# Executive Order 14415: Trump Administration Tightens Defense Supply Chain Oversight, Mandates Domestic Sourcing of Critical Materials

> President Trump signed Executive Order 14415, "Securing America's Defense Supply Chains and Ensuring Domestic Acquisition of Critical Materials," on July 20, 2026, restricting Department of War nonavailability waivers for critical materials sourced from statutorily "covered nations" (China, Russia, North Korea, Iran) beginning January 1, 2027, and mandating indentured Bill-of-Materials supply-chain mapping plus FOCI/financial/manufacturing-risk vetting for defense contractors. The order is framed as resilience against "physical, cyber, and economic subversion" of defense supply chains amid renewed great-power competition, and follows a string of 2025-2026 critical-minerals actions including the $12B Project Vault Strategic Critical Minerals Reserve.

- **Published:** 2026-07-20T00:00:00Z
- **Last reviewed:** 2026-07-20T00:00:00Z
- **Canonical:** https://intel.threadlinqs.com/threat/TL-2026-1700
- **ID:** TL-2026-1700
- **Severity:** INFO
- **Category:** SUPPLY_CHAIN
- **Status:** ACTIVE
- **Detections:** 9 · **IOCs:** 22 (full data via the Threadlinqs MCP server — Purple tier)

## Description

Executive Order 14415, signed July 20, 2026 and published in the Federal Register on July 23, 2026 (Doc. 2026-15003), tightens U.S. Department of War (Department of Defense) oversight of critical-materials sourcing for military equipment. It operates under the existing statutory prohibition at 10 U.S.C. § 4872, which bars DoD procurement of "covered materials" melted, produced, or otherwise sourced from four statutorily designated "covered nations": the People's Republic of China, the Russian Federation, the Democratic People's Republic of North Korea, and the Islamic Republic of Iran. The order's stated rationale is that despite this long-standing statutory bar, "supply chain resilience and domestic production has been historically under-prioritized" by defense contractors, leaving the industrial base exposed to "physical, cyber, and economic subversion" during a period of renewed great-power competition.

Three operative mandates take effect on staggered deadlines. First (Section 2), beginning January 1, 2027, the Secretary of War and military department secretaries will stop granting nonavailability waivers for covered materials from covered nations unless a contractor submits a formal mitigation plan documenting exhaustive efforts to obtain compliant material, remediation steps, and a strict implementation timeline. Second (Section 3), within 180 days of signing (~January 16, 2027), the Department of War must promulgate a regulatory process requiring covered contractors and subcontractors, at all supplier tiers, to submit "indentured Bills of Materials" tracing components, parts, equipment, software, and materials back to the origin of raw materials, and to implement written vetting procedures for financial risk, foreign ownership/control/influence (FOCI), and single-source/manufacturing risk — with a 15-day risk-notification window and a 45-day corrective-action-plan deadline. Third (Section 4), contractors that identify reliance on an "unreliable foreign supplier" must qualify and transition to an alternative source "as soon as possible" or face contract suspension, termination, or non-exercise of contract options; the Attorney General is positioned to pursue fraud investigations for false compliance representations. Within 90 days of signing (~October 18, 2026), the Secretary must also finalize implementing regulations and a strategy to accelerate testing and qualification of new domestic/allied sources, rescinding regulations that impede rapid qualification. Six-month waiver-usage and mitigation-progress reports go to the Assistant to the President for National Security Affairs through January 1, 2028.

Trade-press and law-firm analysis (Wiley, KPMG, Mondaq) identifies the specific covered materials as samarium-cobalt magnets, neodymium-iron-boron (NdFeB) magnets, tungsten metal powder, tungsten heavy alloy components, tantalum metals/alloys, and molybdenum — inputs to missiles, aircraft, and other advanced weapons systems that are heavily China-dependent. The order is one in a sequence of 2025-2026 actions (a January 2025 defense-acquisition-modernization order, a March 2025 critical-mineral permitting order, an April 2025 defense-industrial-base innovation order, the September 2025 "Department of War" naming order (EO 14347), a January 2026 Commerce/USTR processed-critical-minerals directive, the February 2026 America First Arms Transfer Strategy, and the February 2026 launch of Project Vault, a $12B public-private Strategic Critical Minerals Reserve backed by a $10B EXIM Bank loan). Project Vault holdings and U.S.-funded foreign projects are explicitly exempted from EO 14415's waiver restrictions. White House adviser Peter Navarro publicly characterized the mandate as "battlefield preparation," stating "No more: 'we tried nothing and we're out of options.'"

This record is classified INFORMATIONAL / SUPPLY_CHAIN: it is a regulatory and policy development, not an active exploitation event, PoC, KEV addition, or attributed campaign — no CVEs, malware, or attacker infrastructure exist in the source material. It is tracked because it materially changes defense-industrial-base risk posture and directly targets the class of adversary tradecraft — reconnaissance of supplier relationships, compromise of trusted/foreign-controlled suppliers, and pre-positioning within the defense supply chain for future disruption — publicly documented in nation-state campaigns such as the China-linked Volt Typhoon activity against U.S. critical infrastructure (living-off-the-land techniques, web shells, credential abuse, and pre-positioning for disruption at a time of the actor's choosing, per CISA/NSA/FBI joint assessments). The MITRE ATT&CK techniques mapped below represent that general adversary tradecraft class which EO 14415's supply-chain-mapping and vetting mandates are designed to counter; they are not techniques observed in a specific incident tied to this EO. Per the CISA/NSA/FBI joint advisory AA24-038A and MITRE ATT&CK's Volt Typhoon (G1017) group profile, that documented tradecraft spans the full intrusion lifecycle relevant to defense-industrial-base and critical-infrastructure targeting: exploitation for privilege escalation after initial foothold (T1068); credential theft via LSASS/NTDS dumping and browser/private-key credential stores (T1003, T1555, T1552); domain account discovery (T1087) feeding RDP-based lateral movement and living-off-the-land lateral tool transfer (T1021, T1570); and local data staging ahead of collection (T1074) — the same class of trusted-supplier and single-source compromise that indentured Bill-of-Materials tracing and FOCI vetting under EO 14415 Sections 2-4 are intended to surface and interrupt.

