Selena Xiao is a computer scientist at the National Institute of Standards and Technology (NIST) in the Information Technology Laboratory. She serves as part of the Open Security Controls Assessment Language (OSCAL) program team, maintaining and supporting OSCAL adoption.
Her work is focused on cybersecurity and risk assessment automation, including projects such as Cybersecurity And Privacy Open Reference Datasets IN OSCAL (CAPORDINO), a command-line data translator to generate OSCAL artifacts from NIST’s Cybersecurity and Privacy Reference Tool, and Blockchain-based Secure Software Assets Management, an implementation of OSCAL-based continuous Assessment and Authorization (A&A) in a blockchain environment.