DoD issues new marching orders on secure software and SBOMs

The article explains the DoD’s new Software Fast Track (SWFT) program—a 90-day effort to shift from point-in-time ATOs toward continuous software supply chain risk management—emphasizing usable SBOMs, artifact sharing, automation/AI for assessments, and updated SCRM tooling; it summarizes three RFIs (SBOM/tooling, external supplier assessments, and automation/AI), notes alignment with CISA/NASA guidance and federal acquisition revisions, and flags unresolved questions about who will own risk and how external assessments will be conducted.