Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Stephen Quinn (Fed)
Mr. Stephen Quinn joined the National Institute of Standards and Technology (NIST) in 2004 and serves as a senior computer scientist in the Information Technology Laboratory (ITL). Mr. Quinn is the technical lead for the NIST Cybersecurity Framework 2.0, and program manager of the National Checklist Program and National Online Informative Reference Program. Steve is the lead author and engineer for integrating NIST risk management project work within the paradigm of Enterprise Risk Management (ERM) focusing on the fully integrated lifecycle of concurrent risk management processes. He is also a co-originator of the Security Content Automation Protocol (SCAP).
Prior to joining NIST, Steve worked as a consultant to the Department of Defense and large commercial outsourcings with Wall Street banking firms and insurance companies conducting penetration testing (i.e. white hat hacking) to identify and exploit software/configuration flaw and also performed software integration. Specifically, he comes from an operational background, having owned two companies that provided service offering for vulnerability assessments, designing security architectures, code development, cybersecurity risk management, certifications and accreditations, and ST&Es. His research experience and practitioner experience includes cybersecurity and ICT risk management, remediating risks specific to computer viruses/malware, intrusion detection systems (IDSs), vulnerability/misconfiguration identification, categorization, and remediation.
Mr. Quinn received his bachelor’s degree in computer science from the University of Maryland in Baltimore County (UMBC) in 1995. In 2008, he earned a Master of Science (M.S.) in Information Technology with a concentration in project management from the Capella University. Mr. Quinn is an ISC2 Certified Information Systems Security Professional (CISSP) and PMI certified Project Management Professional (PMP). Mr. Quinn is also a FAI certified FAC-PPM and FAC-COR.
Awards
Stephen was named to the “Federal 100” by the trade publication Federal Computer Week (FCW) and received the Department of Commence Gold Medal Award for his work in automating security protocols for operating systems and applications. He also received the Federal CIO Council Leadership award for related work.