The National Institute of Standards and Technology’s National Cybersecurity Center of Excellence has announced the nine organizations who will participate in a project seeking to address challenges associated with DevOps and software supply chain security.
The selected “technology collaborators” in the Software Supply Chain and DevOps Security Practices Project are Black Duck, Dell Technologies, DigiCert, Endor Labs, GitLab, Google, IBM, Microsoft and Scribe Security, NCCoE said Thursday.
Mission: To Design, Build Innovative Technologies
The organizations were selected after submitting proposed capabilities that align with the project’s vision. They signed a cooperative research and development agreement with the government to provide expertise and hardware or software that would be utilized to design and build innovative technologies.
The participants will work with a project team to develop risk-based strategies and recommendations for secure DevOps and software supply chain practices. The effort envisions implementing the DevSecOps practices to proof-of-concept use-case scenarios, which could help organizations identify and mitigate cybersecurity risks posed by the software supply chain.
Launched in May 2023, the project aims to assist organizations maintain the volume and velocity of software delivery by using a cloud-native strategy and automated platforms. It also targets to showcase current and future secure development practices, tools and frameworks to address cybersecurity challenges.
Related Articles
Gregory Barbaccia, federal chief information officer and a 2025 Wash100 awardee, has shared his insights on how the federal government should advance digital transformation. “I notice a lot of the government considers itself to be ‘digital,’ but in reality, we’ve only digitized, not transformed. Sure we went 0-1, but that should have just been the beginning,” Barbaccia wrote in a LinkedIn post. He noted the lack of automation and that workflows remain unchanged despite the replacement of paper ledgers with spreadsheets. “Files are shared over email instead of through real-time collaboration tools,” he added. Advancing Digital Transformation in Federal Government
The Federal Communications Commission has adopted new rules that seek to eliminate unnecessary paperwork and address regulatory barriers to the ground-station-as-a-service, or GSaaS, business model as part of efforts to drive innovation in the U.S. space economy. FCC said Thursday the new rules establish a process for ground station operators to secure a baseline license without first identifying a satellite point of communication. A simple FCC notification will be required for each new point of communication. According to FCC, the change would eliminate nearly half of earth station modification applications. “Making the smallest change to a satellite system or earth
The General Services Administration has announced a OneGov agreement with Amazon Web Services that will provide up to $1 billion in direct incentive credits to federal civilian agencies. According to GSA, the direct incentive credits, aggregated across the agencies, will include savings on core AWS cloud services through AWS credits, infrastructure and application technologies modernization through AWS modernization credits, access to AWS training and certification through training credits and a streamlined engagement model with greater savings for direct contracts through direct partnerships. Advancing America’s AI Leadership The agreement is expected to accelerate large-scale IT transformation and boost AI innovation across