FTA: “demand federal contractors install security features at the start of system development”
This right here would save a ton of resources in the overall C&A process. If a COTS (or any system really) has already undergone even a mimimal amount of analysis it would certainly take a lot less time/$$/frustration to get the system compliant.
Just my two cents,
Poll of the Week
Could your inbox use a little more awesome?
Sign up to get a daily dose of awesome gov-focused resources, trainings, blogs and articles to help you do you job better.