The Department of Health and Human Services (HHS) proposes to amend its HHS Acquisition Regulation (HHSAR) to implement HHS Enterprise Supply Chain Risk Management Program (E-SCRM) policy requirements to conduct a supply chain risk assessment on mission-critical procurements. The intent is to protect HHS' internal supply chain as it relates to threats posed during the acquisition lifecycle of mission-critical products, materials, information, and services. This rulemaking adds policy, procedures, and a prescribed clause and provision for the information to be provided by applicable offerors and contractors, subcontractors, and vendors to assist HHS in conducting risk assessments on offerors prior to award, and during contract performance.