Implementing PaC involves secure coding, robust access strategies, automated testing, continuous monitoring, and regulatory compliance.

Additional guidance at https://udx.io/guidance

View Guidance

Leveraging Security in a Platform-as-Code Universe

The top lawmakers on a key House cybersecurity panel are hoping to remove a barrier to entry for cyber jobs in the federal government. Introduced last week, the Cybersecurity Hiring Modernization Act from Reps. Nancy Mace, R-S.C., and Shontel Brown, D-Ohio, would prioritize skills-based hiring over educational requirements for cyber jobs at federal agencies. Mace and Brown — the chair and ranking member of the House Oversight Cybersecurity, Information Technology, and Government Innovation Subcommittee, respectively — said the legislation would ensure the federal government has access to a “broader pool of qualified applicants” as the country faces “urgent cybersecurity challenges.” Mace said in a press release Thursday: “As cyber threats against our government continue to grow, we need to make sure our federal agencies hire the most qualified candidates, not just those with traditional degrees. This bill cuts red tape, opens doors to skilled Americans without a four-year diploma but with the expertise to get the job done, and strengthens our nation’s cybersecurity workforce.” Brown said in a statement that expanding the cyber workforce is “imperative” to “meet our nation’s growing need for safe and secure systems.” The bill aims to “remove outdated hiring policies, expand workforce opportunities to a wider pool of talented applicants, and help agencies hire the staff that they need,” she added.  The bill calls on the Office of Personnel Management to annually publish any education-related changes that are made to minimum qualification requirements for federal cyber roles. OPM would also be charged with aggregating data on educational backgrounds of new hires for those cyber positions.

Texas-based defense startup Saronic Technologies will produce multiple batches of autonomous maritime drones for the U.S. Navy by mid-2031 under an other transaction agreement (OTA) worth more than $392 million, according to officials and public contracting documents viewed by DefenseScoop. Details are sparse regarding the specific features, types and quantities of unmanned vessels Saronic will deliver — but they’ll likely mark a major component of the Navy’s AI-enabled, hybrid fleet that’s being designed to counter security threats in and around the Pacific. OTA contract vehicles offer Defense Department buyers more flexibility and speed than traditional Federal Acquisition Regulation-based acquisitions. They’re a key element in the Navy’s broader plan to modernize and incentivize accelerated technology adoption to prepare for future fights. According to records posted on the Federal Procurement Data System, Naval Sea Systems Command and Saronic Technologies formalized this $392 million OTA — which has a completion date of May 30, 2031 — on May 16. Two months later, in July, NAVSEA made an award to Saronic worth nearly $197 million under the agreement, or about half of the total award ceiling. It’s unclear if more awards have been made to date. 

Lawmakers take aim at education requirements for federal cyber jobs; Navy to buy autonomous maritime drones from Saronic via $392M OTA

The Trump White House has tapped Tesla board member and Airbnb cofounder Joe Gebbia to take the lead on its initiative to redesign the federal government’s digital footprint. Gebbia announced that he was appointed as chief design officer in a Saturday post to X, formerly known as Twitter. That role was established by President Donald Trump via executive order last week along with a new National Design Studio and an initiative to improve digital and physical spaces called “America By Design.”  Gebbia said in his X post that his directive “is to update today’s government services to be as satisfying to use as the Apple Store: beautifully designed, great user experience, run on modern software.” Gebbia thanked Trump for supporting the new initiative and asked people interested in joining the studio to reach out with a link to their work. Prior to his appointment as the design chief, Gebbia also worked with DOGE to modernize the Office of Personnel Management’s mostly paper-based retirement processing.

