Software Risk Management for U.S. Department of Veterans Affairs
Get visibilty for your leadership, managers, and developers


With limited IT staff and resources available to the software factories at the U.S. Department of Veterans Affairs, visibility and security of your applications poses a significant challenge.
Black Duck's Software Risk Management (SRM) can help the VA more effectively comply with software security requirements emerging from EO 14028, NIST 800 53, Zero Trust and other regulatory requirements.
Black Duck benefits include:

Minimize business risk across the entire SDLC
Black Duck helps you protect your bottom line by building trust in your software – at the speed your business demands.

Secure your software supply chain
Your software is assembled as well as created. It includes more than open source and proprietary code. To build software users can trust, you must address the security of everything that goes into it.

Deliver secure, high-quality software faster
Transforming your business software requires speed and agility. Orchestrating and correlating your tests ensures that security doesn’t slow you down, even across multiple tools and vendors.

Manage AppSec risk at enterprise scale
Managing risk at scale requires you to reign in tool sprawl, centralize policies and reporting to enable one picture of risk, and shift security everywhere so that you can improve your risk posture and AppSec program’s total cost of ownership.

The recognized leader in software security
7 consecutive years being the Gartner Magic Quadrant Leader for Application Security Testing
Black Duck's solutions for the VA are available through partnerships under IT Schedule 70, CIO-CS,
CIO-SP3, and SEWP V. Black Duck's solutions are also available via sole source and direct acquisition.
Resources

Brendon Rizzolo
Federal Account Manager - Black Duck
Mr. Brendon Rizzolo is the Regional Sales Manager at Black Duck for Federal Civilian. Mr. Rizzolo partners with Black Duck customers to help them gain full value of the company’s broad portfolio for Software Security, Quality, and Safety solutions. Before becoming a standalone company, Black Duck was once the Synopsys Software Integrity Group where Brendon spent 7+ years focusing on the Application Security field, particularly with the U.S. Government.
Let’s Talk
Schedule a 30-minute collaborative virtual workshop