Interim rule sets process to exclude, remove risky technology from supply chain