Sen. Ron Wyden on Monday urged Supreme Court Chief Justice John Roberts to seek an independent review of federal court cybersecurity following the latest major hack,  accusing the judiciary of “incompetence” and “covering up” its “negligence” over digital defenses. Wyden, D-Ore., wrote his letter in response to news this month that hackers had reportedly breached and stolen sealed case data from federal district courts dating back to at least July, exploiting vulnerabilities left unfixed for five years. Alleged Russian hackers were behind both the attack and another past major intrusion, and may have lurked in the systems for years. Wyden wrote in his letter: “The courts have been entrusted with some of our nation’s most confidential and sensitive information, including national security documents that could reveal sources and methods to our adversaries, and sealed criminal charging and investigative documents that could enable suspects to flee from justice or target witnesses. Yet, you continue to refuse to require the federal courts to meet mandatory cybersecurity requirements and allow them to routinely ignore basic cybersecurity best practices.” That, Wyden said, means someone from the outside must conduct a review, naming the National Academy of Sciences as the organization Roberts should choose. 

The Daily Scoop Podcast is available every Monday-Friday afternoon.
If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

Airbnb co-founder Joe Gebbia takes on new White House design chief role; Wyden seeks review of federal court cybersecurity, citing ‘incompetence,’ ‘negligence’

Department of Government Efficiency members stored a copy of a massive Social Security Administration database in a “vulnerable” custom cloud environment, putting more than 300 million people’s personal information at risk, the agency’s chief data officer said in a new whistleblower complaint. The complaint, filed with Congress on Tuesday, revealed new concerns from CDO Charles Borges about “serious data security lapses” allegedly involving DOGE officials working at the SSA. According to the complaint, those officials, under the direction of SSA Chief Information Officer Aram Moghaddassi, granted themselves permission to copy Americans’ Social Security information onto a cloud server with no verified oversight, violating agency protocols.  The Government Accountability Project wrote on behalf of Borges in the complaint that the “vulnerable cloud environment is effectively a live copy of the entire country’s Social Security information from the Numerical Identification System (NUMIDENT) database, that apparently lacks any security oversight from SSA or tracking to determine who is accessing or has accessed the copy of this data.” The NUMIDENT data includes all the information applicants use for a Social Security card, including their name, phone number, address, place and date of birth, parents’ names and Social Security numbers along with other personal information. The complaint warned: “Should bad actors gain access to this cloud environment, Americans may be susceptible to widespread identity theft, may lose vital healthcare and food benefits, and the government may be responsible for re-issuing every American a new Social Security Number at great cost.”

Adele Merritt is out as the top IT official at the National Institutes of Health after roughly eight months in the role, again changing up the leadership in the position. Merritt was first announced as the new chief information officer in December after most recently serving as CIO of the intelligence community. At the time she took on the position, the role hadn’t had a permanent official in roughly two years. Merritt’s departure comes as the Trump administration has sought to reduce the federal workforce and reshape federal agencies, including HHS. In March, Secretary Robert F. Kennedy announced plans to cut 10,000 workers from the agency on top of 10,000 who had already left via incentivized resignation and retirement offers from the administration. A recent ProPublica analysis of HHS’s public directory found that the health agency has lost roughly 18% of its workforce since January. 

The Daily Scoop Podcast is available every Monday-Friday afternoon.
If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

Social Security's chief data officer blows the whistle on DOGE; Adele Merrit resigns as NIH's CIO

Transportation Secretary Sean Duffy plans to sunset several outdated agency IT systems and consolidate technology management under a new program called 1DoT, according to a memo sent earlier this week.  1DoT, Duffy wrote, is meant to “unify” the department, whose components include the Federal Aviation Administration, the Federal Highway Administration, and the Federal Motor Carrier Safety Administration. The 1DoT initiative is supposed to eliminate redundancies and focus on “efficiency, accountability, and operational excellence,” Duffy explained in the email, which was viewed by FedScoop. The memo lays into myriad problems with the Transportation Department’s $3.5 billion annual IT portfolio, calling its systems “outdated, expensive, and unsecure.” Duffy said: “This complicated web of technology is more than just a nuisance. Less efficiency means longer wait times for project completion, grants signed, or safety reviews conducted.

