Federal 100 winner: Karen Scarfone

Karen Scarfone
Project manager
National Institute of Standards and Technology

Scarfone’s prolific output of easy-to-understand technical security manuals has helped numerous government organizations make their Web servers and mobile devices more secure. She has written or co-written 33 publications in the past two years, covering incident response, host security and telework security. Her publications have been downloaded 4 million time since 2008. Scarfone also used her technical expertise to help update the widely used Common Vulnerability Scoring System that indexes new vulnerabilities.

"Scarfone's authorship and leadership in developing critical security guidance has taken NIST's mandate to provide this guidance to new heights in terms of volume, relevance, quality and impact," said Timothy Grance, NIST's program manager for cyber and network security.