Implementing PaC involves secure coding, robust access strategies, automated testing, continuous monitoring, and regulatory compliance.

Additional guidance at https://udx.io/guidance

View Guidance

Leveraging Security in a Platform-as-Code Universe

A bill that would overhaul how the federal government purchases software has found itself in a familiar place: moving forward in the House while awaiting Senate consideration with just a few weeks left in the congressional calendar. The Strengthening Agency Management and Oversight of Software Assets (SAMOSA) Act advanced out of the House Oversight and Government Reform Committee on Tuesday, teeing it up for a vote in the full chamber. The SAMOSA Act, which would direct federal agencies to assess their software licensing practices and streamline future IT buying decisions to avoid duplicative purchases, was reintroduced in the House in September following the Senate’s move to do the same in July. The bill passed the House a year ago but stalled out in the upper chamber, despite backing from a host of software and IT trade groups, including the Computer & Communications Industry Association, the Alliance for Digital Innovation, NetChoice, OpenPolicy and the Software Information Industry Association. Congress has been trying to move forward with the SAMOSA Act since at least 2022. House Oversight Committee Chair James Comer, R-Ky., noted during Tuesday’s markup that the current iteration of the SAMOSA Act is “identical” to what passed the chamber last year.

In other news: The Small Business Administration may soon be forced to confront the flawed rollout of an online certification platform it launched late in the Biden administration.The House on Monday passed a bill that would require the SBA to implement nearly a dozen recommendations made in a Government Accountability Office report about the agency’s Unified Certification Platform for small business contracting assistance. The lawmakers behind the SBA IT Modernization Reporting Act — Reps. Gil Cisneros, D-Calif., and Brian Jack, R-Ga. — believe the legislation will help the agency avoid various pitfalls that plagued the UCP, helping it better develop and manage digital projects going forward. The UCP project was launched in 2023 with the goal of easing small businesses’ interactions with the SBA’s contract assistance programs. But deployment of the platform was delayed and applications for certification were paused in August 2024. The UCP went live two months later, but according to the GAO, work to migrate data and secure the system was incomplete. House Small Business Committee Chair Roger Williams said before Monday’s vote that the “failed … portal rollout resulted in delays, errors and cybersecurity risks, shutting out small businesses from the vital government contracting opportunities.”

The Daily Scoop Podcast is available every Monday-Friday afternoon.

If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

Agency software-buying bill advances in the House

The Trump administration is aiming to release its six-part national cybersecurity strategy in January, according to multiple sources familiar with the document. The document, which is a mere five pages long, will possibly be followed by an executive order to implement the new strategy. The administration has been soliciting feedback in recent days, which one source considered more of a “messaging” document than anything, with more important work to follow. According to sources familiar with the strategy, the six “pillars” focus on cyber offense and deterrence; aligning regulations to make them more uniform; bolstering the cyber workforce; federal procurement; critical infrastructure protection; and emerging technologies. An opening section of the draft offers a Trumpian call for a more muscular approach to cyberspace. Despite its short length — the Biden administration’s cybersecurity strategy was 35 pages long — it touches on a significant number of topics. Those subjects include cybercrime, China, artificial intelligence, post-quantum cryptography and more. A source told CyberScoop the administration appeared genuinely interested in soliciting feedback on the strategy to incorporate or change. The release date of the strategy is fluid. While the administration is targeting January, its publication might follow the broader national security strategy.

In other news: Anthropic’s Claude for Government is now available across the Department of Health and Human Services, according to an internal announcement obtained by FedScoop. The launch was announced in an email to staff Wednesday from HHS Deputy Secretary Jim O’Neill, and comes two months after the department made ChatGPT available to all of its workers. O’Neill encouraged workers to use either ChatGPT or Claude for their queries or “ask both and compare the responses.” He said in his email: “HHS users can work confidently and securely, with minimal restrictions on the types of information entered, while maintaining full compliance with federal cybersecurity and privacy standards. With this release, we are ensuring that all divisions, programs, and employees have access to two secure cutting-edge AI capabilities.”    The email doesn’t mention specific contracting details of how HHS is providing access to the tool, but ChatGPT at least was provided through the company’s nearly free OneGov deal with the General Services Administration. Anthropic similarly has such a deal with GSA to offer its services to government customers for a nominal fee of $1.

