Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Dr. Michaela Iorga (Fed)

Supervisory Computer Engineer, Director OSCAL Program, SURF Program; Hardware Security Group

Dr. Michaela Iorga is a Supervisory Computer Scientist at the National Institute of Standards and Technology (NIST), Information Technology Laboratory (ITL). She serves as the Director of the Open Security Controls Assessment Language (OSCAL) program and as the Senior Security Technical Lead for cloud computing. She has chaired the NIST Cloud Security and Forensics Working Groups and currently oversees research activities for the Multicloud Security Public Working Group.

A recognized subject matter expert in cybersecurity, risk assessment, and information assurance, Dr. Iorga collaborates with industry, academia, and government stakeholders to develop and disseminate high-level, vendor-neutral cybersecurity and forensics guidance aligned with national priorities and designed to advance U.S. innovation and industrial competitiveness.

Dr. Iorga received her last Ph.D. from the Pratt School of Engineering at Duke University in North Carolina, USA.

Awards

2021: Outstanding Technology Transfer - For outstanding initiative in developing, implementing, and transferring the Open Security Controls Assessment Language (OSCAL) that sets the foundation for security automation.

2022: Gold Medal Award - For enabling faster, more accurate, and lower cost system implementations through automated assessment of security control effectiveness.

Selected Publications

NIST Cloud Computing Forensic Science Challenges

Author(s)
Martin Herman, Michaela Iorga, Ahsen Michael Salim, Robert H. Jackson, Mark R. Hurst, Ross Leo, Richard Lee, Nancy Landreville, Anand K. Mishra, Yien Wang, Rodrigo Sardinas
This document summarizes research performed by the members of the NIST Cloud Computing Forensic Science Working Group and aggregates, categorizes, and discusses...

General Access Control Guidance for Cloud Systems

Author(s)
Chung Tong Hu, Michaela Iorga, Wei Bao, Ang Li, Qinghua Li, Antonios Gouglidis
This document presents cloud access control characteristics and a set of general access control guidance for cloud service models: IaaS (Infrastructure as a...

Publications

NIST Cloud Computing Forensic Reference Architecture

Author(s)
Martin Herman, Michaela Iorga, Ahsen Michael Salim, Robert H. Jackson, Mark R. Hurst, Ross A. Leo, Anand Kumar Mishra, Nancy M. Landreville, Yien Wang
This document summarizes the research performed by the NIST Cloud Computing Forensic Science Working Group and presents the NIST Cloud Computing Forensic...

NIST Cloud Computing Forensic Science Challenges

Author(s)
Martin Herman, Michaela Iorga, Ahsen Michael Salim, Robert H. Jackson, Mark R. Hurst, Ross Leo, Richard Lee, Nancy Landreville, Anand K. Mishra, Yien Wang, Rodrigo Sardinas
This document summarizes research performed by the members of the NIST Cloud Computing Forensic Science Working Group and aggregates, categorizes, and discusses...

General Access Control Guidance for Cloud Systems

Author(s)
Chung Tong Hu, Michaela Iorga, Wei Bao, Ang Li, Qinghua Li, Antonios Gouglidis
This document presents cloud access control characteristics and a set of general access control guidance for cloud service models: IaaS (Infrastructure as a...

Selected Blog Posts

Created August 15, 2019, Updated May 11, 2026
Was this page helpful?