The Federal Acquisition Supply Chain Security Act (FASCSA) is a U.S. law that provides a process for restricting or removing certain covered products and services from federal information systems when they pose a supply-chain security risk. Actions under the law are implemented through formal government processes and can affect federal procurement and existing deployments.
FASCSA matters because supply-chain risk may stem from a product’s origin, dependencies, or supplier relationships-not only from a known vulnerability or active breach. In practice, agencies may need to identify affected software, services, or embedded components, verify supplier and model provenance, and stop purchasing or remove items covered by an applicable order. Accurate inventories and vendor disclosures help organizations assess whether a restriction applies.