Guides Supply chain rules
Executive Order 14415 explained for defense contractors
Executive Order 14415 makes primes and subcontractors at every tier map and vet supply chains, with 15-day and 45-day clocks. What is in force now.
By Chris Edwards, Edwards Consulting Group · Updated
Executive Order 14415, signed July 20, 2026, directs the Department of War to write policy and regulations that will require prime contractors and subcontractors at any tier to map their critical supply chains, vet every supplier, and report significant risks within 15 days and a corrective action plan within 45 days of finishing that vetting. Those contractor duties are not in force yet: the order sets a 180-day deadline for the policy and a further 90 days for regulations. The one date already fixed is January 1, 2027, when most waivers for covered materials under 10 U.S.C. 4872 stop.
This guide explains the rules as of October 21, 2026. It is not legal advice: the clauses in your contract decide what applies to you.
What is Executive Order 14415?
Its full title is "Securing America's Defense Supply Chains and Ensuring Domestic Acquisition of Critical Materials". The President signed it on July 20, 2026 and the Federal Register published it on July 23, 2026 at 91 FR 46693 as document 2026-15003. The White House text is at whitehouse.gov.
Section 1 states the policy: not only finished equipment but "the critical materials and components necessary to manufacture, maintain, sustain, and repair that equipment, are sourced domestically or from allied nations". The order has eight sections. Three of them matter most to a contractor: Section 2 (waivers), Section 3 (supply chain mapping and vetting) and Section 4 (qualifying domestic sources).
What does Executive Order 14415 require?
The order is addressed to the Secretary of War. It gives the Secretary deadlines to write policy and regulations, and it says what those regulations must contain. The contractor obligations below are what the order says the regulations "shall require"; they reach you through the regulations and contract clauses that follow, not through the order itself. Section 8(c) adds that the order creates no right or benefit enforceable against the United States.
Section 3: supply chain mapping and vetting
Section 3(a) gives the Secretary 180 days to "develop policy and implementation guidance to require all prime contractors and subcontractors at any tier to map and illuminate" critical supply chains "from raw materials to the end use products such contractors deliver to the Department of War". Within 90 days of completing that guidance, the Secretary must promulgate implementing regulations, which "shall seek to ensure that small businesses, non-traditional defense companies, and new entrant firms are able to comply with the intent of this section without being unduly burdened".
Section 3(b) says the proposed regulations shall require contractors to:
- submit to the Department of War "a complete indentured Bill of Materials that traces all components, parts, equipment, software, and materials back to the origin of raw materials";
- "establish and implement written procedures" to "proactively vet all suppliers and subcontractors that support the critical supply chain", screening at a minimum for three categories of risk: financial, foreign ownership, control, or influence (FOCI), and manufacturing and supply; and
- not use, in their supply chains, covered material from an "unreliable foreign supplier", subject to the exception in Section 6(a) for Project Vault and U.S.-financed sources.
The 15-day and 45-day clocks
Section 3(c) says the regulations shall require contractors, "upon completion of the vetting activities", to:
| Step | What Section 3(c) says |
|---|---|
| Mitigate | "implement timely mitigation actions, including those identified in the required Supply Chain Risk Management Plan pursuant to Contract Requirement Data List DI-MGMT-82256A" |
| Track | "track active mitigation actions until closure" |
| Notify in 15 days | "within 15 days of completing the vetting activities, notify the Department of War of any significant supply chain risks identified by the vetting activities" |
| Plan in 45 days | "within 45 days of completing the vetting activities, submit a written, confidential corrective action plan detailing implemented mitigations and a strict projected timeline for complete implementation" |
| Close out | "submit a closeout report upon completing the corrective action plan" |
Both clocks start from the same event, the completion of vetting, not from the discovery of a risk. The order does not define "significant" or say what counts as completing vetting; expect the regulations to.
Section 2: waivers for covered materials
Section 2(a) says that on January 1, 2027 the Secretary of War and the military department secretaries "shall cease to issue waivers under 10 U.S.C. 4872(c)(1)" for covered materials, except as Section 2(b) allows. Under 2(b) a waiver can still be issued if the prime or subcontractor submits a formal mitigation plan, accepted by the Secretary, that identifies the non-compliant source, documents exhaustive efforts to find compliant material, describes the steps to remove it from the supply chain, and sets "a strict projected timeline". Under 2(c), failing to qualify a domestic source is not non-availability unless the contractor shows "active, adequately funded, and ongoing efforts" to qualify one.
