“I am extremely bullish on innovation in the area of digital identity and privacy with government agencies going forward," said one privacy expert.

The technology is a poster child for hype, shiny object syndrome and government tech solutionism.

The Federal Acquisition Service hopes to reduce the exposure of agencies to supply chain attacks.

Until individual agencies like the Department of Energy and Department of the Treasury see success quantifying risk, the practice won't likely be mandated.

As of fiscal 2018, "many federal agencies were often not adequately or effectively implementing their information security policies and practices" under the Federal Information Security Modernization Act.

The group merges a pair of existing efforts into a single point of support for federal agencies.