Emil Michael, undersecretary of defense for researching and engineering and the Pentagon’s CTO, has taken on the role of acting director of the Silicon Valley-headquartered Defense Innovation Unit in the wake of Doug Beck’s resignation, DefenseScoop has learned. Beck unexpectedly resigned on Monday. The Defense Department has not provided an explanation for his sudden resignation. However, a defense official confirmed that Michael will fill the role and Michael Dodd has been appointed as the acting deputy director, saying they are “laser-focused on driving innovation and enhancing the Department’s ability to deliver groundbreaking commercial technologies to empower the American warfighter.” Dodd has been a principal at DIU since December 2022. Earlier this year, President Donald Trump nominated him to be assistant secretary of defense for critical technologies, which falls under the Pentagon’s R&E directorate.

The Daily Scoop Podcast is available every Monday-Friday afternoon.
If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

Major changes to the Transportation Department’s IT management; A shakeup in the Pentagon’s Defense Innovation Unit

OpenAI has cleared another critical hurdle to selling its ChatGPT tool directly to the federal government.  As of Tuesday, ChatGPT is listed as “in process” on the FedRAMP Marketplace, an online repository that tracks where companies stand in the FedRAMP security review process. While federal agencies can issue their own approvals to use technology platforms, FedRAMP is the government’s primary security review program and is designed to clear widespread cloud-based technologies for use across federal agencies. OpenAI received prioritized authorization through 20x, a person familiar with the matter told FedScoop. It’s the first company to receive this prioritization, which, in effect, eliminates the need for companies to find federal agencies to sponsor them for review. At one point, OpenAI had engaged USAID, its first enterprise customer, about helping them with the process, FedScoop previously reported, but the agency was mostly shuttered in the early days of the second Trump administration. The General Services Administration created the prioritized review for AI cloud services just last month.

Microsoft will offer a host of its cloud services at a discounted price to the federal government, the General Services Administration announced Tuesday, including its artificial intelligence assistant Copilot at no cost to some agencies. The OneGov deal makes Microsoft the latest technology firm to leverage steep discounts on its cloud products to expand adoption within the federal government. It comes on the heels of GSA’s deals with industry competitors like OpenAI, Anthropic and Google, which are separately offering their AI models to the government for a dollar or less. Under the new agreement, Microsoft will offer its subscription service, Microsoft 365, Azure Cloud Services, and Dynamics 365 — the company’s suite of business management apps — for a “discounted price” for up to 36 months.

The Daily Scoop Podcast is available every Monday-Friday afternoon.
If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

ChatGPT gets one step closer to widespread government use; Microsoft will offer Copilot for free to some government customers

Greg Hogan is out as the chief information officer of the Office of Personnel Management after roughly seven-and-a-half months on the job. Hogan was installed at the human capital agency on the first day of President Donald Trump’s second administration, replacing Melvin Brown II after roughly a week on the job. According to an OPM spokeswoman, Hogan departed the agency earlier this week and Perryn Ashmore, who is currently assistant director of enterprise learning at the agency, is currently serving as CIO in an acting capacity. Although not much was shared by the agency about Hogan’s background, a legal filing in a challenge brought by current and former federal employees over Department of Government Efficiency access to OPM data provided some details. According to that document, Hogan was the vice president of infrastructure at comma.ai — a self-driving car software company — before joining the Trump administration. He also told the court he had 20 years of experience in private sector IT and a computer engineering degree.

Stephen Ehikian, the deputy administrator of the General Services Administration, has left the agency to take over as chief executive officer at the enterprise AI application software company C3 AI. Ehikian told GSA staff Tuesday in an email obtained by FedScoop that he would “transition out” of the agency’s deputy administrator role, but remain an adviser to the leadership team during the transition process. On Wednesday, C3 AI announced Ehikian’s hiring as CEO. He said in a statement he is “honored” to join the company “at such a pivotal time in the AI era.”  He served as the GSA’s acting head for the first half of this year until July, when President Donald Trump tapped State Department leader Michael Rigas for the role and Ehikian moved into the deputy spot. “I want to thank Stephen Ehikian for his service and wish him well,” Rigas said in a statement shared by GSA. Edward Forst, a longtime financial services executive, was nominated by Trump in July to serve as the next administrator of the GSA. A nomination hearing date has not been scheduled, according to congressional records.

