View Rule

The Department of Defense (DoD) is issuing a final rule to amend the Defense Federal Acquisition Regulation Supplement (DFARS) to implement section 806 of the National Defense Authorization Act (NDAA) for Fiscal Year (FY) 2011, as amended by section 806 of the NDAA for FY 2013, which allows DoD to consider the impact of supply chain risk in specified types of procurements related to national security systems . Section 806 defines supply chain risk as the risk that an adversary may sabotage, maliciously introduce unwanted function, or otherwise subvert the design, integrity, manufacturing, production, distribution, installation, operation, or maintenance of a covered system so as to surveil, deny, disrupt, or otherwise degrade the function, use, or operation of such system.” This rule will protect DoD against risks arising out of the supply chain when acquiring information technology that is part of a covered system. The revisions to this rule will be reported in future status updates as part of DoD's retrospective plan under Executive Order 13563, completed in August 2011. DoD's full plan can be accessed at: http://www.regulations.gov/#!docketDetail;D=DOD-2011-OS-0036.

Overall Description of Deadline: Within 180 days from enactment of the National Defense Authorization Act (NDAA) for Fiscal Year 2011, which was enacted on Jan. 7, 2011.