Be Sure To Exercise Care In Vetting Your Supply Chain
July 19, 2018
Now, more than ever before, contractors need to employ good contracting and subcontracting practices to secure their supply chains. Government contractors are required to deliver what they promise in their proposals and, ultimately, under their contracts. As a prime contractor, or higher tier subcontractor, you are responsible for the integrity and compliance of your supply chain. Recent developments may make that supply chain a potential trap for the unwary unless you are taking adequate steps to vet your suppliers:
- Supply Chain Risk clauses: Department of Defense (DoD) is including several clauses in acquisitions and contracts that warrant your increased attention. DFARS 252.239-7018 Supply Chain Risk clause is being included in DoD information technology procurements. This clause allows DoD to decide not to award a contract, or to cancel one that has been awarded, if DoD considers the prime contractor or its supply chain to pose “the risk that an adversary may sabotage, maliciously introduce unwanted function, or otherwise subvert the design, integrity, manufacturing, production, distribution, installation, operation, or maintenance of a national security system… so as to surveil, deny, disrupt, or otherwise degrade the function, use, or operation of such system.” DFARS 252.246-7007 Contractor Counterfeit Electronic Part Detection and Avoidance System and DFARS 252.246-7008 Sources of Electronic Parts require contractors to protect against counterfeit electronic parts in all tiers of their supply chain. Contractors and subcontractors must employ trusted sources, maintain traceability, and report on actual or suspect counterfeit parts. FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems, as well as DFARS 252.204-7012 , Safeguarding Covered Defense Information and Cyber Incident Reporting , require contractors and their subcontractors to comply with specific cyber security controls and cyber incident reporting requirements.
- DHS Binding Operational Directive (BOD) Ban on Products: The Department of Homeland Security (DHS) has authority to ban the use of certain products that pose risks to the national security. In Fall 2017, DHS issued its first BOD 17-01, requiring government agencies to take steps to scan, identify and remove/replace Kaspersky products in their systems.
- Other Legal Bans on Products: In December 2017, Congress passed the National Defense Authorization Act for FY 2018, prohibiting the use of any software platform developed in whole, or in part, by Kaspersky Lab. Effective July 16, 2018, FAR 52.204-23 Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab and Other Covered Entities will be included in procurements and resultant contracts; the clause also may be added to existing contracts through a bilateral amendment.
- Tariffs and Other Actions: President Trump’s National Security Strategy issued in December 2017 identified national security risks posed by certain economic activities of foreign countries. Tariffs and other actions are being taken to address these concerns.
- Private Lawsuits and Government Investigations: Counterfeit parts continue to infiltrate the market. Counterfeit parts may involve the theft of a company’s intellectual property, and result in the loss of sales and good will for the company’s brand. In addition, counterfeit parts that do not work as intended pose significant safety and security risks to the United States, other countries, and our citizens. Private companies as well as the Government are seeking to address this problem. For example, in 2018, CISCO Systems filed a lawsuit against two Florida companies for importing and selling counterfeit electronic parts. One of these companies is a government contractor and is now under investigation by the Defense Logistics Agency.
Key Takeaways –
- Failing to adequately protect the integrity of your supply chain has untold costs. Take steps to protect your supply chain by vetting your suppliers and their products throughout the procurement lifecycle.
- Track notices of product and supplier risks and bans to reduce your supply chain risks.
- Negotiate and include appropriate clauses in your contracts to assure supply chain integrity and to identify appropriate processes and remedies for reporting, correcting and obtaining recourse in the event of a problem.
- Identify your incident response team members and develop a plan so you can take the necessary steps to prepare for and address any detected quality or performance problem, actual or suspected counterfeit part or cyber incident.
A safe and secure supply chain is in everyone’s interest. If you are a government contractor or subcontractor and have questions about your supply chain responsibilities, or the impact of these supply chain risk rules and requirements, contact Susan Warshaw Ebner, or your FortneyScott contact, for assistance.
The midterms could reshape the legislative and regulatory landscape for employers. Join FortneyScott attorneys on Tuesday, November 17, 2026, from 12:00pm to 1:00pm EST , for a fast-paced discussion of what’s ahead in Congress and key federal agencies. We’ll cover the Congressional lame duck session and the new 120th Congress, agency priorities, nominations, and expected developments at the DOL, EEOC, NLRB, and DOJ affecting labor, employment, immigration, and DEI issues. Get a clear view of the policy and enforcement trends employers need to watch. Please click here to register for this webinar.