The Daily Scoop Podcast is available every Monday-Friday afternoon.

If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

Peraton has emerged as the winner to overhaul the air traffic control system, securing a contract to oversee the multi-billion dollar project with the Federal Aviation Administration. In an announcement Thursday night, the FAA said the Virginia-based technology firm will be the integrator for the project. Initial funding includes a $12.8 billion infusion from Congress as part of the One Big Beautiful Bill earlier this year, but the agency is eyeing billions more to complete the project. FAA Administrator Bryan Bedford said an additional $20 billion will be needed to finish the modernization effort. Bedford said in a statement included in the release: “This is a long-term investment in the future of air travel, and we’re committed to getting it right.”. According to the agency, Peraton had capabilities that matched the needs of the project, including “integrating complex tech platforms and successful collaboration with federal government agencies.” The project is planned to take just three years. The FAA’s search for an integrator for the modernization effort began earlier this year and came amid concerns over its aging air traffic control systems. The issues with the existing infrastructure range from IT outages that cause travel delays to the continued use of antiquated technology, such as floppy disks. In a public appearance in September, Bedford said the current system is “failing every day.”

The Education Department informed numerous Office of Civil Rights employees Friday that they are expected to return to work later this month while they await a court ruling on reduction-in-force orders that sidelined them nearly eight months ago. Multiple workers in Education’s OCR told FedScoop they received notices from the agency late Friday afternoon. Those notices stated that they are expected to return in person to their assigned-duty location on either Dec. 15 or 29. The notice, according to four copies obtained by FedScoop, said the following: “While RIF notices are tolled during litigation, it is important to refocus OCR’s work and utilize all OCR staff to prioritize OCR’s existing complaint caseload.” The notice stated: “In order for OCR to pursue its mission with all available resources, all those individuals currently being compensated by the Department need to meet their employee performance expectations and contribute to the enforcement of existing civil rights complaints.” The agency told workers this will boost enforcement activities in a way that “serves and benefits parents, students, and families.” Workers have until Monday to inform the agency if they do not plan on returning to their positions.

The Daily Scoop Podcast is available every Monday-Friday afternoon.

If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

Peraton wins deal to oversee multi-billion-dollar FAA air traffic control modernization

As 2025 and the first year of the second Trump administration come to a close, Federal CIO Greg Barbaccia sat down with FedScoop reporter Madison Alder for a wide-ranging interview on the state of federal IT, including critical initiatives like FedRAMP modernization, AI adoption, federal tech talent, the consolidation of federal tech and contracting, what’s ahead in 2026, and much more.

The Daily Scoop Podcast is available every Monday-Friday afternoon.

If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

A special interview with Federal CIO Greg Barbaccia

The Trump administration outlined management plans for implementing its priorities Monday in a brief agenda focused on downsizing the government, leveraging federal buying power, and implementing technology solutions. At just two pages, the President’s Management Agenda framework and memo from Office of Management and Budget Director Russell Vought is shorter than past versions. Nonetheless, the plan largely reflects the existing focuses of the administration. For example, the government will continue to “eliminate woke, weaponization, and waste,” specifically calling to “end discrimination” and diversity, equity and inclusion initiatives. It will also maintain cuts to the federal workforce. The president’s first year has already been characterized by his significant shrinking of the federal workforce and cuts to programs related to DEI. Continuing plans for technology use and contracting were mentioned in the agenda. Per the document, the government plans to “consolidate and standardize systems,” reduce the number of federal websites, “eliminate data silos” in government, and replace “wasteful processes” with AI. 

The Department of Energy’s National Nuclear Security Administration is moving forward on several modernization and AI projects with help from the Technology Modernization Fund. The more than $28 million investment will go toward three main initiatives: implementing machine learning to track fire boundaries and enable data sharing between systems for NNSA’s FireGuard program; migrating its Turbo FRMAC radiological assessment tool to a cloud-based platform; and improving AI infrastructure to mitigate nuclear-security threats and enhance its cybersecurity posture.  NNSA CIO James Wolff said in a LinkedIn post Tuesday, days before the funding vehicle is set to expire: “TMF has given us the chance to accelerate mission critical work while also improving the technology infrastructure for the Genesis Mission.” NNSA was quick to mobilize after a Trump administration executive order last month launched a national AI effort dubbed the Genesis Mission, which put the DOE at the helm of the majority of the efforts. 

