Final Rule on Supply Chain Risk Fails to Provide Additional Guidance, Protection, or Relief from Uncertain Application
Client Alert | 1 min read | 11.02.15
On October 30, DoD published a final rule (a) requiring evaluation of supply chain risk when acquiring information technology that is either a covered National Security System ("NSS"), part of a covered NSS, or in support of a covered NSS; and (b) authorizing DoD to exclude primes or subs from a particular procurement if they fail to mitigate identified supply chain risks adequately. DoD made relatively modest changes to the 2013 interim rule (e.g., removing the flow-down requirement applicable to subs at any tier) but largely rejected industry input (e.g., declining to identify specific standards or controls to mitigate supply chain risk and declining to create a mechanism for challenging exclusion from a particular source selection).
Contacts

Partner and Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 4 min read | 06.17.26
From Checkout To Opt-Out: The EU Withdrawal Button Is Here – What E-Commerce Businesses Need To Know
From June 19, 2026, all online traders active within the EU are required to provide a “withdrawal button” on their websites and apps. The introduction of this withdrawal button represents a significant shift in the online consumer cancellation landscape. In this alert, we provide an overview of what this requirement means in practice and why compliance is so important.
Client Alert | 6 min read | 06.17.26
Client Alert | 6 min read | 06.16.26
What United States v. Bankman-Fried Means for Health Care Fraud Defense
Client Alert | 2 min read | 06.15.26
Kansas Federal Court Applies “Selective Enforcement” Theory to Reject DTSA Claim

