Curious how they plan to enforce this. Will they be auditing their own organizations? Are theg requiring govt organizations to go through some kind of review be

Curious how they plan to enforce this. Will they be auditing their own organizations? Are theg requiring govt organizations to go through some kind of review before they're allowed to deploy new software? Are they relying on whistleblowers? Or is this basically just a declaration with the expectation that their organizations will act in good faith going forward?