For his research and leadership in reducing the risk of cybersecurity threats through the creation of NIST's cybersecurity Risk Management Framework (RMF) and the development of a library of supporting NIST technical standards and technical guidelines.