The Daily Scoop Podcast is available every Monday-Friday afternoon.
If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

OPM CIO Greg Hogan has left the role; Stephen Ehikian leaves GSA to be CEO of a leading AI firm

The Department of Health and Human Services has made ChatGPT available to all of its employees effective immediately, according to a Tuesday departmentwide email obtained by FedScoop. In that message, HHS Deputy Secretary Jim O’Neill said the rollout of the generative AI platform follows a directive from President Donald Trump’s AI Action Plan for agencies to ensure that workers who could benefit from the technology have access to it. “This tool can help us promote rigorous science, radical transparency, and robust good health,” O’Neill said. “As Secretary Kennedy said, ‘The AI revolution has arrived.’” O’Neill provided workers with instructions on how to log on to use the tool, as well as some warnings about how to treat outputs. He told workers to “be skeptical of everything you read, watch for potential bias, and treat answers as suggestions,” and directed them to weigh original sources and counterarguments prior to making a major decision. 

The General Services Administration has created a new office within the Federal Acquisition Service focused on streamlining the agency’s procurement of common goods and services, a GSA spokesperson confirmed Tuesday. Acting GSA Administrator Michael Rigas recently signed the order establishing the Office of Centralized Acquisition Services (OCAS), the spokesperson said, describing it as a “centralized, enterprise-wide approach.”  “By leveraging one federal wallet, GSA will deliver significant savings to the taxpayer, greater efficiencies, and reduced duplication, enabling agencies to focus on their core missions,” the spokesperson said in a written statement.  GSA senior executive Thomas Meiron will serve as the office’s assistant commissioner, the GSA said. Meiron has been with the GSA for over three decades, according to his LinkedIn profile. He most recently served as the acting assistant commissioner for the agency’s Office of Customer and Stakeholder Engagement. The move directly supports President Donald Trump’s executive order, signed in March, to consolidate federal procurement in the GSA. 

The Daily Scoop Podcast is available every Monday-Friday afternoon.
If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

HHS rolls out ChatGPT across the department; GSA moves forward on streamlining procurement with new office

Senate Commerce Committee Chairman Ted Cruz said he would introduce legislation to establish AI sandboxes to allow companies “room to breathe” without running up against regulations. Cruz announced that proposal as well as a legislative framework for AI policy ahead of a Wednesday hearing before the Subcommittee on Science, Manufacturing, and Competitiveness on the administration’s recent AI Action Plan. The concept of regulatory sandboxes were among the more than 90 policy recommendations outlined in that document. Cruz said during the hearing: “Under the Sandbox Act, an AI user developer can identify obstructive regulations and request a waiver or a modification, which the government may grant for two years via a written agreement that must include a participant’s responsibility to mitigate health or consumer risks,” adding that “a regulatory sandbox is not a free pass. People creating or using AI still have to follow the same laws as everyone else.”

Drew Myklegard is stepping down from his role as deputy federal CIO after nearly four years, FedScoop has learned. Two sources with knowledge of the matter said Myklegard told colleagues he’s taking a role in the private sector and that his last day will be Sept. 22. A holdover from the Biden administration, Myklegard was appointed to the deputy federal CIO role in early 2022, after a more than eight-year stint in supporting IT operations at the Department of Veterans Affairs. During his time in the Office of the Federal CIO, he championed a number of key governmentwide technology modernization initiatives, including rolling out a new policy reforming federal cloud security authorizations under FedRAMP and guidance on how agencies acquire and inventory AI tools, among others. On Monday, Myklegard was recognized with a FedScoop 50 award in the Golden Gov: Federal Executive of the Year category.

