Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Victoria Yan Pillitteri (Fed)

Manager, Security Engineering and Risk Management Group

Ms. Victoria Yan Pillitteri is a supervisory computer scientist in the Computer Security Division at the National Institute of Standards and Technology (NIST). Ms. Pillitteri is the Manager of the Security Engineering and Risk Management Group and leads the Risk Management Framework team/Federal Information Security Modernization Act (FISMA) Implementation Project. In that role, she develops the suite of risk management guidance used for managing cybersecurity risk in the federal government and coordinates the associated stakeholder outreach and public-private sector collaboration efforts. Ms. Pillitteri leads the Joint Task Force working group, a partnership with the Department of Defense, the Intelligence Community, and Civilian Agencies to develop a unified security framework to protect the U.S. Government from cyber-attacks, and is co-chair of the Federal Cybersecurity and Privacy Professionals Forum hosted by NIST. 

Ms. Pillitteri previously led programs in smart grid and cyber-physical systems cybersecurity, worked on the Framework for Improving Critical Infrastructure Cybersecurity, the Privacy Framework, and served as a program analyst in the NIST Office of the Director.

Ms. Pillitteri holds a B.S. in Electrical Engineering from the University of Maryland and an M.S. in Computer Science with a concentration in Information Assurance from The George Washington University. She has completed the Key Executive Leadership Program at American University and the Office of Personnel Management (OPM) Senior Executive Service Candidate Development Program, receiving an SES certification by the OPM Qualifications Review Board. Ms. Pillitteri is a Certified Information Systems Security Professional (CISSP).

Selected Publications

Guide to Industrial Control Systems (ICS) Security

Keith A. Stouffer, Victoria Y. Pillitteri, Suzanne Lightman, Marshall Abrams, Adam Hahn
This document provides guidance on how to secure Industrial Control Systems (ICS), including Supervisory Control and Data Acquisition (SCADA) systems


Guide to Operational Technology (OT) Security

Keith A. Stouffer, Michael Pease, CheeYee Tang, Timothy Zimmerman, Victoria Yan Pillitteri, Suzanne Lightman, Adam Hahn, Stephanie Saravia, Aslam Sherule, Michael Thompson
This document provides guidance on how to secure operational technology (OT) while addressing their unique performance, reliability, and safety requirements. OT

3rd High-Performance Computing Security Workshop: Joint NIST-NSF Workshop Report

Yang Guo, Jeremy Licata, Victoria Yan Pillitteri, Sanjay (Jay) Rekhi, Robert Beverly, Xin Yuan, Gary Key, Rickey Gregg, Stephen Bowman, Catherine Hinton, Albert Reuther, Ryan Adamson, Aron Warren, Purushotham Bangalore, Erik Deumens, Csilla Farkas
High-performance computing (HPC) is a vital computational infrastructure for processing large data volumes, performing complex simulations, and conducting
Created October 9, 2019, Updated December 8, 2022