How to buy software with assurance and integrity

July 22, 2010 — This week, Federal Security Spotlight checks in with Rich Marshall, the director of global cyber security management at the Department of Homeland Security.

He has a long history in the cyber field. Among his earlier jobs: Senior information assurance representative, office of legislative affairs at the National Security Agency.

He focuses on the supply chain for software, and equipment that has software embedded.

In this interview, he gives advice to federal buyers who want to make sure that the software they buy is characterized by assurance and integrity — and he defines those terms in detail.