Section 214.201-5 - Part IV-Representations and instructions(c) Include an evaluation factor regarding supply chain risk (see subpart 239.73) when acquiring information technology, whether as a service or as a supply, that is a covered system, is a part of a covered system, or is in support of a covered system, as defined in 239.7301. 80 FR 67251 , Oct. 30, 2015