What Trump’s management agenda says about tech

President Donald Trump signed an executive order Thursday to limit states’ ability to regulate artificial intelligence and pave the way for a “minimally burdensome” national policy framework for the emerging technology. The move caps a monthslong saga among policymakers in Washington over how to regulate the rapidly evolving technology at the federal level, as states take matters into their own hands in the absence of any nationwide standards. The order is a significant win for several major AI developers that argue that a patchwork of state AI regulations hampers innovation and competitiveness on the global stage. Its provisions have the potential to impact the hundreds of state laws.

The Office of Management and Budget released long-awaited guidance Thursday that outlined how federal agencies are expected to ensure that artificial intelligence models are “unbiased” when procured and deployed by the government. The memo from OMB Director Russell Vought addresses some questions that arose after President Donald Trump signed an executive order last July to prevent “woke AI” in the federal government. The order, signed alongside the release of the White House AI Action Plan, stated the federal government has an obligation not to procure models “that sacrificed truthfulness and accuracy to ideological agendas.” The order did not provide details on how agencies should evaluate models and directed OMB to issue guidance. The seven-page memo fulfills this directive by outlining how agencies must approach contractual requirements for new partnerships, modify existing contracts, and update their procurement policies.

The Daily Scoop Podcast is available every Monday-Friday afternoon.

If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

Trump signs executive order curbing state regulation of AI

The Trump administration launched a new governmentwide hiring program Monday aimed at filling technology hiring gaps in federal agencies with workers who will serve in two-year stints. That program, dubbed the U.S. Tech Force, is being spearheaded by the Office of Personnel Management and has buy-in from private-sector tech companies that will serve as partners in the hiring initiative.The first cohort of recruits will be roughly 1,000 individuals who will range from early-career data scientists and engineers to engineering managers from the private sector. According to a release from OPM, their mission will be to accelerate AI adoption in government and fulfill a priority of the Trump administration. On a call with reporters Monday, OPM Director Scott Kupor said the goal of the program isn’t to get workers to commit to “a 40-year career in federal government.” While that’s welcome, he said, the aim is to “get the benefit of really smart people working on some of the world’s most complex and difficult problems” and provide them with an opportunity, if they so choose, to then go work in the private sector. More than two dozen technology companies have already agreed to Tech Force partnerships, including Amazon Web Services, Meta, Microsoft, xAI, Anduril, Nvidia, Oracle, Adobe and ServiceNow. Those companies have not made firm agreements to hire program alumni but can do so in line with their needs, Kupor said. The commitment that OPM has made to those partners, he said, is “to do a great job of recruiting fantastic people.”

The White House and Office of Personnel Management shared more details last Wednesday about the effort to transition federal government HR platforms to a single system, outlining a timeline and expectations. In a memo to agency leaders, Office of Management and Budget Director Russell Vought and OPM Director Scott Kupor said the transition portion of the administration’s “Federal HR 2.0” project will take place over the next two years, with some agencies coming online earlier than others. Agencies must also stop current projects related to their current systems unless they have an exception. Kupor said in an emailed statement with the memo: “For too long, taxpayers have footed the bill for duplicative HR systems that no modern organization would tolerate. Today’s announcement is a major win for efficiency, accountability, and good government.” The memo is the latest action in the Trump administration’s push to centralize HR systems as a way of saving money. Per the document, the government currently has more than 100 “core human capital management” systems, and the administration expects that consolidating those systems — as well as HR services — will save billions.

The Daily Scoop Podcast is available every Monday-Friday afternoon.

