Supply Chain

Supply chain & subcontractor guides

Flowdown and subcontractor-facing CMMC and DFARS obligations.

Three luggage tags stamped 7012 and linked in a chain labeled Prime, Sub, and Sub-Sub, illustrating DFARS 252.204-7012 flowdown through the supply chain.

Supply Chain

Subcontractor Flowdown Under DFARS 252.204-7012

A practical workflow for deciding when safeguarding and incident-reporting obligations need to reach subcontractors that handle covered defense information.

Read guide →

Illustrated funnel labeled Prime showing CMMC requirements flowing down to new subcontractors

Supply Chain

A Prime Contractor's CMMC Flowdown Checklist for Onboarding New Subcontractors

A prime's CMMC onboarding should identify protected data, applicable clauses, required status, approved systems and transfer paths, incident contacts, and flowdown.

Read guide →

Illustration of a subcontractor with a pen and question marks, reviewing questions to ask a prime about CMMC before signing

Supply Chain

What a Small Subcontractor Should Ask a Prime About CMMC Requirements Before Signing

Before signing, a subcontractor should clarify the protected data, clauses, CMMC status, approved systems, evidence expectations, incident duties, and cost impact.

Read guide →

Illustration of overlapping circles representing teaming partners in a joint venture, showing whose systems fall inside CMMC scope

Supply Chain

CMMC for Teaming Agreements and Joint Ventures: Whose Scope Is It?

CMMC scope in a teaming agreement or joint venture follows the entities, contracts, systems, and information flows actually used—not the relationship label alone.

Read guide →