# 48 CFR § 252.239-7018: 252.239-7018 Supply Chain Risk > Federal · Regulations · In force URL: https://www.frixlaw.com/law-library/statutes/ecfr-48-252.239-7018 ## Section - **Citation:** 48 CFR § 252.239-7018 - **Heading:** 252.239-7018 Supply Chain Risk - **Jurisdiction:** Federal - **Kind:** Regulations - **Status:** In force - **Text as of:** September 22, 2026 - **Source:** Publisher's official text - **Location:** Title 48—Federal Acquisition Regulations System > CHAPTER 2—DEFENSE ACQUISITION REGULATIONS SYSTEM, DEPARTMENT OF DEFENSE > SUBCHAPTER H—CLAUSES AND FORMS > PART 252—SOLICITATION PROVISIONS AND CONTRACT CLAUSES > Subpart 252.2—Text of Provisions and Clauses ## Text As prescribed in 239.7306(b), use the following clause: Supply Chain Risk (DEC 2022) (a) Definitions. As used in this clause— Information technology (see 40 U.S.C 11101(6)) means, in lieu of the definition at FAR 2.1, any equipment, or interconnected system(s) or subsystem(s) of equipment, that is used in the automatic acquisition, storage, analysis, evaluation, manipulation, management, movement, control, display, switching, interchange, transmission, or reception of data or information by the agency. (1) For purposes of this definition, equipment is used by an agency if the equipment is used by the agency directly or is used by a contractor under a contract with the agency that requires— (i) Its use; or (ii) To a significant extent, its use in the performance of a service or the furnishing of a product. (2) The term “information technology” includes computers, ancillary equipment (including imaging peripherals, input, output, and storage devices necessary for security and surveillance), peripheral equipment designed to be controlled by the central processing unit of a computer, software, firmware and similar procedures, services (including support services), and related resources. (3) The term “information technology” does not include any equipment acquired by a contractor incidental to a contract. Supply chain risk means the risk that an adversary may sabotage, maliciously introduce unwanted function, or otherwise subvert the design, integrity, manufacturing, production, distribution, installation, operation, or maintenance of a covered system so as to surveil, deny, disrupt, or otherwise degrade the function, use, or operation of such system (see 10 U.S.C. 3252). (b) The Contractor shall mitigate supply chain risk in the provision of supplies and services to the Government. (c) In order to manage supply chain risk, the Government may use the authorities provided by 10 U.S.C. 3252. In exercising these authorities, the Government may consider information, public and non-public, including all-source intelligence, relating to a Contractor's supply chain. (d) If the Government exercises the authority provided in 10 U.S.C. 3252 to limit disclosure of information, no action undertaken by the Government under such authority shall be subject to review in a bid protest before the Government Accountability Office or in any Federal court. (End of clause) [78 FR 69272, Nov. 18, 2013, as amended at 80 FR 67252, Oct. 30, 2015; 84 FR 4370, Feb. 15, 2019; 87 FR 76998, Dec. 16, 2022] ## Nearby sections - [48 CFR § 252.101 252.101 Using part 252.](https://www.frixlaw.com/law-library/statutes/ecfr-48-252.101.md) - [48 CFR § 252.103 252.103 Identification of provisions and clauses.](https://www.frixlaw.com/law-library/statutes/ecfr-48-252.103.md) - [48 CFR § 252.201-7000 252.201-7000 Contracting officer's representative.](https://www.frixlaw.com/law-library/statutes/ecfr-48-252.201-7000.md) - [48 CFR § 252.203-7000 252.203-7000 Requirements Relating to Compensation of Former DoD Officials.](https://www.frixlaw.com/law-library/statutes/ecfr-48-252.203-7000.md) - [48 CFR § 252.203-7001 252.203-7001 Prohibition on Persons Convicted of Fraud or Other Defense-Contract-Related Felonies.](https://www.frixlaw.com/law-library/statutes/ecfr-48-252.203-7001.md) - [48 CFR § 252.203-7002 252.203-7002 Requirement to Inform Employees of Whistleblower Rights.](https://www.frixlaw.com/law-library/statutes/ecfr-48-252.203-7002.md) - [48 CFR § 252.203-7003 252.203-7003 Agency Office of the Inspector General.](https://www.frixlaw.com/law-library/statutes/ecfr-48-252.203-7003.md) - [48 CFR § 252.203-7004 252.203-7004 Display of Hotline Posters.](https://www.frixlaw.com/law-library/statutes/ecfr-48-252.203-7004.md) - [48 CFR § 252.203-7005 252.203-7005 Representation Relating to Compensation of Former DoD Officials.](https://www.frixlaw.com/law-library/statutes/ecfr-48-252.203-7005.md) - [48 CFR § 252.204-7000 252.204-7000 Disclosure of information.](https://www.frixlaw.com/law-library/statutes/ecfr-48-252.204-7000.md) - [48 CFR § 252.204-7002 252.204-7002 Payment for Contract Line or Subline Items Not Separately Priced.](https://www.frixlaw.com/law-library/statutes/ecfr-48-252.204-7002.md) - [48 CFR § 252.204-7003 252.204-7003 Control of government personnel work product.](https://www.frixlaw.com/law-library/statutes/ecfr-48-252.204-7003.md) - [48 CFR § 252.204-7004 252.204-7004 Antiterrorism Awareness Training for Contractors.](https://www.frixlaw.com/law-library/statutes/ecfr-48-252.204-7004.md) - [48 CFR § 252.204-7006 252.204-7006 Billing Instructions—Cost Vouchers.](https://www.frixlaw.com/law-library/statutes/ecfr-48-252.204-7006.md) --- Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/ecfr-48-252.239-7018. Check the current official text before relying on it. Not legal advice.