## MITRE ATT&CK

- T1591 Gather Victim Org Information
- T1584 Compromise Infrastructure
- T1195 Supply Chain Compromise
- T1199 Trusted Relationship
- T1059 Command and Scripting Interpreter
- T1078 Valid Accounts
- T1505 Server Software Component
- T1068 Exploitation for Privilege Escalation
- T1070 Indicator Removal
- T1003 OS Credential Dumping
- T1555 Credentials from Password Stores
- T1552 Unsecured Credentials
- T1082 System Information Discovery
- T1018 Remote System Discovery
- T1087 Account Discovery
- T1021 Remote Services
- T1570 Lateral Tool Transfer
- T1119 Automated Collection
- T1074 Data Staged
- T1090 Proxy
- T1489 Service Stop

## Sources

- [Executive Order 14415: Securing America's Defense Supply Chains and Ensuring Domestic Acquisition of Critical Materials](https://www.whitehouse.gov/presidential-actions/2026/07/securing-americas-defense-supply-chains-and-ensuring-domestic-acquisition-of-critical-materials/)
- [Fact Sheet: President Donald J. Trump Secures America's Defense Supply Chains and Ensures Domestic Acquisition of Critical Materials](https://www.whitehouse.gov/fact-sheets/2026/07/fact-sheet-president-donald-j-trump-secures-americas-defense-supply-chains-and-ensures-domestic-acquisition-of-critical-materials/)
- [Federal Register: Securing America's Defense Supply Chains and Ensuring Domestic Acquisition of Critical Materials](https://www.federalregister.gov/documents/2026/07/23/2026-15003/securing-americas-defense-supply-chains-and-ensuring-domestic-acquisition-of-critical-materials)
- [Presidential Documents 46693 (Federal Register PDF, Doc. 2026-15003)](https://www.govinfo.gov/content/pkg/FR-2026-07-23/pdf/2026-15003.pdf)
- [Trump executive order tightens defense supply chain oversight, mandates domestic sourcing of critical materials](https://industrialcyber.co/supply-chain-security/trump-executive-order-tightens-defense-supply-chain-oversight-mandates-domestic-sourcing-of-critical-materials/)
- [New executive order tightens defense supply chain waiver rules](https://www.defensenews.com/news/pentagon-congress/2026/07/20/new-executive-order-tightens-defense-supply-chain-waiver-rules/)
- [Executive Order Seeks to Advance Domestic Critical Material Sourcing, Limit Waivers](https://www.executivegov.com/articles/trump-eo-defense-supply-chain-waivers)
- [New Executive Order Expands Supply Chain Due Diligence for Defense Contractors](https://www.wiley.law/alert-New-Executive-Order-Expands-Supply-Chain-Due-Diligence-for-Defense-Contractors)
- [U.S. executive order restricts critical material waivers from covered nations and mandates supply chain mapping](https://kpmg.com/us/en/taxnewsflash/news/2026/07/us-executive-order-defense-supply-chains.html)
- [Supply Chain Executive Order Expands Defense Contractors' Obligations](https://www.mondaq.com/unitedstates/government-contracts-procurement-ppp/1822188/supply-chain-executive-order-expands-defense-contractors-obligations)
- [10 U.S.C. § 4872 — Acquisition of sensitive materials from non-allied foreign nations: prohibition (definition of 'covered nation')](https://www.law.cornell.edu/definitions/uscode.php?width=840&height=800&iframe=true&def_id=10-USC-1197798417-780045830&term_occur=999&term_src=title%3A10%3Asubtitle%3AA%3Apart%3AV%3Asubpart%3AI%3Achapter%3A385%3Asubchapter%3AIII%3Asection%3A4872)
- [Fact Sheet: President Donald J. Trump Restores the United States Department of War](https://www.whitehouse.gov/fact-sheets/2025/09/fact-sheet-president-donald-j-trump-restores-the-united-states-department-of-war/)
- [Strengthening Project Vault: The US plan to stockpile critical minerals](https://www.piie.com/publications/policy-briefs/2026/strengthening-project-vault-us-plan-stockpile-critical-minerals)
- [Volt Typhoon — Nation-State Threat Analysis (China-linked cyber operations targeting U.S. critical infrastructure)](https://www.cyber.nj.gov/threat-landscape/nation-state-threat-analysis-reports/china-linked-cyber-operations-targeting-us-critical-infrastructure/volt-typhoon)
- [CISA/NSA/FBI Joint Advisory AA24-038A: PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure](https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-038a)

## Full data

Detection queries (Splunk SPL / Microsoft KQL / Sigma) and IOC values require the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp

Canonical: https://intel.threadlinqs.com/threat/TL-2026-1700