If recent events involving the security of information and operations have taught us anything, it is that cybersecurity and the way cybersecurity risks are managed are no longer solely the domain of computer scientists. Cybersecurity risk management issues are becoming increasingly familiar topics in C-suites and boardrooms. The National Institute of Standards and Technology (NIST) began its program almost 50 years ago focusing on both advanced technologies as well as cybersecurity risk management. Today, NIST conducts foundational and applied cybersecurity research to produce and advance cybersecurity standards, best practices, measurements, and reference resources to address this fundamental question—is cybersecurity about business or technology?
Donna Dodson, Chief Cybersecurity Advisor, National Institute of Standards and Technology
![](https://www.usenix.org/sites/default/files/styles/speaker_photo/public/donna_dodson_200x230.jpg?itok=-NE2AS6n)
Donna Dodson is the Chief Cybersecurity Advisor for the National Institute of Standards and Technology and Director of the National Cybersecurity Center of Excellence (NCCoE). Since joining NIST in 1987, Donna has been selected as a Fed 100 winner for innovations in cybersecurity, as one of the top 10 influential people in government IT in 2011, and as one of Fed Scoop’s Top 50 D.C. Women in Tech.
Open Access Media
USENIX is committed to Open Access to the research presented at our events. Papers and proceedings are freely available to everyone once the event begins. Any video, audio, and/or slides that are posted after the event are also free and open to everyone. Support USENIX and our commitment to Open Access.
![](https://www.usenix.org/sites/all/modules/usenix/usenix_files/images/usenix-locked.png)
author = {Donna Dodson},
title = {Cybersecurity: Is It about Business or Technology?},
year = {2018},
isbn = {978-1-939133-04-5},
address = {Baltimore, MD},
publisher = {USENIX Association},
month = aug
}