{"id":23625,"date":"2019-03-29T13:23:37","date_gmt":"2019-03-29T13:23:37","guid":{"rendered":"https:\/\/one.sightlinemg.com\/c4isrnet\/uncategorized\/2019\/03\/29\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\/"},"modified":"2026-08-08T18:15:58","modified_gmt":"2026-08-08T18:15:58","slug":"nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/03\/29\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\/","title":{"rendered":"NIST\u2019s Ron Ross on the state of cyber: \u2018We literally are hemorrhaging critical information\u2019"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">After Chinese hackers infiltrated a Navy subcontractor\u2019s computer network and stole a trove of highly sensitive data on submarine warfare, it spurred the government to revise the standards that contractors must follow to ensure government data is properly protected data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">What the hackers took was \u201cthe equivalent of the stealth technology for the Air Force,\u201d said Ron Ross, a fellow at the National Institute of Standards and Technology who focuses on computer security.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cWe literally are hemorrhaging critical information about key programs,\u201d Ross said during a fireside chat I moderated at the RSA Federal Summit Tuesday. \u201cThey\u2019re coming after you every day. They\u2019re either going to bring down your capability, they\u2019re going to steal stuff from you, or they\u2019re going to plant malicious code in your systems and they\u2019re going to come back at some point under their timetable and bring you down.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As for the revision of those standards, it\u2019s currently parked in the Office of Management and Budget awaiting approval, Ross said. Ideally, <a href=\"https:\/\/www.fifthdomain.com\/dod\/2019\/03\/26\/pentagon-hopes-to-have-new-cybersecurity-standards-for-contractors-in-2020\/\" target=_blank>the Defense Department would begin to use those standards within the next 18 months<\/a> to help determine whether to award a business a contract.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But will those standards solve the problem? Here\u2019s how Ross described the challenge during our fireside chat. An excerpt of that conversation is below.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>FIFTH DOMAIN: I know the Department of Defense is working with NIST to update standards used by contractors to secure data. Will that document establish requirements and responsibilities that extend to the supply chain, considering those smaller companies are often more vulnerable?<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ROSS: It doesn\u2019t. The requirements are the requirements. But the problem you described is a real one. Information that\u2019s critical doesn\u2019t lose value because it goes from the federal government to a prime contractor and that value stays just as high when it goes to the sub. I think the ultimate solution is you have to protect the information no matter where it is, and somebody is going to have to pay for that. There\u2019s no free lunch. We are always talking about what\u2019s the [return on investment] for doing all the security stuff. We never look in the rearview mirror and say what was the cost of the cleanup? And if you remember the OPM breach not that long ago, in 2015, that cleanup I believe cost over a half a billion dollars. The cleanup is an order of magnitude more expensive than it would have taken to protect the system to start.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>FIFTH DOMAIN: You talk about the need to devote money to this, and yet we\u2019ve had programs that were awarded recently by DoD where the bids were particularly low. These were for massive platforms. It begs the question of whether those trickledown cyber protections are even being considered at the front end? <\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ROSS: I think that there\u2019s always a question about whether we have enough money or enough people to solve this problem. I\u2019m going to come at this from a counter view. We developed a publication two and a half or three years ago. It\u2019s NIST 800-160. That\u2019s a system security engineering guideline. We took an international standard, a joint standard on systems engineering that had nothing to do with security [and used that as the basis to establish] everything you need to do in a life cycle process to make sure security is integrated into that system that you\u2019re building.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The first couple of the steps in the life cycle are called stakeholder requirements. That\u2019s where you sit around the boardroom, or with the war fighters, and they\u2019re saying, \u201cwhat kind of a weapon system do we need to defeat the bad guy? Or what\u2019s our business model in a Fortune 500 company?\u201d Then you have to say, \u201cOkay, we are totally dependent on technology to accomplish that mission. Knowing that, I\u2019m going to build a system with a certain set of functional requirements.\u201d Now we have a step that says you\u2019re required to put your security requirements right in with those functional requirements and there\u2019s something called a trade space discussion that takes place with every system. That\u2019s where the war fighters say, I want everything in the world, and then they say, well, you got cost, schedule and performance. You can\u2019t have that function requirement because it costs too much. You can\u2019t build the antigravity machine. Eventually you stabilize on a set of requirements that you build to.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That&#8217;s where we&#8217;re running off the rails now because largely those discussions don&#8217;t take place in the life cycle development. It may turn out we have plenty of money.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>FIFTH DOMAIN: For years, people have criticized FISMA as being a box checking exercise. Could the expanded focus on artificial intelligence help the state of cybersecurity?<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ROSS: Good AI programs, they\u2019re just programs. They\u2019re algorithms and those programs run on your system stack \u2013 applications, middleware, operating systems, firmware, down to the integrated circuits. So, if you\u2019ve got a whizzbang application and you tell me it\u2019s a trusted application, but it runs on an untrusted operating system, it\u2019s game over. Any AI program that you\u2019re running at the application level is totally going to be bogus information. You can\u2019t trust it if the adversary\u2019s already taken control of your system with a root kit.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Now, if you can build a trusted platform and take advantage of artificial intelligence, machine learning, you\u2019ve got a great brave new world there. That\u2019s awesome and we should be doing all of that. But you can\u2019t hunt your way out of this problem because the attack surface is getting so large and complex and most of it\u2019s unmanaged and most of it\u2019s unprotected. And that\u2019s a formula for going down in the long term.