Agencies will avoid becoming victims of future hacks, like the one SolarWinds experienced, by considering the risks of software before they buy.