Pentagon Rethinks Software Buys, Eyes Open Source Security

The Department of Defense (DOD) is set to revamp its software procurement process in a bid to boost security and improve supply chain visibility. Citing “outdated” systems, the DOD is launching a Software Fast-Track (SWFT) initiative to streamline how it acquires, authorizes, and tests software.

Software Fast-Track Initiative

Spearheaded by DOD CIO Katherine Arrington, the SWFT Framework, expected within 90 days, will introduce clearer cybersecurity and Supply Chain Risk Management (SCRM) requirements. The aim is to expedite security authorizations and ensure rapid software adoption across the department.

Arrington emphasized that current procurement processes lack the agility needed in today’s fast-evolving threat landscape. A key concern is the use of open source software, where visibility into code origins and security remains a “significant and ongoing challenge.”

Addressing Vulnerabilities

With malware and partner leaks having already compromised DOD systems, software vulnerabilities are a prime target for attackers. The SWFT initiative seeks to address these risks by implementing more rigorous verification processes and secure information-sharing mechanisms.

The DOD also aims to eliminate redundant processes, mirroring efforts elsewhere in the government. Efficiency drives, similar to those championed by the “DOGE” initiative, have already saved the DOD an estimated $6 billion.

Read More:

• US DOD wants right-to-repair provisions in Army contracts
• Removing software supply chain blind spots
• DOGE planning “hackathon” for IRS data access

Source: TechRadar Pro