(a) Within 180 days of the date of this order, the Secretary shall develop policy and implementation guidance to require all prime contractors and subcontractors at any tier to map and illuminate, as further described in subsection (b) of this section, critical supply chains for all Department of War acquisitions that support, implicate, or relate to United States national security, as determined by the Secretary, from raw materials to the end use products such contractors deliver to the Department of War. Within 90 days of completion, the Secretary shall promulgate implementing regulations, and such regulations shall seek to ensure that small businesses, non-traditional defense companies, and new entrant firms are able to comply with the intent of this section without being unduly burdened by these regulations, as well as ensure that these regulations are consistent with all statutory domestic and allied sourcing requirements.
(b) The proposed regulations promulgated pursuant to subsection (a) of this section shall include requirements that:
(i) contractors must submit to the Department of War a complete indentured Bill of Materials that traces all components, parts, equipment, software, and materials back to the origin of raw materials in their supply chains;
(ii) contractors must establish and implement written procedures, in accordance with existing Department of War procedures for conducting supply chain risk assessments, to proactively vet all suppliers and subcontractors that support the critical supply chain; such vetting for critical supply chains shall, at a minimum, include screening of subcontractors and suppliers for the following categories of supply chain risks and challenges:
(A) financial, as defined in section 7(c) of this order,
(B) foreign ownership, control, or influence, as defined in section 7(d) of this order, and
(C) manufacturing and supply, as defined in section 7(e) of this order; and
(iii) subject to the exception contemplated by section 6(a) of this order, prohibit contractors from utilizing in their supply chains covered material supplied by an unreliable foreign supplier, as defined in section 7(f) of this order.
(c) The proposed regulations promulgated pursuant to subsection (a) of this section shall require contractors, upon completion of the vetting activities described in subsection (b)(ii) of this section, to:
(i) implement timely mitigation actions, including those identified in the required Supply Chain Risk Management Plan pursuant to Contract Requirement Data List DI-MGMT-82256A, to reduce the likelihood or impact of each identified risk;
(ii) track active mitigation actions until closure;
(iii) within 15 days of completing the vetting activities, notify the Department of War of any significant supply chain risks identified by the vetting activities;
(iv) within 45 days of completing the vetting activities, submit a written, confidential corrective action plan detailing implemented mitigations and a strict projected timeline for complete implementation of the corrective action plan; and
(v) submit a closeout report upon completing the corrective action plan.
(d) The Department of War shall, in response to the vulnerabilities, bottlenecks, and single points of failure identified by contractor acquisition information, map national security vulnerabilities as they relate to the sourcing of key raw materials or other links in the supply chain, using any tools and technologies to include artificial intelligence to assist in doing so. The Secretary shall account for identified vulnerabilities, bottlenecks, and single points of failure before issuing any waivers under 10 U.S.C. 4872(c)(1) or (e), consistent with the requirements of section 2 of this order.