Institute of Standards and Technology Boulder campus in Colorado

Retirement and legacy

Ross formally retired from full-time government service in 2025 after a decades-long career advancing national cybersecurity policy. Widely regarded as a foundational figure in federal information assurance, he was instrumental in shaping cybersecurity frameworks adopted across U.S. government agencies and critical infrastructure sectors. During his tenure at NIST, Ross led the development of the Risk Management Framework (RMF) and was the principal architect of several cornerstone publications, including SP 800‑37, SP 800‑53, and SP 800‑160. These documents collectively established the baseline for security and privacy controls, systems engineering principles, and risk-based decision-making in federal cybersecurity programs. [34]

Following his retirement, Ross founded RONROSSECURE, LLC, a cybersecurity consulting firm that advises clients on secure systems development, cyber risk governance, and the implementation of NIST-aligned controls. His post-government work includes public speaking, thought leadership in cyber resilience, and continued collaboration with academic institutions and federal advisory panels. [35]

Ross’s frameworks and publications have been adopted internationally and remain foundational references in cybersecurity education, policy, and practice. His legacy includes a significant influence on how federal systems are designed, secured, and assessed in the face of evolving threats. In recognition of his contributions, Ross has received numerous awards, and his work is frequently cited in national cybersecurity policy, strategic frameworks, and congressional testimony.

Awards and honors

Hall of Fame inductions

Federal and government service awards

Professional and industry awards

Fellowships

Media coverage

Media outletContextCitation
The Washington Post Helping federal agencies thwart cyberattacks [3]
Federal News NetworkInsights on SolarWinds breach and federal response [30]
Business WireDiscussing NIST 800-171 Revision 3 at CMMC CON 2023 [46]
GovInfoSecurityInterview on NIST's revolutionary guidance and risk management framework [47]
Healthcare IT NewsRevealing how leadership, governance, and accountability can solve 90% of cyberbreaches [48]
InfoRiskTodayProtecting critical infrastructure through secure system design and NIST initiatives [49]
ActiveCyber.netDiscussing the NIST Risk Management Framework and active cyber defense strategies [50]
CyberSheathExplaining NIST 800-171's history and future at CMMC CON 2023 [51]
BankInfoSecurityEmphasizing the need for improved systems security engineering post‑SolarWinds breach [31]
Forbes In‑depth conversation on cybersecurity leadership and NIST's role in federal security standards [52]

Presentations

TitleDescriptionCitation
Engineering Trustworthy Secure SystemsDescribes an experiment applying security design principles to a NASA satellite system.By Ron Ross and Dr. Kymie Tan, "Engineering Trustworthy Secure Systems" (September 2024), .
Next Generation Mission-Based Security for Systems EngineersExplains how to protect cyber-physical systems from adversarial and non-adversarial threats.By Ron Ross, "Next Generation Mission-Based Security for Systems Engineers" (September 2024), .
Transitioning to Engineering-Based CybersecurityOutlines why current cybersecurity approaches are insufficient for modern threats.By Ron Ross, "Transitioning to Engineering-Based Cybersecurity" (2022), .

Selected publications

Timeline

Legend

  Birth and early life
  Education
  Family and early training
  Academic and professional leadership
  Awards and honors
Click to expand timeline

1950s – Born in the United States.

↓

1970s – Graduated from the United States Military Academy at West Point with a B.S. degree.

↓

1970s–1980s – Commissioned in the United States Army; served as a Mechanized Infantry and Acquisition Corps officer.

↓

1989 – Completed Ph.D. in computer science from the Naval Postgraduate School with a dissertation on robotics and path planning. [53]

↓

1990s – Served as Director of the National Information Assurance Partnership (NIAP), a joint NSA-NIST initiative.

↓

1997 – Joined the National Institute of Standards and Technology (NIST) as a senior computer scientist.

↓

2004–2020s – Principal architect of key NIST frameworks including SP 800-37, SP 800-53, SP 800-160, and SP 800-171.

