Is the US Federal Government Increasing Cyber-Risk Through Monoculture?

**Executive Summary:** The report warns that the SLCGP’s practice of funding statewide or multi-entity procurements with a single vendor risks creating a cybersecurity monoculture; this concentration could magnify the effects of supply-chain compromises or single-vendor outages (citing SolarWinds and CrowdStrike) and lead to widespread disruption of education, government, and critical services. It recommends requiring diverse, layered defenses and vendor diversity as conditions for receiving SLCGP funding to reduce systemic risk.