projects. The efforts to improve the security of acquired software may result in
improved mechanisms for assuring the supply chain.
Similarly, budget and schedule constraints may result in contractor-produced
software that has not undergone sufficient (if any) design security reviews, code