Federal subcontract risk rarely lives in one clause. Payment, scope, flowdowns, changes, cyber, labor, data rights, insurance, termination, and missing documents can interact across the same package.
Use this hub as the first-pass map. Start with the agreement checklist, make sure the package is complete, then move into the subject area that carries the most cost or operational risk for your work.
Start With the Package Itself
A broad pre-signature checklist covering scope, price, payment, flowdowns, changes, liability, termination, disputes, and missing documents.
What to request when the subcontract relies on prime-contract material you have not received.
How to inventory referenced-but-missing statements of work, schedules, specifications, and compliance attachments.
Which document controls when the body, SOW, proposal, purchase order, or flowdown exhibit conflict.
Resolve the Commercial Risk
Understand contingent-payment language and the difference between timing and shifted nonpayment risk.
Check whether the final subcontract actually promises any minimum work, task orders, hours, or revenue.
Review duty-to-defend, third-party claims, negligence allocation, and uncapped exposure.
Understand what happens to committed cost, inventory, demobilization, and profit if the prime ends the work for convenience.
Then Follow the Risk Into the Right Cluster
Clause applicability, incorporation, matrices, lower tiers, and future updates.
Payment conditions, retainage, withholding, bonds, and nonpayment escalation.
Change authority, REAs, claims, notice, pass-throughs, delay, and acceleration.
CUI/FCI, CMMC levels, 7012, cyber reporting, and lower-tier cyber flowdowns.