purchased systems and subsystems of foreign manufacture.
DoD’s Software Assurance Initiative (see Section 6.1.1) was formed, at
least in part, in response to these recommendations. Prior to that, in December
2001, DoD established the Software Protection Initiative (SPI) to prevent