Senior Computer Scientist
National Institute of Standards and Technology (NIST)
Peter Mell is a senior computer scientist in the Computer Security Division at the National Institute of Standards and Technology (NIST). He is the NIST lead on joint agency work creating a continuous security monitoring reference model for the U.S. government. In cloud computing, he was the vice chair of the Cloud Computing Advisory Council, wrote the U.S. government definition that is now being submitted to the International Standards Organization, and initiated the Federal Risk and Authorization Management Program (FedRAMP) for enabling government-wide risk management of cloud computing systems. His past work includes creating the U.S. National Vulnerability Database, co-founding the NIST Security Content Automation Protocol (SCAP), and creating the SCAP product validation program. He was also the lead author of the Common Vulnerability Scoring System (CVSS) vulnerability metrics used to secure credit card systems worldwide. His recent research experience includes the areas of continuous monitoring, cloud computing, security metrics, security automation, and vulnerability databases.