Wage-and-hour compliance continues to be a priority as it evolves in 2026, with new U.S. Department of Labor opinion letters addressing compensable time, travel, meal periods, rounding, bonuses, exemptions and tip practices, alongside significant federal enforcement activity. This one-hour webinar will examine the year’s most important federal developments and translate them into practical compliance lessons for employers. The program will also highlight distinctive District of Columbia wage-and-hour requirements, including current minimum and tipped wage rates, overtime, wage notices, pay statements and recordkeeping obligations, and will conclude with a practical wage-and-hour audit checklist.
Join FortneyScott attorneys on Wednesday, October 28, 2026 from 12:00pm to 1:00pm EDT for a timely and practical webinar on wage and hour. Wage-and-hour compliance continues to be a priority as it evolves in 2026, with new U.S. Department of Labor opinion letters addressing compensable time, travel, meal periods, rounding, bonuses, exemptions and tip practices, alongside significant federal enforcement activity. This one-hour webinar will examine the year’s most important federal developments and translate them into practical compliance lessons for employers. The program will also highlight distinctive District of Columbia wage-and-hour requirements, including current minimum and tipped wage rates, overtime, wage notices, pay statements and recordkeeping obligations, and will conclude with a practical wage-and-hour audit checklist. To register for this webinar, please CLICK HERE .
On August 21, 2026, the OFCCP finally published its final rules upending long-standing affirmative action requirements for federal contractors. While the elimination of EO 11246 regulations was expected, the substantial changes to Section 503 were less expected. By September 21, contractors must not only update their systems to remove now banned requirements but also determine how they will meet their affirmative action requirements without data collection. We will break down the most important developments, explain which obligations remain in place, and highlight practical steps organizations can take now to reduce risk, preserve defensible compliance practices, and prepare for what comes next. In this webinar, you will learn how to: Identify the OFCCP changes most likely to affect your affirmative action program strategy; Evaluate how revised Section 503 requirements may affect disability-related data collection, outreach, and documentation; Understand continuing VEVRAA obligations for protected veteran compliance. Manage transition issues for current and upcoming AAP cycles; and Prioritize practical next steps for policies, records, audits, and stakeholder communications.
Register for FortneyScott's Webinar on New OFCCP Regulations – What Federal Contractors Need to Know
Join FortneyScott attorneys on Thursday, September 10, 2026 from 12:00pm to 1:00pm EDT for a timely and practical webinar on the revised OFCCP regulations and how contractors should respond. To register, click here . On August 21, 2026, the OFCCP finally published its final rules upending long-standing affirmative action requirements for federal contractors. While the elimination of EO 11246 regulations was expected, the substantial changes to Section 503 were less expected. By September 21, contractors must not only update their systems to remove now banned requirements but also determine how they will meet their affirmative action requirements without data collection. We will break down the most important developments, explain which obligations remain in place, and highlight practical steps organizations can take now to reduce risk, preserve defensible compliance practices, and prepare for what comes next. In this webinar, you will learn how to: Identify the OFCCP changes most likely to affect your affirmative action program strategy; Evaluate how revised Section 503 requirements may affect disability-related data collection, outreach, and documentation; Understand continuing VEVRAA obligations for protected veteran compliance. Manage transition issues for current and upcoming AAP cycles; and Prioritize practical next steps for policies, records, audits, and stakeholder communication s. To register for this webinar, please CLICK HERE .
The U.S. Department of Labor (DOL) will publish in the Federal Register the three final rules impacting federal contractor regulations on Friday, August 21, 2026. Executive Order 11246 regulations – DOL finalized the rescission of its regulations for EO 11246, effective October 26, 2026, to eliminate the obligations of federal contractors to prepare affirmative action plans based on race and sex, in addition to nondiscrimination provisions, and additional compliance requirements. This is to align with EO 14373, wherein President Trump rescinded EO 11246. Section 503 of Rehabilitation Act – DOL finalized the elimination of the disability self-identification requirements as well as the 7% utilization goal. In addition, the CC-305 Form will be eliminated. DOL holds that the Americans with Disabilities Act prohibits employers, including federal contractors, from collecting voluntary disability identification from applicants and employees. The nondiscrimination and reasonable accommodation requirements are maintained. Contractors with 50 or more employees and $50,000 or more in contracts will continue to be required to prepare affirmative action plans and to assess their outreach and recruitment. DOL moved the administrative procedures provisions from EO 11246 regulations here. VEVRAA – DOL’s revisions to the VEVRAA regulations were mostly technical, retaining the obligation to provide voluntary self-identification of veterans and to prepare affirmative action plans. DOL added the administrative procedures to these regulations and updated the jurisdictional threshold from $150,000 to $200,000. Please contact your FortneyScott attorney or email us at info@fortneyscott.com for more information.