The Daily Scoop Podcast is available every Monday-Friday afternoon.
If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

Sen. Ted Cruz eyes a regulatory AI sandbox program within OSTP; Drew Myklegard stepping down as deputy federal CIO

Sen. Elizabeth Warren, D-Mass., raised serious national security concerns this week about the Pentagon’s plans to integrate the controversial “Grok” chatbot into U.S. military operations via a recent high-dollar deal with tech billionaire Elon Musk’s company, xAI. Warner  d wrote in her letter delivered to Hegseth Wednesday that “the department awarded a $200 million contract under questionable circumstances to incorporate an AI company with a product that provides misinformation and offensive, antisemitic responses into DOD’s operations.” In the correspondence, Warren asks the Pentagon chief to answer dozens of questions about the xAI contract, its full scope of work, ethics and accountability issues and more, by Sept. 24. The Defense Department announced in July that its Chief Digital and AI Office (CDAO) partnered with xAI, Anthropic, Google and OpenAI — through four, separate $200 million agreements — to accelerate the department’s enterprise-wide adoption of some of the most sophisticated and still-emerging commercial algorithms and machine learning capabilities.

Chris Kraft, the Department of Homeland Security’s deputy chief technology officer for artificial intelligence and emerging tech, is now serving as the acting chief information officer of the U.S. Secret Service.  Kraft, who’s focused primarily on AI in his DHS role, replaces Kevin Nally, who recently left government for a position in the private sector. Kraft’s new position was not confirmed by spokespeople for the U.S. Secret Service, but he acknowledged the role on LinkedIn. Due to its mission, the Secret Service is quieter than other agencies on its technology portfolio, but the agency uses a variety of platforms and faces serious technology challenges. After the assassination attempt on President Donald Trump in Pennsylvania in July 2024, FedScoop documented a series of tools at the component’s disposal, including commercial telemetry data and Protective Threat Management System. 

The Daily Scoop Podcast is available every Monday-Friday afternoon.
If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

Elizabeth Warren calls on Pete Hegseth to defend Pentagon’s deal with xAI; a new CIO for Secret Service

The Department of Homeland Security failed to effectively implement a critical retention incentive program for cyber talent, according to a new report from the agency’s inspector general, which found that federal funds meant for the Cybersecurity and Infrastructure Security Agency were used incorrectly. In 2015, the agency implemented the Cyber Incentive program. The goal, the inspector general said, was to provide extra incentives to employees that might otherwise leave the federal government. More than $100 million has been spent on the program in recent years. The program “was designed to help CISA retain mission-critical cybersecurity talent needed to execute its mission,” the report noted, and was meant to consider a series of qualifications to guide who received the retention benefit. The government hoped to keep in-demand technology experts in government. The watchdog wrote that “CISA’s implementation of the program wasted taxpayer funds and invites the risk of attrition of cyber talent, thereby leaving CISA unable to adequately protect the Nation from cyber threats.” Instead of being targeted toward valuable talent likely to transition to the private sector, the payments were disbursed generally, with many ineligible employees receiving tens of thousands of dollars in payment. 

The Pentagon’s chief information officer is undertaking yet another reform of the Defense Department’s IT enterprise — this time focusing on streamlining its classified networks to enhance data sharing and interoperability. Katie Arrington, who is performing the duties of CIO, plans to introduce a new program dubbed “Mission Network-as-a-Service” that aims to reduce the number of disparate data fabrics used by combatant commands into a single, unified network. Speaking last week during the Billington Cybersecurity Summit, Arrington said the program will be key to realizing the department’s vision for Combined Joint All-Domain Command and Control, or CJADC2. Broadly speaking, CJADC2 seeks to connect the U.S. military’s sensors and weapons under a single network, enabling rapid data transfer between warfighting systems and domains. The Pentagon also wants to be able to quickly share relevant information with international partners and allies during conflicts, adding another layer of difficulty to realizing the construct.

The Daily Scoop Podcast is available every Monday-Friday afternoon.
If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

​​DHS watchdog finds mismanagement in cyber talent program; Pentagon CIO working to break down disparate IT networks

Insights and discussions from Usability Dynamics on cybersecurity, cloud automation, and the future of the web.

Leveraging Security in a Platform-as-Code Universe

UDX

Related tracks