Federal agencies need to make new software available quickly. At the same time, they must protect their systems and processes.