The midterms could reshape the legislative and regulatory landscape for employers. Join FortneyScott attorneys on Tuesday, November 17, 2026, from 12:00pm to 1:00pm EST , for a fast-paced discussion of what’s ahead in Congress and key federal agencies. We’ll cover the Congressional lame duck session and the new 120th Congress, agency priorities, nominations, and expected developments at the DOL, EEOC, NLRB, and DOJ affecting labor, employment, immigration, and DEI issues. Get a clear view of the policy and enforcement trends employers need to watch. Please click here to register for this webinar.
Wage-and-hour compliance continues to be a priority as it evolves in 2026, with new U.S. Department of Labor opinion letters addressing compensable time, travel, meal periods, rounding, bonuses, exemptions and tip practices, alongside significant federal enforcement activity. This one-hour webinar will examine the year’s most important federal developments and translate them into practical compliance lessons for employers. The program will also highlight distinctive District of Columbia wage-and-hour requirements, including current minimum and tipped wage rates, overtime, wage notices, pay statements and recordkeeping obligations, and will conclude with a practical wage-and-hour audit checklist.
Join FortneyScott attorneys on Wednesday, October 28, 2026 from 12:00pm to 1:00pm EDT for a timely and practical webinar on wage and hour. Wage-and-hour compliance continues to be a priority as it evolves in 2026, with new U.S. Department of Labor opinion letters addressing compensable time, travel, meal periods, rounding, bonuses, exemptions and tip practices, alongside significant federal enforcement activity. This one-hour webinar will examine the year’s most important federal developments and translate them into practical compliance lessons for employers. The program will also highlight distinctive District of Columbia wage-and-hour requirements, including current minimum and tipped wage rates, overtime, wage notices, pay statements and recordkeeping obligations, and will conclude with a practical wage-and-hour audit checklist. To register for this webinar, please CLICK HERE .
On August 21, 2026, the OFCCP finally published its final rules upending long-standing affirmative action requirements for federal contractors. While the elimination of EO 11246 regulations was expected, the substantial changes to Section 503 were less expected. By September 21, contractors must not only update their systems to remove now banned requirements but also determine how they will meet their affirmative action requirements without data collection. We will break down the most important developments, explain which obligations remain in place, and highlight practical steps organizations can take now to reduce risk, preserve defensible compliance practices, and prepare for what comes next. In this webinar, you will learn how to: Identify the OFCCP changes most likely to affect your affirmative action program strategy; Evaluate how revised Section 503 requirements may affect disability-related data collection, outreach, and documentation; Understand continuing VEVRAA obligations for protected veteran compliance. Manage transition issues for current and upcoming AAP cycles; and Prioritize practical next steps for policies, records, audits, and stakeholder communications.
Register for FortneyScott's Webinar on New OFCCP Regulations – What Federal Contractors Need to Know
Join FortneyScott attorneys on Thursday, September 10, 2026 from 12:00pm to 1:00pm EDT for a timely and practical webinar on the revised OFCCP regulations and how contractors should respond. To register, click here . On August 21, 2026, the OFCCP finally published its final rules upending long-standing affirmative action requirements for federal contractors. While the elimination of EO 11246 regulations was expected, the substantial changes to Section 503 were less expected. By September 21, contractors must not only update their systems to remove now banned requirements but also determine how they will meet their affirmative action requirements without data collection. We will break down the most important developments, explain which obligations remain in place, and highlight practical steps organizations can take now to reduce risk, preserve defensible compliance practices, and prepare for what comes next. In this webinar, you will learn how to: Identify the OFCCP changes most likely to affect your affirmative action program strategy; Evaluate how revised Section 503 requirements may affect disability-related data collection, outreach, and documentation; Understand continuing VEVRAA obligations for protected veteran compliance. Manage transition issues for current and upcoming AAP cycles; and Prioritize practical next steps for policies, records, audits, and stakeholder communication s. To register for this webinar, please CLICK HERE .
