Supply Chain Risk & Compliance
A supply chain carries the obligations of the contract it serves, and it carries the risks the contract did not anticipate. This page states what is screened before an order is placed and what is monitored after it is.
Clause Flow-Down
The obligations a prime contract imposes do not stop at the prime. A flow-down matrix is prepared per contract so that what must reach a supplier reaches it in the order itself, before award.
- Contract-specific flow-down matrix maintained and reviewed by contracts before each award
- Mandatory clauses incorporated verbatim where the regulation requires verbatim inclusion
- Supplier acceptance of terms verified in writing rather than presumed from performance
- Audit, records access, and retention obligations extended to the supplier
- Flow-downs re-verified when a prime contract is modified
Prohibited Sources and Section 889
Certain equipment and services may not enter a federal supply chain at any tier. Screening happens before award, and the representation is on file.
- Section 889 representations obtained and recorded for covered telecommunications and video surveillance equipment and services
- Prohibited-source screening applied to equipment purchases and to services that rely on covered equipment
- SAM.gov exclusion, debarment, and suspension checks performed and dated before award
- Foreign ownership, control, or influence considerations reviewed where the requirement is sensitive
- Discovery of covered equipment treated as a reportable event, not an internal correction
Cybersecurity Flow-Down
Controlled unclassified information reaches suppliers whenever technical data does. Safeguarding obligations travel with it and are stated in the order rather than assumed from the supplier's marketing.
- Safeguarding requirements aligned with NIST SP 800-171 flowed to suppliers handling controlled unclassified information
- Cyber incident reporting obligations imposed at the tier that holds the data
- CMMC-related obligations addressed as the applicable acquisition requires
- Data transmitted through controlled channels with access limited to the minimum necessary
- Cloud and software suppliers assessed for data location, subprocessing, and access controls
Export Control in the Supply Chain
A purchase can be an export. Technical data sent to a supplier, and the nationality of the people who will see it, are screened before the data leaves.
- ITAR and EAR jurisdiction and classification determined for the item and its technical data before solicitation
- Foreign person access, deemed export exposure, and licensing needs identified prior to data release
- Export representations and obligations flowed down and acknowledged in writing
- Restricted-party screening of suppliers, intermediaries, and end users
- Technical data marked, controlled, and transmitted only through authorized channels
Continuity, Lead Time, and Single-Source Risk
The most common supply chain failure on a technical program is not fraud. It is a part with a long lead time and one qualified source, discovered late.
- Critical items identified with lead time, source count, and obsolescence status recorded
- Single-source dependencies logged in the risk register with a mitigation owner
- Second-source qualification pursued where the item's criticality justifies the cost
- Long-lead procurement planned against the integrated schedule rather than against optimism
- Diminishing manufacturing sources monitored and raised as a design decision when required
- Supplier financial and continuity distress treated as a program risk with an escalation path
Ethics, Conflicts, and Gratuities
Purchasing is where conflict of interest most often enters an organization. The rules are explicit, and the standard applied is what a reviewer would conclude, not what an individual intended.
- Gifts, gratuities, and entertainment from suppliers prohibited beyond narrowly defined nominal limits
- Financial interest in, or family relationship with, a supplier disclosed and disqualifying from that decision
- Former government official employment restrictions observed under procurement integrity rules
- Organizational conflict of interest reviewed where advisory work touches a source selection
- Anonymous reporting channel available for suspected purchasing misconduct, with retaliation prohibited
Government Property and Material Accountability
Material and property acquired or furnished under a contract are accounted for from receipt through disposition, wherever in the chain they physically sit.
- Property management practices aligned with FAR Part 45 and the contract's property clause
- Contractor-acquired and government-furnished property recorded, tagged, and periodically inventoried
- Accountability flowed down when property is provided to a supplier
- Loss, damage, destruction, or theft reported through the contract's required channel
- Disposition instructions obtained and executed at contract close-out
Where This Connects
Export obligations are described in export compliance, information safeguarding in data protection, and risk governance in enterprise risk management. Conduct expectations are stated in the code of conduct.
Alignment Disclosure
Monarch Space Systems describes its purchasing, subcontracting, and supply chain practices as aligned with the cited federal regulations, agency supplements, and consensus standards. Alignment is not a determination. The institution does not claim an approved purchasing system, a completed or passed Contractor Purchasing System Review, an approved small business subcontracting plan, a quality management system certification, or any specific supplier relationship, qualification result, or purchase history. Supplier identities, pricing, terms, and purchase documentation are competition-sensitive and are not published.
Purchasing policy documentation, procedures, and control descriptions are available to customers and prospective teammates through the confidential engagement pathway or by request through institutional contact.