Final Rule on Supply Chain Risk Fails to Provide Additional Guidance, Protection, or Relief from Uncertain Application
Client Alert | 1 min read | 11.02.15
On October 30, DoD published a final rule (a) requiring evaluation of supply chain risk when acquiring information technology that is either a covered National Security System ("NSS"), part of a covered NSS, or in support of a covered NSS; and (b) authorizing DoD to exclude primes or subs from a particular procurement if they fail to mitigate identified supply chain risks adequately. DoD made relatively modest changes to the 2013 interim rule (e.g., removing the flow-down requirement applicable to subs at any tier) but largely rejected industry input (e.g., declining to identify specific standards or controls to mitigate supply chain risk and declining to create a mechanism for challenging exclusion from a particular source selection).
Contacts

Partner and Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 3 min read | 06.22.26
A recent U.S. Government Accountability Office (GAO) decision dismissing three pre-award protests as untimely highlights an important procedural trap for would-be protesters. In Oready, LLC, GAO dismissed three protests filed one business day too late, even though they were submitted prior to the solicitation closing date and time.
Client Alert | 4 min read | 06.17.26
From Checkout To Opt-Out: The EU Withdrawal Button Is Here – What E-Commerce Businesses Need To Know
Client Alert | 6 min read | 06.17.26
Client Alert | 6 min read | 06.16.26
What United States v. Bankman-Fried Means for Health Care Fraud Defense