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>And throwing money at the problem won&#8217;t help, the National Institute of Standards and Technology&#8217;s fellow said during an interview at the RSA Federal Summit.<\/p>\n","protected":false},"author":7,"featured_media":62836,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":10,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":{"8":{"categories":["home","daily-brief","newsletters","management"],"primary_category":"home"},"10":{"categories":["daily-news-roundup","newsletters","industry","pentagon"],"primary_category":"daily-news-roundup"}}},"categories":[10],"tags":[],"coauthors":[2509],"class_list":["post-23625","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber"],"acf":{"subheadline":"","legacy_arc_id":"Z5GWF3CEOJE3RBZS2TM3FD3CMY","arc_canonical_url":"\/dod\/2019\/03\/29\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>NIST\u2019s Ron Ross on the state of cyber: \u2018We literally are hemorrhaging critical information\u2019 - C4ISRNet<\/title>\n<meta name=\"description\" content=\"And throwing money at the problem won&#039;t help, the National Institute of Standards and Technology&#039;s fellow said during an interview at the RSA Federal Summit.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NIST\u2019s Ron Ross on the state of cyber: \u2018We literally are hemorrhaging critical information\u2019\" \/>\n<meta property=\"og:description\" content=\"And throwing money at the problem won&#039;t help, the National Institute of Standards and Technology&#039;s fellow said during an interview at the RSA Federal Summit.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/03\/29\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\/\" \/>\n<meta property=\"og:site_name\" content=\"C4ISRNet\" \/>\n<meta property=\"article:published_time\" content=\"2019-03-29T13:23:37+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-08T18:15:58+00:00\" \/>\n<meta name=\"author\" content=\"Jill Aitoro\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jill Aitoro\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t    \"@context\": \"https:\\\/\\\/schema.org\",\n\t    \"@graph\": [\n\t        {\n\t            \"@type\": \"Article\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/03\\\/29\\\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\\\/#article\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/03\\\/29\\\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\\\/\"\n\t            },\n\t            \"author\": {\n\t                \"name\": \"migration\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\"\n\t            },\n\t            \"headline\": \"NIST\u2019s Ron Ross on the state of cyber: \u2018We literally are hemorrhaging critical information\u2019\",\n\t            \"datePublished\": \"2019-03-29T13:23:37+00:00\",\n\t            \"dateModified\": \"2026-08-08T18:15:58+00:00\",\n\t            \"mainEntityOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/03\\\/29\\\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\\\/\"\n\t            },\n\t            \"wordCount\": 1005,\n\t            \"commentCount\": 0,\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/03\\\/29\\\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/AP17290667311650.jpg.jpg\",\n\t            \"articleSection\": [\n\t                \"Cyber\"\n\t            ],\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"CommentAction\",\n\t                    \"name\": \"Comment\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/03\\\/29\\\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\\\/#respond\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebPage\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/03\\\/29\\\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\\\/\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/03\\\/29\\\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\\\/\",\n\t            \"name\": \"NIST\u2019s Ron Ross on the state of cyber: \u2018We literally are hemorrhaging critical information\u2019 - C4ISRNet\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\"\n\t            },\n\t            \"primaryImageOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/03\\\/29\\\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\\\/#primaryimage\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/03\\\/29\\\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/AP17290667311650.jpg.jpg\",\n\t            \"datePublished\": \"2019-03-29T13:23:37+00:00\",\n\t            \"dateModified\": \"2026-08-08T18:15:58+00:00\",\n\t            \"description\": \"And throwing money at the problem won't help, the National Institute of Standards and Technology's fellow said during an interview at the RSA Federal Summit.\",\n\t            \"breadcrumb\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/03\\\/29\\\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\\\/#breadcrumb\"\n\t            },\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"ReadAction\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/03\\\/29\\\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\\\/\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"ImageObject\",\n\t            \"inLanguage\": \"en-US\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/03\\\/29\\\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\\\/#primaryimage\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/AP17290667311650.jpg.jpg\",\n\t            \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/AP17290667311650.jpg.jpg\"\n\t        },\n\t        {\n\t            \"@type\": \"BreadcrumbList\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/03\\\/29\\\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\\\/#breadcrumb\",\n\t            \"itemListElement\": [\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 1,\n\t                    \"name\": \"Home\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t                    \"ad_zone\": \"home\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 2,\n\t                    \"name\": \"Cyber\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/\",\n\t                    \"ad_zone\": \"cyber\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 3,\n\t                    \"name\": \"NIST\u2019s Ron Ross on the state of cyber: \u2018We literally are hemorrhaging critical information\u2019\"\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebSite\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t            \"name\": \"C4ISRNet\",\n\t            \"description\": \"Media for the Intelligence-Age Military | C4ISRNET\",\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t            },\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"SearchAction\",\n\t                    \"target\": {\n\t                        \"@type\": \"EntryPoint\",\n\t                        \"urlTemplate\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/?s={search_term_string}\"\n\t                    },\n\t                    \"query-input\": {\n\t                        \"@type\": \"PropertyValueSpecification\",\n\t                        \"valueRequired\": true,\n\t                        \"valueName\": \"search_term_string\"\n\t                    }\n\t                }\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        },\n\t        {\n\t            \"@type\": \"Organization\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\",\n\t            \"name\": \"C4ISRNet\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t            \"logo\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\",\n\t                \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t                \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t                \"caption\": \"C4ISRNet\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\"\n\t            }\n\t        },\n\t        {\n\t            \"@type\": \"Person\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\",\n\t            \"name\": \"migration\",\n\t            \"image\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec\",\n\t                \"url\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"contentUrl\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"caption\": \"migration\"\n\t            },\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/author\\\/migration\\\/\"\n\t        }\n\t    ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"NIST\u2019s Ron Ross on the state of cyber: \u2018We literally are hemorrhaging critical information\u2019 - C4ISRNet","description":"And throwing money at the problem won't help, the National Institute of Standards and Technology's fellow said during an interview at the RSA Federal Summit.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"NIST\u2019s Ron Ross on the state of cyber: \u2018We literally are hemorrhaging critical information\u2019","og_description":"And throwing money at the problem won't help, the National Institute of Standards and Technology's fellow said during an interview at the RSA Federal Summit.","og_url":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/03\/29\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\/","og_site_name":"C4ISRNet","article_published_time":"2019-03-29T13:23:37+00:00","article_modified_time":"2026-08-08T18:15:58+00:00","author":"Jill Aitoro","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Jill Aitoro","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/03\/29\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\/#article","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/03\/29\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\/"},"author":{"name":"migration","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1"},"headline":"NIST\u2019s Ron Ross on the state of cyber: \u2018We literally are hemorrhaging critical information\u2019","datePublished":"2019-03-29T13:23:37+00:00","dateModified":"2026-08-08T18:15:58+00:00","mainEntityOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/03\/29\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\/"},"wordCount":1005,"commentCount":0,"publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/03\/29\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP17290667311650.jpg.jpg","articleSection":["Cyber"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/03\/29\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/03\/29\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\/","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/03\/29\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\/","name":"NIST\u2019s Ron Ross on the state of cyber: \u2018We literally are hemorrhaging critical information\u2019 - C4ISRNet","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website"},"primaryImageOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/03\/29\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\/#primaryimage"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/03\/29\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP17290667311650.jpg.jpg","datePublished":"2019-03-29T13:23:37+00:00","dateModified":"2026-08-08T18:15:58+00:00","description":"And throwing money at the problem won't help, the National Institute of Standards and Technology's fellow said during an interview at the RSA Federal Summit.","breadcrumb":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/03\/29\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/03\/29\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/03\/29\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\/#primaryimage","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP17290667311650.jpg.jpg","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP17290667311650.jpg.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/03\/29\/nists-ron-ross-on-the-state-of-cyber-we-literally-are-hemorrhaging-critical-information\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/","ad_zone":"home"},{"@type":"ListItem","position":2,"name":"Cyber","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/","ad_zone":"cyber"},{"@type":"ListItem","position":3,"name":"NIST\u2019s Ron Ross on the state of cyber: \u2018We literally are hemorrhaging critical information\u2019"}]},{"@type":"WebSite","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","name":"C4ISRNet","description":"Media for the Intelligence-Age Military | C4ISRNET","publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/one.sightlinemg.com\/c4isrnet\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization","name":"C4ISRNet","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","caption":"C4ISRNet"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1","name":"migration","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec","url":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","caption":"migration"},"url":"https:\/\/one.sightlinemg.com\/c4isrnet\/author\/migration\/"}]}},"jetpack_sharing_enabled":true,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"C4ISRNet","distributor_original_site_url":"https:\/\/one.sightlinemg.com\/c4isrnet","push-errors":false,"jetpack_featured_media_url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/AP17290667311650.jpg.jpg","_links":{"self":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/23625","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/comments?post=23625"}],"version-history":[{"count":1,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/23625\/revisions"}],"predecessor-version":[{"id":23638,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/23625\/revisions\/23638"}],"wp:attachment":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/media?parent=23625"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/categories?post=23625"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/tags?post=23625"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/coauthors?post=23625"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}