FAR and DFARS › DFARS Part 252: Solicitation Provisions and Contract Clauses › Subpart 252.2
DFARS 252.239-7017 Notice of Supply Chain Risk.
The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.
In plain English
This DFARS provision defines supply chain risk and tells offerors that the Government may use authorities under 10 U.S.C. 3252 to manage that risk. It also warns that if the Government limits disclosure of information under those authorities, its actions cannot be challenged in a bid protest before the GAO or in Federal court.
Applies to: Offerors responding to solicitations that include this provision
Key terms: supply chain risk · covered system · all-source intelligence · bid protest · Government Accountability Office
Written by AI from this section's text. A guide, not legal advice: the text below rules.
The text
As prescribed in 239.7306(a), use the following provision:
Notice of Supply Chain Risk (DEC 2022)
(a) Definition. Supply chain risk, as used in this provision, means the risk that an adversary may sabotage, maliciously introduce unwanted function, or otherwise subvert the design, integrity, manufacturing, production, distribution, installation, operation, or maintenance of a covered system so as to surveil, deny, disrupt, or otherwise degrade the function, use, or operation of such system (see 10 U.S.C. 3252).
(b) In order to manage supply chain risk, the Government may use the authorities provided by 10 U.S.C. 3252. In exercising these authorities, the Government may consider information, public and non-public, including all-source intelligence, relating to an offeror and its supply chain.
(c) If the Government exercises the authority provided in 10 U.S.C. 3252 to limit disclosure of information, no action undertaken by the Government under such authority shall be subject to review in a bid protest before the Government Accountability Office or in any Federal court.
(End of provision)
Sections it refers to
- 239.7306 Solicitation provision and contract clause.
← 252.239-7016 Telecommunications security equipment, devices, techniques, and services. · 252.239-7018 Supply Chain Risk. →
Rule changes for DFARS Part 252
- Defense Federal Acquisition Regulation Supplement: Modifications to Printed Circuit Board Acquisition Restrictions (DFARS Case 2022-D011) ↗ · proposed 2026-07-02 · comments due 2026-08-31
- Defense Federal Acquisition Regulation Supplement: Certification Requirement for Military Recruitment Advertising (DFARS Case 2024-D022) ↗ · proposed 2026-06-25 · comments due 2026-08-24
- Defense Federal Acquisition Regulation Supplement: Small Purchase Exception for the Acquisition of U.S. Flags (DFARS Case 2024-D013) ↗ · proposed 2026-06-25 · comments due 2026-08-24
- Defense Federal Acquisition Regulation Supplement: Mitigating Risks Related to Foreign Ownership, Control, or Influence (DFARS Case 2021-D011) ↗ · proposed 2026-05-07 · comments due 2026-07-06
- Defense Federal Acquisition Regulation Supplement: Assessing Contractor Implementation of Cybersecurity Requirements (DFARS Case 2019-D041) ↗ · final rule 2025-09-10 · effective 2025-11-10
- Defense Federal Acquisition Regulation Supplement: Limitation on Certain Institutes of Higher Education (DFARS Case 2024-D023); Correction ↗ · final rule 2025-08-28 · effective 2025-08-28
- Defense Federal Acquisition Regulation Supplement: Disclosure of DoD Funding in Technical Publications (DFARS Case 2024-D003) ↗ · proposed 2025-08-25 · comments due 2025-10-24
- Defense Federal Acquisition Regulation Supplement: Limitation on Certain Institutes of Higher Education (DFARS Case 2024-D023) ↗ · final rule 2025-08-25 · effective 2025-08-25
Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Plain words for the terms: glossary.