Globalization brings challenges The government has suppliers that it may not know and may never see --Less insight into suppliers' security practices --Less control over business practices --Increased vulnerability to adversaries Scope of Supplier Expansion and Foreign Involvement graphic in DACS Secure Software Engineering, July 2005 article Software Development Security: A Risk Management Perspective synopsis of May 2004 GAO report Defense Acquisition: Knowledge of Software Suppliers Needed to Manage Risks