DOW CIO Mandates Software Overhaul to Accelerate Warfighting Capabilities

Kirsten Davies, the Chief Information Officer of the Department of War (DOW), has issued a new department-wide instruction to modernize how the agency manages and acquires software. The policy is designed to accelerate the delivery of warfighting capabilities by shifting the department toward a more agile, software-centric operational model.

Central to this initiative is the establishment of the DOW Enterprise Digital Arsenal, which serves as the primary framework for software delivery capabilities. According to the instruction, the policy defines seven foundational software tenets: continuous feedback, optimizing for flow, building in security and quality, maximizing automation, designing for evolvability and scale, defaulting to enterprise reuse, and aligning governance with delivery speed. To streamline procurement, software acquisition will now default to using Other Transaction Authorities (OTAs) and Commercial Solutions Openings (CSOs) via the Software Acquisition Pathway.

Strengthening the Supply Chain

The policy introduces rigorous new requirements for software transparency and security. DOW components are now mandated to maintain Software Bills of Materials (SBOMs) for all software, whether custom-built or purchased commercially. Furthermore, the instruction requires that all open-source and third-party components undergo formal risk assessments. These evaluations specifically target the trustworthiness of the code, its long-term sustainment, and the potential for foreign influence.

A Systemic Shift in Defense

This transition reflects a broader effort within the Department of War to mirror industry trends in DevOps and DevSecOps. By decoupling mission software from hardware, the DOW aims to push updates more rapidly without compromising system safety or airworthiness. This represents a systemic departure from traditional, slow-moving procurement cycles, moving instead toward a model of continuous evolution where software is treated as a living asset rather than a static delivery.

Industry Implications

For the defense industrial base, this shift signals a preference for vendors who can integrate into continuous integration/continuous delivery (CI/CD) pipelines. The emphasis on SBOMs and risk assessments means that transparency in the software supply chain is no longer optional but a prerequisite for doing business with the DOW. By tightening security around open-source code while streamlining the acquisition pathway, the department is attempting to balance rapid innovation with national security imperatives.

Next Steps

As the DOW implements the Enterprise Digital Arsenal, the industry will be watching how the department scales these seven tenets across its various components. While the policy sets the framework for modernization, the effectiveness of the shift will depend on the successful integration of these automated pipelines across legacy systems. It remains to be seen how the DOW will handle the transition for existing long-term contracts that were signed under the previous, slower procurement models.