Defense contractors lose routine access to the § 4872 waiver pathway on January 1, 2027, under Executive Order 14415, signed July 20, 2026. From that date, sourcing specialty metals, tungsten, rare earth elements or other covered materials from China, Russia, North Korea or Iran — including through Tier 2 and Tier 3 suppliers — requires a formal mitigation plan accepted by the Secretary of War or a designee. With fewer than 100 days between the order's signing and the cessation date, the practical question for compliance teams is sequencing: what to assess first, what to document now, and what must be filed before the window closes.
The underlying statute, 10 U.S.C. § 4872, prohibits the Department of War from acquiring certain materials sourced from covered countries. The waiver authority in subsection (c)(1) let the Secretary excuse non-compliant sourcing when compliant material was unavailable or national security interests required it. Executive Order 14415 does not repeal that authority, but it functionally eliminates routine access to it, per Orrick's analysis of the order. After January 1, 2027, a waiver issues only against a four-part mitigation plan.
What does the four-part mitigation standard require?
A post-cessation waiver request must, according to the order as summarized by Orrick, do four things. It must identify the specific source of the non-compliant material. It must document evidence of exhaustive efforts to acquire compliant material, or demonstrate that compliant material was not available. It must describe the steps to remove the non-compliant covered material from the supply chain. And it must establish a strict projected timeline for complete implementation.
Each element is an evidentiary demand, not a narrative one. "Exhaustive efforts" means documented outreach, not a statement of intent. A plan that names a supplier, shows the failed attempts to find compliant alternatives, and commits to dated milestones is the shape the standard rewards. The FY2026 National Defense Authorization Act, signed in December 2025, compounds the workload: it expanded the list of restricted minerals and established phased compliance timelines, broadening the universe of affected contractors. Readers following this should also see FinCEN's SAR Rule Explained: The 30-Day Deadline, the $5,000 Threshold, and What Changed in 2025.
Which suppliers and materials bring a company into scope?
Any company in the defense supply chain whose products or components incorporate the covered materials is affected — primes and subcontractors at every tier. The covered list includes:
- Specialty metals: titanium, steel alloys, zirconium, hafnium
- Tungsten and tungsten heavy alloys
- Rare earth elements, including neodymium, dysprosium and terbium
- Molybdenum, gallium, germanium and other materials added by the FY2026 NDAA
The statute reaches down the chain. A Tier 3 supplier sourcing rare earth magnets from Chinese processors creates compliance exposure for the entire prime contract. Sectors with particularly high exposure, per the analysis, include aerospace and defense manufacturing, missile and munitions production, semiconductor fabrication, advanced electronics, and energy storage systems used in military applications.
The NDAA also phases in restrictions on Department of War procurement of advanced batteries linked to foreign entities of concern: January 1, 2028 for new acquisitions, January 1, 2029 for standard batteries, and January 30, 2031 for existing acquisitions. Battery-adjacent suppliers have a later but not optional deadline.
What must contractors submit within 180 days of the order?
Two deliverables sit on a separate clock. Within 180 days of the order, the Secretary must require all prime contractors and subcontractors at any tier to submit a complete indentured Bill of Materials — tracing all components, parts, equipment, software and materials back to the origin of the raw materials. Contractors must also establish written procedures to proactively vet all suppliers and subcontractors for supply chain risks, including financial distress, foreign ownership or control, and manufacturing vulnerabilities.
The Bill of Materials requirement is where documentation discipline pays or fails. Teams that already maintain evidence trails for regulatory inspection — the same habit that makes audit trails hold up under examination — will find the indentured BOM a scaling exercise. Teams that assemble supplier data ad hoc will not produce a raw-material-origin trace in the window without a dedicated effort.
What are the consequences of non-compliance?
The risk map has five distinct layers. Inability to deliver compliant material may constitute a material breach or trigger termination for default. Inaccurate representations and certifications regarding material sourcing carry False Claims Act exposure. Contractors with established compliant supply chains will be preferred in future source selections, so the competitive cost persists past any single contract. Non-compliance at any tier flows upward to the prime. And EO 14415 directs the Secretary to take all appropriate contractual remedies for fraud or willful noncompliance with mitigation plans, and authorizes referral to the Attorney General for investigation and possible prosecution. We covered a connected angle in How to Document a Compliance Risk Assessment That Survives an OCC Examination.
Contractors relying on unreliable foreign suppliers must qualify and use alternative sources — or risk suspension or termination of task orders, contract options, or existing contracts.
What should compliance teams do in the remaining weeks?
The recommended sequence, drawn from the source analysis, runs in three phases:
- Assessment, immediately. Map the complete supply chain for all covered materials, including Tier 2 and Tier 3 suppliers. Identify every active contract or subcontract with § 4872 compliance requirements. Determine whether any current supplier sources covered materials from covered countries. Assess exposure to the FY2026 NDAA's expanded minerals list.
- Mitigation planning, October through December 2026. Develop formal mitigation plans meeting the four-part standard for any non-compliant source. Document exhaustive efforts to identify compliant alternative suppliers. Execute alternative sourcing agreements or offtake arrangements with domestic or allied-nation suppliers. Submit waiver requests with mitigation plans before January 1, 2027. Update all DFARS representations and certifications.
- Ongoing compliance, 2027 and beyond. Monitor Buy American domestic content threshold increases — 65% for items delivered through 2028, rising to 75% for items delivered starting in 2029. Track funding through the Defense Industrial Base Consortium, DPA Title III and DOE programs that may subsidize the transition to compliant domestic sources. Maintain contemporaneous documentation sufficient to defend the program.
The last item is the one teams underprice. A mitigation plan is a promise with a timeline; the enforcement provisions attach to willful noncompliance with that plan. Contemporaneous records of sourcing decisions, supplier outreach and milestone progress are what separate a defensible program from an exposed one.
What this means in practice
Three operational consequences follow from the sourced record. First, the January 1, 2027 date governs waiver issuance, not contract award: a waiver request filed without an accepted mitigation plan before cessation gains nothing, so the mitigation plan is the critical-path document, not the waiver form. Second, Tier 2 and Tier 3 supplier mapping is now a prime-contract deliverable in substance, because exposure flows upward regardless of which tier caused it. Third, the DFARS representations and certifications update is a False Claims Act control, not paperwork — the certifications must match the mapped reality of the supply chain on the day they are signed.
This article is information, not legal advice. Contractors should work with qualified counsel on their own contract terms and facts.
