Sasha Romanosky

Sasha Romanosky is a Senior Policy Researcher where he studies topics on the economics of security and privacy, national security, cybercrime, and law & economics. Sasha holds a Ph.D. in Public Policy and Management from Carnegie Mellon University and a B.S. in Electrical Engineering from the University of Calgary, Canada. He was a Microsoft research fellow in the Information Law Institute at New York University School of Law, and a security professional for over 10 years. Sasha is one of the original authors of the Common Vulnerability Scoring System (CVSS), an international standard for scoring computer vulnerabilities (ITU-T X.1521), and co-creator of EPSS, an emerging standard for predicting software vulnerability exploitation.

Sasha is a former Cyber Policy Advisor in the Office of the Secretary of Defense for Policy (OSDP) at the Pentagon where he oversaw the Department's Vulnerability Equities Process (VEP), the Vulnerability Disclosure Program (VDP) and other cyber policy matters, for which he received the Defense Medal for Exceptional Public Service.  Sasha is also an appointed member of DHS's Data Privacy and Integrity Committee (DPIAC), where he advises the Secretary of Homeland Security and DHS's Chief Privacy Officer on policy, operational, and technology issues.