whatbindsCheck your order

Clauses · DFARS · Supply chain and sourcing · provision

DFARS 252.239-7017 Notice of Supply Chain Risk

Does the regulation require it to flow down?

No

No mandate: a solicitation provision with only paragraphs (a) through (c), none of them a subcontracts paragraph, prescribed for solicitations only. Primes flow it down anyway — 7 of 43 corpus documents carry it, including RTX, BAE, AAR, CACI and all three GDMS templates, usually adjacent to 252.239-7018 — because the flow-down lists are generated from clause indexes that do not separate provisions from clauses, and because primes want the sub on notice that an exclusion decision they cannot contest can land on the sub's supplier

A clause can reach your subcontract without a mandate. Once it is in your document, it is a contract term all the same. The missing mandate is a fact about the regulation. It is not a ruling on your order.

Checked against acquisition.gov on 2026-08-05 · edition DEC 2022 · base v0.9.3 Read the text ↗

What it makes you produce

One item for your checklist.

  1. Nothing to send, ever

    There is no paperwork here. It is a rule you follow while you perform the work.

    • A notice rather than a duty: the Government may act on information about you and your supply chain that it will not show you, and that action is not reviewable in a protest or in court

      DFARS 252.239-7017

When it is used

Solicitation provision. Goes in solicitations, including those using FAR part 12 procedures for commercial products and commercial services, for information technology — whether acquired as a service or as a supply — that is a covered system, is part of a covered system, or is in support of a covered system (239.7306(a); re-prescribed at 240.271-7(a) by DoD Class Deviation 2026-O0025, effective 2026-02-01, with the 'covered system' definition moving from 239.7301 to 240.271-2). A covered system is a national security system. No dollar threshold and no COTS exception. Its contract-stage twin is clause 252.239-7018, already in this base.

Read closely

the citation is to the provision itself because the notice runs across its three paragraphs rather than sitting in one. Nothing here is filled in, certified or costed. The duties, and the exclusion mechanics, live in the companion clause 252.239-7018.

The 6 templates that name it, with the line

Source: acquisition.gov, DFARS 252.239-7017, DFARS 239.7306(a) and DFARS 212.301(f); DoD Class Deviation 2026-O0025 (acquisition.gov, DoD_RFO_Deviation_Part-40.pdf), DFARS 240.271-1 through 240.271-7(a) and provision text at Attachment A1 (verified 2026-08-05)

This is research, not legal advice. It states what the regulation says about this clause and cites the paragraph behind it. It does not rule on your order, and it does not rule on whether a prime's markings are correct.