↓

2013 – Received the inaugural (ISC)² Lynn F. McNulty Tribute Award. [54]

↓

2015 – Inducted into the National Cyber Security Hall of Fame. [36]

↓

2021 – Awarded the Hayden Lifetime Leadership Award by the National Institute of Standards and Technology. [55]

↓

2025 – Retired from NIST and founded RONROSSECURE, LLC. [56]

↓

2025 – Appointed Fellow at Dartmouth College’s Institute for Security, Technology, and Society (ISTS). [57]

See also

References

  1. 1 2 3 4 5 6 7 8 9 "Dr. Ronald S. Ross". EU Cyber Act. European Cybersecurity Organization. Archived from the original on June 1, 2024. Retrieved June 7, 2025.
  2. 1 2 3 4 5 "Ron Ross Biography" (PDF). National Institute of Standards and Technology. Archived (PDF) from the original on June 1, 2024. Retrieved June 9, 2025.
  3. 1 2 "Ron Ross: Helping federal agencies thwart cyberattacks". The Washington Post. December 22, 2015. Archived from the original on February 1, 2024. Retrieved June 2, 2025.
  4. 1 2 "Advisory Board – Billington CyberSecurity". Billington CyberSecurity. Archived from the original on June 1, 2024. Retrieved June 2, 2025.
  5. ↑ "Exploring the Impact of NIST SP 800-53 on Federal IT Systems". Tripwire. October 17, 2022. Retrieved July 19, 2025.
  6. ↑ Gupta, Ankita (November 2022). "Mitigating ATT&CK Techniques with NIST SP 800-53 Controls". arXiv. Retrieved July 19, 2025.
  7. ↑ "SP 800-53 Rev. 1". NIST. December 2005. Retrieved August 11, 2025.
  8. ↑ "SP 800-53 Rev. 3". NIST. August 2009. Retrieved August 11, 2025.
  9. ↑ "SP 800-53 Rev. 4". NIST. April 2013. Retrieved August 11, 2025.
  10. ↑ "Draft SP 800-53 Rev. 5". NIST. August 2017. Retrieved August 11, 2025.
  11. ↑ "SP 800-53 Rev. 5: Security and Privacy Controls for Information Systems and Organizations". NIST. September 2020. Retrieved August 11, 2025.
  12. ↑ "SP 800-53 Rev. 5.1". NIST. July 2024. Retrieved August 11, 2025.
  13. ↑ "NIST Risk Management Framework: How It Can Help Feds Boost Cybersecurity". FedTech Magazine. September 2019. Retrieved July 19, 2025.
  14. ↑ Stoltz, Erica (May 2024). "Lessons from Federal Implementation of NIST's RMF". arXiv. Retrieved July 19, 2025.
  15. ↑ "Ron Ross: The Adversary Lives in the Cracks". BankInfoSecurity. December 23, 2020. Retrieved July 19, 2025.
  16. ↑ "Department of Defense Information Assurance Certification and Accreditation Process (DIACAP)" (PDF). DoD. November 28, 2007. Retrieved August 10, 2025.
  17. ↑ "Joint Task Force Transformation Initiative". NIST. Retrieved August 10, 2025.
  18. ↑ "DoD Instruction 8510.01: Risk Management Framework (RMF) for DoD IT" (PDF). DoD. March 12, 2014. Retrieved August 10, 2025.
  19. ↑ "SP 800-37 Rev. 2: Risk Management Framework for Information Systems and Organizations". NIST. December 2018. Retrieved August 10, 2025.
  20. ↑ "SP 800-53 Rev. 5: Security and Privacy Controls for Information Systems and Organizations". NIST. September 2020. Retrieved August 10, 2025.
  21. ↑ "SP 800-171 Rev. 3: Protecting Controlled Unclassified Information". NIST. May 2024. Retrieved August 10, 2025.
  22. 1 2 3 "Ron Ross". Samuel J. Heyman Service to America Medals. Partnership for Public Service. 2015. Retrieved August 12, 2025.
  23. 1 2 "NIST's Ron Ross Wins Three Top Awards for Advancing Cybersecurity". National Institute of Standards and Technology. October 1, 2015. Retrieved August 12, 2025.
  24. ↑ "History of FedRAMP". FedRAMP. Retrieved August 12, 2025.
  25. ↑ "Joint Task Force Transformation Initiative". National Institute of Standards and Technology. Retrieved August 10, 2025.
  26. ↑ "ISO/IEC 27000-series Information Security Management Systems". International Organization for Standardization. Retrieved August 10, 2025.
  27. ↑ "NIST Alignment with International Standards". National Institute of Standards and Technology. 2018. Retrieved August 10, 2025.
  28. ↑ "EU Cyber Act Conference 2024 – Speaker List". European Cybersecurity Organization. Retrieved August 10, 2025.
