Cybersecurity rules in this supplement
The HUD Acquisition Regulation (HUDAR) addresses access to HUD systems and IT integrity:
HUDAR clause 2452.239-70 — Access to HUD Systems. Governs contractor access to HUD information systems, including security conditions and user responsibilities.
HUDAR clause 2452.239-71 — Information Technology Virus Security. Requires contractors to protect HUD systems and data from malicious code.
HUDAR provision/clause 2452.237-82 / -83 — Access to Controlled Unclassified Information (CUI). Govern contractor access to and handling of HUD CUI.
In plain terms
If you connect to HUD's systems, you must meet HUD's access-security conditions, keep malware off those systems, and handle any HUD controlled unclassified information under the agency's CUI rules.
Who it applies to
Contractors and subcontractors that access HUD information systems or handle HUD CUI.
What it requires
Follow the FAR baseline, then: meet HUD system-access security requirements, guard against viruses/malicious code, and handle CUI under HUD's access clauses.
Why it matters
HUD systems hold housing and financial-assistance data, so access-control and malware-protection requirements are conditions of system connectivity.
Citation
HUD Acquisition Regulation (HUDAR), codified at 48 C.F.R. Chapter 24.