delete PART 2439—ACQUISITION OF INFORMATION TECHNOLOGY
Internal HUD procurement requirement mandating that contracting officers must include specific clauses in solicitations and contracts when: (a) contractor employees need access to HUD information systems, and (b) when contractors provide IT hardware, software, or data products. Requires inclusion of clauses at 2452.239-70 (Access to HUD Systems) and 2452.239-71 (IT Virus Security).
This is internal agency procurement micromanagement, not a public regulation. The Federal Acquisition Regulation already provides contracting officers with flexibility to include appropriate security clauses based on risk. Codifying these specific requirements eliminates professional judgment, adds administrative burden to every HUD contract, and contributes to the proliferation of rigid rules that make government procurement slower and more costly without commensurate benefit. HUD should be free to manage its own IT security requirements through standard contracting practices and agency guidance rather than binding regulations.