<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div><br></div><div>This seems to provide a great deal more information on the process.</div><div><br></div><div><div style="display: block;"><div style="-webkit-user-select: all; -webkit-user-drag: element; display: inline-block;" class="apple-rich-link" draggable="true" role="link" data-url="https://www.ic3.gov/Media/News/2023/231011-2.pdf"><a style="border-radius:10px;font-family:-apple-system, Helvetica, Arial, sans-serif;display:block;-webkit-user-select:none;width:228px;user-select:none;-webkit-user-modify:read-only;user-modify:read-only;overflow:hidden;text-decoration:none;" class="lp-rich-link" rel="nofollow" href="https://www.ic3.gov/Media/News/2023/231011-2.pdf" dir="ltr" role="button" draggable="false" width="228"><table style="table-layout:fixed;border-collapse:collapse;width:228px;background-color:#E5E6E9;font-family:-apple-system, Helvetica, Arial, sans-serif;" class="lp-rich-link-emailBaseTable" cellpadding="0" cellspacing="0" border="0" width="228"><tbody><tr><td vertical-align="center" align="center"><img style="width:228px;filter:brightness(0.97);height:294px;" width="228" height="294" draggable="false" class="lp-rich-link-mediaImage" alt="preview.png" src="cid:0026B4E1-9BB7-4483-A8F5-5E6A812C1C68"></td></tr><tr><td vertical-align="center"><table bgcolor="#E5E6E9" cellpadding="0" cellspacing="0" width="228" style="font-family:-apple-system, Helvetica, Arial, sans-serif;table-layout:fixed;background-color:rgba(229, 230, 233, 1);" class="lp-rich-link-captionBar"><tbody><tr><td style="padding:8px 0px 8px 0px;" class="lp-rich-link-captionBar-textStackItem"><div style="max-width:100%;margin:0px 16px 0px 16px;overflow:hidden;" class="lp-rich-link-captionBar-textStack"><div style="word-wrap:break-word;font-weight:500;font-size:12px;overflow:hidden;text-overflow:ellipsis;text-align:left;" class="lp-rich-link-captionBar-textStack-topCaption-leading"><a rel="nofollow" href="https://www.ic3.gov/Media/News/2023/231011-2.pdf" style="text-decoration: none" draggable="false"><font color="#000000" style="color: rgba(0, 0, 0, 1);">231011-2</font></a></div><div style="word-wrap:break-word;font-weight:400;font-size:11px;overflow:hidden;text-overflow:ellipsis;text-align:left;" class="lp-rich-link-captionBar-textStack-bottomCaption-leading"><a rel="nofollow" href="https://www.ic3.gov/Media/News/2023/231011-2.pdf" style="text-decoration: none" draggable="false"><font color="#3E3E3E" style="color: rgba(0, 0, 0, 0.756863);">PDF Document ยท 381 KB</font></a></div></div></td></tr></tbody></table></td></tr></tbody></table></a></div></div><br></div><div><br></div><div></div><div><br></div><div><br><div><br><blockquote type="cite"><div>On Oct 10, 2023, at 2:11 PM, Barry Smith <bsmith@petsc.dev> wrote:</div><br class="Apple-interchange-newline"><div><meta http-equiv="content-type" content="text/html; charset=us-ascii"><div style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div><br></div> I suspect we are going to receive more of these requests as apparently all US agencies now need to do this assessment on all software that they use.<div><br></div><div> We should try to be pro-active. </div><div><br></div><div> Are there currently any web-based testing systems that run on PETSc or could run on PETSc ? We should document this on <a href="http://petsc.org/">petsc.org</a></div><div><br></div><div> What exactly did MOOSE do to get approval for their use of PETSc for nuclear engineering? What about Glenn Hammond? It would be good to have this documented for reference.</div><div><br></div><div> It might make sense to pay a company that does such assessments (and is certified by the US) to assess PETSc and then have that in our back pocket to make it easier for US agencies to agree to use PETSc.</div><div><br></div><div> Are there subsets of PETSc that could be approved (like PETSc with Parametis ripped out) to make it easier for agencies to get approval? </div><div><br></div><div><br></div><div> Barry</div><div> </div><div>I suspect we are going to receive more of these requests as apparently all US agencies now need to do this assessment on all software that they use.<br><div><br><blockquote type="cite"><div>Begin forwarded message:</div><br class="Apple-interchange-newline"><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family: -webkit-system-font, "Helvetica Neue", Helvetica, sans-serif;"><b>From: XXXX</b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;"><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family: -webkit-system-font, "Helvetica Neue", Helvetica, sans-serif;"><b>Subject: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;"><b>Request for Information: TAO: Toolkit for Advanced Optimization and PETSc</b><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family: -webkit-system-font, "Helvetica Neue", Helvetica, sans-serif;"><b>Date: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;">October 10, 2023 at 1:41:32 PM EDT<br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family: -webkit-system-font, "Helvetica Neue", Helvetica, sans-serif;"><b>To: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;">"bsmith@petsc.dev" <bsmith@petsc.dev><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><br></div><div><meta charset="UTF-8"><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 18px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">Hello, my name is XXXX I am a Supply Chain Risk Management Analyst at YYYY.YYYY is currently conducting a supply chain assessment of<span style="color: rgb(21, 25, 32);"><span class="Apple-converted-space"> </span>TAO and PETSc</span>. We are interested in confirming the following information:<span style="color: rgb(21, 25, 32);"><o:p></o:p></span></div><ol start="1" type="1" style="margin-bottom: 0in; margin-top: 0in;"><li class="MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">Is there an organization which sponsors/publishes the project, or a primary developer who audits the code for potential vulnerabilities, errors, or malicious code? Y/N<o:p></o:p></li><li class="MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">We have identified contributors for PETSc from the United States, Saudi Arabia, Switzerland, Austria, Spain, Canada, the United Kingdom, Belgium, Romania, China, Finland, the Czech Republic, New Zealand, and Australia.<o:p></o:p></li><ol start="1" type="a" style="margin-bottom: 0in; margin-top: 0in;"><li class="MsoListParagraph" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">If possible, could you please confirm this information?<o:p></o:p></li></ol></ol><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">Thank you for all your help,<o:p></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;"><br></div></div></div></blockquote></div><br></div></div></div></blockquote></div><br></div></body></html>