Low RiskDFARSCybersecurity

252.239-7017Notice of Supply Chain Risk.

Researched by the BidStride Research Team

What This Clause Requires

DFARS 252.239-7017 — Notice of Supply Chain Risk.. This clause is part of the Defense Federal Acquisition Regulation Supplement and applies specifically to Department of Defense contracts.

Official Regulation Text

252.239-7017 Notice of Supply Chain Risk. As prescribed in 239.7306(a), use the following provision: Notice of Supply Chain Risk (DEC 2022) (a) Definition. Supply chain risk, as used in this provision, means the risk that an adversary may sabotage, maliciously introduce unwanted function, or otherwise subvert the design, integrity, manufacturing, production, distribution, installation, operation, or maintenance of a covered system so as to surveil, deny, disrupt, or otherwise degrade the function, use, or operation of such system (see 10 U.S.C. 3252). (b) In order to manage supply chain risk, the Government may use the authorities provided by 10 U.S.C. 3252. In exercising these authorities, the Government may consider information, public and non-public, including all-source intelligence, relating to an offeror and its supply chain. (c) If the Government exercises the authority provided in 10 U.S.C. 3252 to limit disclosure of information, no action undertaken by the Government under such authority shall be subject to review in a bid protest before the Government Accountability Office or in any Federal court. (End of provision) [78 FR 69272, Nov. 18, 2013, as amended at 84 FR 4370, Feb. 15, 2019; 87 FR 76998, Dec. 16, 2022]

Source: eCFR, 48 CFR 252.239-7017 (https://www.ecfr.gov/current/title-48/section-252.239-7017)

Compliance Checklist

  • 3252 to limit disclosure of information, no action undertaken by the Government under such authority shall be subject to review in a bid protest before the Government Accountability Office or in any Federal court.

Flow-Down to Subcontractors

No flow-down required

This clause applies only to the prime contract and does not need to be flowed down to subcontractors.

Frequently Asked Questions

BidStride automatically scans your RFPs for 252.239-7017

Stop hunting through solicitations manually. BidStride identifies every FAR and DFARS clause in your RFP, flags risk level, and surfaces compliance requirements before you submit your bid.

This summary is for informational purposes only and reflects the BidStride Research Team's plain-English interpretation of the regulation. It is not legal advice and does not constitute an attorney-client relationship. Always consult the official Federal Acquisition Regulation (FAR) or Defense Federal Acquisition Regulation Supplement (DFARS) text and qualified legal counsel for compliance decisions.