Source & Authority Information
- •39.000 Scope of part. | Acquisition.GOV(accessed August 26, 2026)
- •39.101 Policy. | Acquisition.GOV(accessed August 26, 2026)
- •Part 39 - Acquisition of Information Technology | Acquisition.GOV(accessed August 26, 2026)
AI-assisted and automatically checked against the linked primary sources.
What does FAR Part 39 cover?
Part 39 of the FAR covers acquisition policy for information technology and information and communication technology. FAR 39.000 states that the part prescribes policies and procedures for acquiring IT, including financial management systems, and ICT. FAR 39.101 then tells agencies to identify IT requirements with attention to security of resources, privacy, national security and emergency preparedness, accessibility for individuals with disabilities, energy efficiency, sustainable products and services, power management, and energy-efficient management of servers and Federal data centers. The policy also directs contracting officers to use market research and technology refreshment techniques when developing an acquisition strategy. For financial management systems, agencies must follow OMB Circular A-127 and may acquire only core financial management software certified by the Joint Financial Management Improvement Program. The same section adds specific requirements for IT security policies, IP compliance, and consultation with the requiring official, and it lists several prohibited technologies and services.
Process
- 1Confirm the scope
Use FAR 39.000 to confirm that the acquisition involves information technology or information and communication technology.
- 2Identify the requirements
Apply FAR 39.101 to capture security, privacy, accessibility, energy efficiency, sustainable products and services, and server and data center best practices.
- 3Build the acquisition strategy
Use market research and technology refreshment techniques when developing the strategy, as directed in FAR 39.101.
- 4Check compliance and prohibitions
Apply the financial management system rules, IT security requirements, IP compliance requirements, and the listed technology prohibitions before proceeding.
FAR 39.101 names several specific prohibitions, including Kaspersky Lab hardware, software, and services; covered telecommunications equipment or services; the covered application TikTok; FASCSA-covered articles; and prohibited unmanned aircraft systems.