Virginia Chief Information Officer Bob Osmond said a recent inventory project revealed thousands of apps, including some with critical issues.