  29. ↑ "Ron Ross: The Adversary Lives in the Cracks". BankInfoSecurity. December 23, 2020. Retrieved August 10, 2025.
  30. 1 2 "One of government's leading cybersecurity experts weighs in on SolarWinds breach". Federal News Network. December 17, 2020. Archived from the original on March 1, 2024. Retrieved June 2, 2025.
  31. 1 2 "NIST's Ron Ross: 'The Adversary Lives in the Cracks'". BankInfoSecurity. December 23, 2020. Archived from the original on February 1, 2024. Retrieved June 2, 2025.
  32. 1 2 3 "SolarWinds and Beyond: Improving the Cybersecurity of Software Supply Chains". House Science, Space, and Technology Committee. May 25, 2021. Retrieved July 19, 2025.
  33. ↑ "NIST's Ron Ross: The Adversary Lives in the Cracks". BankInfoSecurity. December 23, 2020. Retrieved July 19, 2025.
  34. ↑ "Tech Stalwart Ron Ross Leaving NIST". MeriTalk. February 20, 2025. Archived from the original on June 1, 2024. Retrieved June 3, 2025.
  35. ↑ "Ron Ross Secure". Ron Ross Secure. Archived from the original on June 1, 2024. Retrieved June 9, 2025.
  36. 1 2 "Ron Ross – Biography" (PDF). Government Executive. Retrieved June 15, 2025.
  37. ↑ "Commerce Gold and Silver Medals". NIST. December 2010. Retrieved June 2, 2025.
  38. ↑ "DLA Energy Americas Commander Bids Farewell". Defense Logistics Agency. Retrieved August 11, 2025.
  39. ↑ "Ron Ross Receives Federal 100 Award". NIST. February 4, 2019. Retrieved June 2, 2025.
  40. ↑ "The 2019 Federal 100". FCW. March 2019. Retrieved June 2, 2025.
  41. ↑ "Ron Ross". Service to America Medals. Partnership for Public Service. Retrieved June 5, 2025.
  42. ↑ "NIST Fellow Ron Ross Honored with Inaugural McNulty Information Security Award". NIST. November 21, 2013. Retrieved June 2, 2025.
  43. ↑ "Ron Ross to Receive 2021 Hayden Lifetime Leadership Award". NIST. October 6, 2021. Retrieved June 2, 2025.
  44. ↑ "ICIT Honors Dr. Ron Ross (NIST) and Suzette Kent (OMB) at 2019 ICIT Gala & Benefit". GlobeNewswire. Institute for Critical Infrastructure Technology. November 27, 2019. Retrieved June 7, 2025.
  45. ↑ "Ron Ross – LinkedIn". LinkedIn. Retrieved June 20, 2025.
  46. ↑ "NIST 800-171 Co-Author Dr. Ron Ross to Discuss New Revision at CMMC CON 2023" (Press release). Business Wire. August 15, 2023. Archived from the original on February 1, 2024. Retrieved June 2, 2025.
  47. ↑ "Infosec Guru Ron Ross on NIST's Revolutionary Guidance". GovInfoSecurity. March 5, 2010. Archived from the original on February 1, 2024. Retrieved June 2, 2025.
  48. ↑ "NIST fellow Ron Ross reveals how to solve 90 percent of cyberbreaches". Healthcare IT News. May 11, 2016. Archived from the original on February 1, 2024. Retrieved June 2, 2025.
  49. ↑ "Ron Ross of NIST on Protecting Critical Infrastructure". InfoRiskToday. December 27, 2018. Archived from the original on February 1, 2024. Retrieved June 2, 2025.
  50. ↑ "Interview with NIST's Ron Ross". ActiveCyber.net. Archived from the original on February 1, 2024. Retrieved June 2, 2025.
  51. ↑ "Dr. Ron Ross to Explain NIST 800-171's History and Future". CyberSheath. August 11, 2023. Archived from the original on February 1, 2024. Retrieved June 2, 2025.
  52. ↑ "A Conversation With The Most Influential Cybersecurity Guru To The U.S. Government". Forbes. December 7, 2015. Archived from the original on February 1, 2024. Retrieved June 2, 2025.
  53. ↑ "Planning Minimum-Energy Paths in an Off-Road Environment" (PDF). Naval Postgraduate School. Retrieved July 20, 2025.
  54. ↑ "NIST Fellow Ron Ross Honored with Inaugural McNulty Information Security Award". NIST. November 21, 2013.
  55. ↑ "Ron Ross to Receive 2021 Hayden Lifetime Leadership Award". NIST. October 6, 2021.
  56. ↑ "Ron Ross Secure". Ron Ross Secure. Retrieved June 9, 2025.
  57. ↑ "Ron Ross – LinkedIn". LinkedIn. Retrieved June 20, 2025.
This page is based on this Wikipedia article
Text is available under the CC BY-SA 4.0 license; additional terms may apply.
Images, videos and audio are available under their respective licenses.