Commercial products bought without modification are largely exempt from government acquisition regulations, including the Defense Department’s emerging certification program.
Article Link: Report Draws Attention to Vulnerabilities in Commercial-Off-the-Shelf Products - Nextgov