Section 889 and your IT Supply Chain: A Procurement Guide

Introduction: Why Section 889 Reshapes Network Infrastructure Procurement

Section 889 of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (FY2019 NDAA) fundamentally changed how federal agencies—and their commercial supply-chain partners—must evaluate telecommunications and network infrastructure equipment. The law prohibits federal agencies from procuring, obtaining, or extending contracts with entities that use covered telecommunications equipment or services produced by specific Chinese state-linked manufacturers. For network engineers and IT procurement officers, this means that every patch cord, fiber optic transceiver, structured cabling component, and network enclosure entering a federal environment must be evaluated for Section 889 compliance before a purchase order is issued.

This guide provides technical and procurement guidance for organizations navigating Section 889 obligations, with specific attention to cabling infrastructure standards, component-level compliance, and best practices for maintaining a defensible supply chain posture.

What Section 889 Actually Prohibits

Section 889 operates in two distinct parts. Part A (effective August 13, 2019) prohibits agencies from procuring equipment and services using covered technology. Part B (effective August 13, 2020) extends the prohibition to contractors that use covered technology anywhere in their operations, not only in the deliverable itself. The covered entities named in the statute include Huawei Technologies Company, ZTE Corporation, Hytera Communications Corporation, Hangzhou Hikvision Digital Technology Company, and Dahua Technology Company, along with their subsidiaries and affiliates.

For IT infrastructure, this prohibition reaches deeper than routers and switches. Surveillance cameras, IP intercoms, wireless access points, structured cabling components embedded with covered-vendor firmware, and even power distribution equipment with integrated management controllers sourced from prohibited manufacturers can trigger a violation.

"Federal contractors must scrutinize not only what they deliver, but what their own enterprise networks and facilities use day-to-day. Section 889 Part B transforms every contractor's internal IT environment into a compliance surface." — General Services Administration, Federal Acquisition Regulation (FAR) Case 2019-009 guidance commentary

The Technical Scope: Where Cabling Infrastructure Intersects with Compliance

Structured cabling components—patch panels, copper cable, fiber optic cable, connectors, and enclosures—are not themselves named in Section 889, but they are procurement-relevant for three reasons:

  • Bundled technology: Intelligent patch panels and fiber management systems may include embedded firmware, RFID, or management software that could originate from a covered entity's software stack.
  • System integration risk: Cabling infrastructure specified under ANSI/TIA-568.2-D (copper) and ANSI/TIA-568.3-D (fiber) must achieve end-to-end channel performance. Substituting a non-compliant or unvetted component mid-channel to avoid a covered vendor still requires the replacement meet channel insertion loss and return loss budgets.
  • Documentation for audits: FAR 52.204-24 and 52.204-25 require contractors to represent compliance. A bill of materials with traceable, compliant manufacturer data is essential evidence.

Applicable Standards for Compliant Network Infrastructure

Ensuring that Section 889-compliant substitutions do not degrade network performance requires adherence to the following standards:

Copper Cabling

ANSI/TIA-568.2-D governs balanced twisted-pair cabling. Category 6A (Cat6A) supports 10GBASE-T per IEEE 802.3an up to 100 meters, with a minimum channel insertion loss of no more than 20.9 dB at 500 MHz. Category 8 (Cat8), also covered under TIA-568.2-D, supports 25GBASE-T and 40GBASE-T per IEEE 802.3bq over a 30-meter channel, with a NEXT loss budget requirement of at least 33.1 dB at 2000 MHz. Any copper replacement component must meet these channel parameters to maintain IEEE 802.3 link integrity.

Fiber Optic Cabling

ANSI/TIA-568.3-D and ISO/IEC 11801-1:2017 govern optical fiber performance. OM3 multimode fiber supports 10 Gbps at up to 300 meters; OM4 extends that to 400 meters at 10 Gbps and 150 meters at 40/100 Gbps using parallel optics per IEEE 802.3ba. OM5 (wideband multimode, per TIA-492AAAE) supports SWDM4 transmission, enabling 40/100 Gbps over two fibers. Single-mode OS2 fiber, with a maximum attenuation of 0.4 dB/km at 1310 nm per IEC 60793-2-50, is preferred for campus backbones and data center interconnects exceeding OM4 distance limits. NEC Article 770 governs optical fiber cable installation requirements, including riser (OFR) and plenum (OFP) ratings, which must be confirmed for any replacement cable in federal facilities.

