Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.


The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Stephen Quinn

Stephen Quinn is a senior computer scientist at the National Institute of Standards and Technology (NIST). He is the program manager of the interagency and interdepartmental Information Security Automation Program (ISAP) and co-originator of the Security Content Automation Protocol (SCAP) with his NIST colleague Peter Mell. Steve also oversees the NIST National checklist program located at

Prior to joining NIST, Steve worked as consultant to the Department of Defense and large commercial outsourcings with Wall Street banking firms and insurance companies. Specifically, he comes from an operational background, having owned a company that provided services offering for vulnerability assessments, designing security architectures, code development, C&A, and ST&Es. His research experience includes computer viruses, intrusion detection systems (IDSs), vulnerability/misconfiguration identification, categorization, and remediation.


Created October 9, 2019