The U.S. Department of Labor (DOL) will publish in the Federal Register the three final rules impacting federal contractor regulations on Friday, August 21, 2026. Executive Order 11246 regulations – DOL finalized the rescission of its regulations for EO 11246, effective October 26, 2026, to eliminate the obligations of federal contractors to prepare affirmative action plans based on race and sex, in addition to nondiscrimination provisions, and additional compliance requirements. This is to align with EO 14373, wherein President Trump rescinded EO 11246. Section 503 of Rehabilitation Act – DOL finalized the elimination of the disability self-identification requirements as well as the 7% utilization goal. In addition, the CC-305 Form will be eliminated. DOL holds that the Americans with Disabilities Act prohibits employers, including federal contractors, from collecting voluntary disability identification from applicants and employees. The nondiscrimination and reasonable accommodation requirements are maintained. Contractors with 50 or more employees and $50,000 or more in contracts will continue to be required to prepare affirmative action plans and to assess their outreach and recruitment. DOL moved the administrative procedures provisions from EO 11246 regulations here. VEVRAA – DOL’s revisions to the VEVRAA regulations were mostly technical, retaining the obligation to provide voluntary self-identification of veterans and to prepare affirmative action plans. DOL added the administrative procedures to these regulations and updated the jurisdictional threshold from $150,000 to $200,000. Please contact your FortneyScott attorney or email us at info@fortneyscott.com for more information.
The EEOC voted 2 to 1 on Tuesday, July 21st to issue a Notice of Proposed Rulemaking (NPRM) to rescind the requirement for employers and other covered entities to file an annual report with the EEOC summarizing aggregate data on their employees’ race and sex (reports known respectively as the EEO-1, EEO-2, EEO-3, EEO-4, EEO-5, and EEO-6 reports or EEO Data Reports). This includes the rescission of recordkeeping requirements related to these reports. The proposal states that the Commission has determined the EEO Reports are inconsistent with equal employment opportunity law, may raise constitutional concerns, and that the collection of data is not narrowly tailored or necessary to enforce anti-discrimination statutes. EEOC determined that the reports, which had been collected since, 1966, have limited value, which was outweighed by the significant burdens they impose on employers and on the Commission. Once the NPRM is published in the Federal Register, individuals will have only 30 days to submit comments on the 60-page proposal. The Institute for Workforce Equality is planning to submit comments. Please contact your FortneyScott attorney or email us at info@fortneyscott.com with any thoughts you have on the proposed rescission, or on employer record-keeping obligations generally.
On Wednesday, June 24, 2026, the Office of Management and Budget’s (OMB) Office of Information and Regulatory Affairs (OIRA) extended EEOC’s information collection under the Uniform Guidelines on Employee Selection Procedures (UGESP) through June 29, 2029. UGESP requires employers covered by Title VII to collect and maintain records on the race, sex and ethnicity of those impacted by their employment selection procedures but does not require employers to report the data. EEOC and other enforcing agencies can then demand to see such data in connection with any investigation of employment discrimination. Please contact your FortneyScott attorney or email us at info@fortneyscott.com for additional information.
The Directive is driving a significant shift in compensation reporting and transparency across the EU, and requires employers to disclose salary ranges to applicants, share internal pay-setting criteria, and conduct gender pay reporting. With the June 7, 2026, deadline for Member States to transpose the Directive into national law, employers need to understand their compliance obligations and prepare for unresolved implementation questions. In this webinar, FortneyScott attorneys will help U.S. companies with operations in the EU understand the Directive’s requirements, including how they differ from U.S. compliance frameworks. We will discuss best practice lessons that can be adopted from U.S. pay transparency and reporting laws and, importantly, provide key contrasts of the U.S. practices that are not applicable in the EU. Key topics include: The Directive’s scope and coverage Reporting obligations under the Directive Status of Member State transposition Practical compliance steps employers can take now Who should attend. This webinar is designed for in-house counsel, HR leaders, and senior professionals at multi-national organizations responsible for compensation, benefits, and employment law compliance.
Join FortneyScott attorneys on Thursday, June 11, 2026, from 12:00 p.m. to 1:00 p.m. EDT for a complimentary webinar on the European Union (“EU”) Pay Transparency Directive (the “Directive”). To register, please click here . The Directive is driving a significant shift in compensation reporting and transparency across the EU, and requires employers to disclose salary ranges to applicants, share internal pay-setting criteria, and conduct gender pay reporting. With the June 7, 2026, deadline for Member States to transpose the Directive into national law, employers need to understand their compliance obligations and prepare for unresolved implementation questions. In this webinar, FortneyScott attorneys will help U.S. companies with operations in the EU understand the Directive’s requirements, including how they differ from U.S. compliance frameworks. We will discuss best practice lessons that can be adopted from U.S. pay transparency and reporting laws and, importantly, provide key contrasts of the U.S. practices that are not applicable in the EU. Key topics include: · The Directive’s scope and coverage · Reporting obligations under the Directive · Status of Member State transposition · Practical compliance steps employers can take now Who should attend. This webinar is designed for in-house counsel, HR leaders, and senior professionals at multi-national organizations responsible for compensation, benefits, and employment law compliance. Register to attend. To register, please click here .