Section 4: qualifying alternative sources
Within 180 days the Secretary must start regulatory action to identify existing national-security acquisitions and require contractors whose supply chains include an unreliable foreign supplier to qualify an alternative source "as soon as possible", except where none is available. Section 4(b) makes failing to do so grounds, consistent with law and contract terms, to consider suspending or terminating orders, declining options, or terminating the contract.
Who does EO 14415 apply to?
The mapping and vetting regime is written for "all prime contractors and subcontractors at any tier" on Department of War acquisitions "that support, implicate, or relate to United States national security, as determined by the Secretary" (Section 3(a)). Section 7(a) defines a critical supply chain as "all tiers of suppliers and subcontractors providing goods, materials, systems, software, or services that are essential to contract deliverables, mission assurance, security, or resilience, as defined by the Secretary". Which acquisitions are covered is therefore a determination the Secretary still has to make.
EO 14415 timeline: what is in force now and what is still to come
| Date | What happens | Status on October 21, 2026 |
|---|---|---|
| July 20, 2026 | Order signed | Done |
| July 23, 2026 | Published at 91 FR 46693 | Done |
| October 18, 2026 (90 days) | Strategy to accelerate testing and qualification of new sources (Sec. 4(c)) | Internal deadline; nothing published that we have found |
| January 1, 2027 | Waivers under 10 U.S.C. 4872(c)(1) cease except with an accepted mitigation plan (Sec. 2(a)) | Fixed by the order |
| January 16, 2027 (180 days) | Policy and implementation guidance for supply chain mapping (Sec. 3(a)); regulatory action on existing acquisitions (Sec. 4(a)); list of remedies for noncompliance (Sec. 2(e)) | Due |
| 90 days after the guidance is complete | Implementing regulations for mapping, vetting and the 15-day and 45-day clocks (Sec. 3(a)) | Not yet issued |
| Every 6 months until January 1, 2028 | Secretary reports progress to the National Security Advisor (Sec. 5) | Ongoing |
As of October 21, 2026 we have not found a published DFARS case, proposed rule or Department of War policy implementing Section 3. Until the regulations and contract clauses exist, the indentured bill of materials, the written vetting procedures and the 15-day and 45-day deadlines are directions to the Department, not terms of your contract. What is already in force is the order's deadline structure itself and, from January 1, 2027, the narrowing of covered-material waivers.
What is still unknown
- Which acquisitions the Secretary will designate as supporting national security.
- What "significant" means for the 15-day notification, and what completing vetting means.
- The format of the indentured bill of materials (Section 7(b) says it "will require a standard format, content, and data" set through data item descriptions).
- How the small-business accommodation in Section 3(a) will work in practice.
- Whether the 15-day and 45-day clocks will survive rulemaking unchanged.
What a prime can do now
The order names what the vetting will look for: financial distress, foreign ownership, control or influence, and manufacturing and supply concentration (Section 7(c) to (e)).
- Know your tiers. Section 3 reaches "subcontractors at any tier". Start from the public record: your subawards reported on USAspending.gov and your suppliers' SAM.gov registrations give you the first tier and often the second.
- Write the procedure down. Section 3(b)(ii) asks for "written procedures" for vetting. A short procedure that names the three risk categories, who screens, and what is recorded will be easier to adapt than one written after the rule arrives.
- Keep a register with owners and dates. The 15-day and 45-day clocks run from completing vetting. A register where each risk has a severity, an owner, a status and a mitigation is the raw material for both the notification and the corrective action plan.
- Watch the waiver date. If any covered material in your supply chain depends on a waiver under 10 U.S.C. 4872, January 1, 2027 is the date to plan around, and a mitigation plan under Section 2(b) is the path the order leaves open.
Where Tiermark fits
Tiermark builds a prime's supplier map from the subawards reported on USAspending.gov and the registrations in SAM.gov, so the first tier is on one screen; see Your supplier map. Its risk register gives each item a severity, an owner, a status and a mitigation, and when you mark vetting complete it starts two clocks, notification due in 15 days and corrective action plan due in 45, with email notices seven days before each date and on the day. The register goes into every audit package as CSV. Tiermark does not produce an indentured bill of materials or screen for FOCI or financial distress.
Sources
Still have a question?
Write to help@tiermark.io and a person will answer.