Supply Chain Obligation

Control Statement

The organization shall maintain a supply chain risk management program meeting its federal obligations, and shall record which acquisitions fall within its scope.

Purpose. To discharge the statutory supply chain risk obligation, and to make the boundary of its scope explicit rather than assumed.

Discussion

The distinction between this control and LC-1 is the difference between an obligation and an operation. LC-1 asks who has a path into the estate and what it reaches — a terrain question, answered on the overlay. FO-6 asks whether the agency runs the program it is required to run, and to which acquisitions that program applies. Scope is where this control does its work: supply chain obligations rarely apply to every acquisition, and an agency that has never recorded the boundary cannot demonstrate either compliance inside it or a considered position outside it.

Goals and Metrics

A metric that cannot come out badly is not a metric. Each of these is capable of reporting that the control is not working.

Accountability

Exactly one role is accountable, and every other role carries at least Informed — no control in the published catalog leaves a role with zero relationship to it. That is a stated property of how these were authored, not a coincidence, and not a claim that every role's work is worth equal attention here.

Inputs and Outputs

Activities

1. L2Maintain a supply chain risk management program meeting the agency's federal obligations.
2. L2Record which acquisitions fall within its scope.
3. L2Record the basis on which acquisitions are excluded.
4. L3Derive scope from the governing obligations rather than from acquisition value thresholds alone.
5. L3Integrate the program's determinations into acquisition decisions before award rather than after.
6. L3Reconcile in-scope acquisitions against the supplier terrain register (LC-1), so a supplier with estate access that fell outside SCRM scope is visible as a deliberate position rather than an oversight.
7. L3Record prohibited-source and exclusion determinations and the action taken.
8. L4Measure the proportion of in-scope acquisitions assessed before award.
9. L4Measure the gap between suppliers holding estate access (LC-1) and suppliers within SCRM scope, and treat a large gap as a finding about scope.
10. L5Revise scope where the reconciliation with LC-1 repeatedly shows access-holding suppliers falling outside it.

Measurement

Evidence and Assessment

Related Guidance

Position in the Chain

Derived from the other controls’ own declarations, so the two directions cannot disagree.

Where This Control Is Used

Derived, in every case, from the declaration at the other end: the forms whose techniques name this control, the artifacts whose producing and consuming controls include it, the layers whose control lists name it, and the roles its own accountability chart puts to work. Nothing here is authored on this page, so the sheet cannot claim an edge the other end does not.