difficulty in establishing, verifying, and sustaining security controls that plague
offshore outsourcing apply equally to software projects within the United States.
The “use commercial off-the-shelf (COTS)” imperative and increasing
acceptance of open source software for use in government projects mean that