If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

OPM launches Tech Force to recruit technologists to government

The House on Monday passed a bill that would revamp how agencies purchase software, putting the legislation in the same place it was a year ago: waiting for the Senate to follow suit as the clock ticks down on the congressional calendar. The Strengthening Agency Management and Oversight of Software Assets (SAMOSA) Act would require agencies to examine their software licensing practices, with the aim of streamlining IT buying practices to avoid duplicative purchases. The bill is identical to legislation that passed the House last December but did not move forward in the Senate. The House bill, co-sponsored by Reps. Nancy Mace, R-S.C., Shontel Brown, D-Ohio, Pat Fallon, R-Texas, and April McClain Delaney, D-Md., would press agencies to better manage their software without limiting procurement options. They would be required to submit IT assessments to the Office of Management and Budget, the General Services Administration and Congress, so better oversight could be conducted. On the House floor Monday, Brown credited her three co-sponsors as well as former Rep. Gerry Connolly, D-Va., who died of cancer in May after taking the lead on this bill in addition to his myriad other government IT efforts. Brown, ranking member of the House Oversight Cybersecurity, Information Technology, and Government Innovation subcommittee, said the SAMOSA Act is a “straightforward good government bill that has strong bipartisan support from members of the Oversight Committee.”

A new bill from Sens. John Fetterman, D-Pa., and Ted Budd, R-N.C., would establish a national network of cloud laboratories led by the National Science Foundation and supported by the National Institute of Standards and Technology, with the goal of enhancing collaboration between institutions while improving research efficiency with AI. If passed, NSF will select up to six programmable cloud laboratories from a range of applicants, including academic institutions and private-sector research groups. NIST would be tasked with setting standards and reporting to Congress about the feasibility for expansion. The bill, introduced last week, aligns with provisions laid out by the Trump administration’s AI Action Plan and aims to codify existing NSF proposals, according to the sponsors. NSF earmarked $100 million for a similar AI-powered cloud network in August as it looked to expand access to emerging technologies. Researchers in the co-sponsors’ home states have developed methods to ease automated discoveries, which will serve as a blueprint for the national effort. NSF will judge applicants on the level of existing data integration and automated capability infrastructure and capacity to support multi-user cloud workflows, among other criteria. In addition to bipartisan backing, the legislation garnered support from officials at Carnegie Mellon University, the Accelerate Science Now coalition and the Allegheny Conference on Community Development.

The Daily Scoop Podcast is available every Monday-Friday afternoon.

If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

House passes agency software-buying bill, waits on Senate again

Douglas Matty is exiting his role as the Pentagon’s chief digital and artificial intelligence officer and moving on to focus on the Trump administration’s “Golden Dome for America” missile defense initiative, DefenseScoop has learned.     Principal Deputy CDAO Andrew Mapes will lead the department’s AI hub in an acting capacity until a new CDAO is hired. Ahead of reaching full operational capacity in 2022, the AI-accelerating office merged and integrated multiple technology-focused predecessor organizations at the Pentagon, including the Joint Artificial Intelligence Center (JAIC), Defense Digital Service (DDS), Office of the Chief Data Officer, and the Maven and Advana programs. The DOD’s vision and priorities for the CDAO have been reconfigured several times since its inception. And while AI is a major priority for the U.S. government under President Donald Trump, the Pentagon’s CDAO office has seen an exodus of senior leaders and other technical employees this year. Matty’s departure also comes as the office is hustling to execute on a range of DOD-wide efforts to speed up the delivery and fielding of data analytics, automation, computer vision, machine learning and other next-generation AI capabilities for military and civilian personnel. Last week, Pentagon leaders unveiled a new purpose-built platform — GenAI.mil — to provide commercial options directly to most of its workforce on their desktops.

The Centers for Medicare & Medicaid Services has tapped ID.me to verify the identities of beneficiaries on Medicare.gov, according to a Tuesday announcement from the identity-proofing company.  ID.me will be available as an option for identity verification and sign-in on Medicare.gov starting in early 2026, per the release. The deal adds to the growing number of federal programs opting to use the digital identity service that leverages facial recognition technology and has been the subject of some controversy in the past. Already, ID.me is used at 21 federal agencies, including the Social Security Administration and Department of Veterans Affairs, per the release. Opting in means an ID.me user could sign in with the same credentials at any of the other federal, state or private-sector entities that use the service, the company said in a statement to FedScoop.


Pentagon AI chief departing to work on Golden Dome effort

Insights and discussions from Usability Dynamics on cybersecurity, cloud automation, and the future of the web.

Leveraging Security in a Platform-as-Code Universe

UDX

Related tracks