How one cyber expert is influencing day-to-day resilience

Ron Ross, a cybersecurity expert who has long helped federal agencies develop security standards and guidelines, is leaving the National Institute of Standards and Technology’s Federal Information Security Modernization Act (FISMA) implementation project after 17 years leading it, he tweeted Jan. 20.

Ross will be transitioning to the systems security engineering (SSE) project to “focus on DevSecOps and building security into the [system development life cycle],” he wrote. The project looks to influence and affect trustworthiness and cyber resilience of the services used in day-to-day activities, he said.

“The long-term objective is to work with government, industry and academia to build a world-class set of best practices in this area that can be voluntarily embraced by the public and private sector,” Ross said.

Victoria Pillitteri, who has worked alongside Ross for four years as a senior researcher, will take over FISMA. However, Ross will continue to work on FISMA publications while expanding the SSE project, Pillitteri said.

Ross said his “finale” will be the Security and Privacy Controls for Information Systems and Organizations Fifth Revision (SP 800-53 Rev. 5), which provides the government with new security controls to follow based on threat intelligence.

In August, Ross said many NIST publications with cybersecurity controls depend on the release of SP 800-53, which has been delayed by an Office of Management and Budget review. SP 800-171B, which offers federal agencies security requirements to protect the confidentiality of controlled unclassified information, is waiting final release as it contains provisions linked to provisions in SP 800-53 Rev. 5.

Ross will lead the FISMA project until SP 800-53 is published in its final form. He has been leading the SSE project he is transitioning to since 2012.

“This transition will allow a full-time focus on the SSE work and to explore new and emerging approaches in methodologies such as DevSecOps," said Ross.

More In IT & Networks

Space Force expands Commercial Integration Cell partnerships

The cell provides a venue for real-time technology exchange between U.S. Space Command and commercial space firms.

Europe picks consortium for sovereign satellite constellation IRIS²

The EU is counting on IRIS² as a sovereign alternative to the likes of Starlink, Amazon’s Kuiper or U.K.-based OneWeb.

Leaders wrestle with a potent mix: AI and weapons of mass destruction

New technologies can lower the bar for manufacturing dangerous weapons, while also helping watchdog organizations in detecting treaty infractions.

Italian Navy tasks Fincantieri to design drone-laden warships

“It means looking at how best to handle storage, maintenance and loading ammunition,” an Italian Navy official said.

US Space Force moves to make its systems battle-ready by 2026

The service has set a goal to ensure that four high-priority, classified systems are fully integrated into its C2 architecture.