Data Center Infrastructure

ANSI/TIA-942-B (Data Center Telecommunications Infrastructure Standard) defines Rated-1 through Rated-4 tiers and specifies structured cabling, power, and cooling topology. NEC Article 800 covers communication circuits and bonding requirements for copper premises cabling. Enclosures and racks deployed in federal data centers should conform to EIA-310-D for 19-inch rack dimensions to ensure interoperability with compliant hardware substitutions.

Compliance Decision Framework: Component-Level Checklist

Section 889 Infrastructure Component Evaluation Matrix
Component Category Section 889 Risk Level Key Technical Standard Recommended Vetting Action
Copper patch cords (Cat6/Cat6A/Cat8) Low (passive) ANSI/TIA-568.2-D Verify manufacturer country of origin; obtain ETL or UL channel certification
Fiber optic patch cords (OM3/OM4/OM5, OS2) Low (passive) ANSI/TIA-568.3-D / ISO/IEC 11801 Confirm fiber grade, connector polish (UPC/APC), insertion loss ≤0.75 dB per mated pair per TIA-568.3-D
Intelligent/managed patch panels Medium (embedded firmware possible) ANSI/TIA-942-B Request firmware origin documentation; verify no covered-entity software stack
Enclosures, racks, and cabinets Low-Medium (passive structure; PDU/controller risk) EIA-310-D / ANSI/TIA-942-B Evaluate integrated PDU or remote management module separately for covered-entity components
UPS and PDU systems Medium-High (network management cards) IEEE 1668 / ANSI/TIA-942-B Audit network management card manufacturer; confirm SNMP agent software provenance
OTDR and certification test equipment Low-Medium (software updates) TIA-526-14-B / IEC 61280-4-2 Verify test software update servers are not hosted or managed by covered entities

Procurement Best Practices for Federal and Contractor Organizations

1. Require a Telecommunications and Video Surveillance Representation

FAR clause 52.204-24 requires offerors to disclose whether they will or will not provide covered telecommunications equipment as part of a federal offer. Procurement officers should require this representation from all subcontractors and material suppliers, not only prime contractors.

2. Leverage BABA-Compliant and Domestic Manufacturer Supply Chains

The Build America, Buy America Act (BABA), enacted under the Infrastructure Investment and Jobs Act of 2021, reinforces domestic sourcing obligations for federally funded infrastructure projects. Selecting manufacturers whose cabling and connectivity products are manufactured in the United States reduces both Section 889 and BABA compliance risk simultaneously.

3. Maintain a Traceable Bill of Materials

Every structured cabling project delivered to a federal customer should be supported by a component-level bill of materials that includes manufacturer name, country of origin, model designation, and applicable standard certifications. OTDR test reports per TIA-526-14-B and copper channel certification reports per ANSI/TIA-568.2-D should be archived as evidence of channel performance and supply chain traceability.

"A traceable bill of materials is no longer just good engineering practice—it is a contractual and regulatory obligation in federal procurement. Organizations that cannot produce component-level provenance documentation expose themselves to contract termination risk under FAR 52.204-25." — Federal Acquisition Regulatory Council, Final Rule on Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment (85 Fed. Reg. 42665, 2020)

4. Work with Distributors Holding Government-Focused Credentials

Purchasing through distributors with established government procurement credentials—including CAGE codes, WBE/EDWOSB certifications, and familiarity with set-aside vehicles—reduces administrative burden and supports audit readiness. Such distributors typically maintain pre-vetted product lines and can supply manufacturer compliance documentation rapidly.

Conclusion

Section 889 compliance is not a one-time checkbox; it is an ongoing supply chain discipline that requires technical precision, documentation rigor, and supplier partnerships built around transparency. Network engineers and procurement officers who align their infrastructure selections to named standards—ANSI/TIA-568.2-D, ANSI/TIA-568.3-D, ANSI/TIA-942-B, ISO/IEC 11801, IEEE 802.3, and NEC Articles 770 and 800—while maintaining traceable bills of materials will be best positioned to pass contract audits and protect mission-critical connectivity.

Heather Technologies Corporation distributes Section 889-compliant copper, fiber, power, and structured cabling infrastructure products to government and commercial customers nationwide as a WBE/EDWOSB certified distributor.