CybersecurityRegulation

ITAR

International Traffic in Arms Regulations

The International Traffic in Arms Regulations (ITAR) is a U.S. export control framework that regulates the manufacture, transfer, export, and protection of defense articles, defense services, and technical data listed on the United States Munitions List (USML) to safeguard national security and foreign policy interests.

Overview

The International Traffic in Arms Regulations (ITAR) is a United States export control regulatory framework administered by the Directorate of Defense Trade Controls (DDTC) within the U.S. Department of State. Implemented under the Arms Export Control Act (AECA), ITAR regulates the manufacture, export, temporary import, re-export, retransfer, and brokering of defense articles, defense services, and related technical data identified on the United States Munitions List (USML). The regulations are codified in 22 CFR Parts 120–130 and are intended to protect U.S. national security and foreign policy interests by preventing unauthorized access to controlled military technologies and defense-related information.

ITAR establishes requirements for registration, licensing, recordkeeping, compliance programs, export authorizations, and restrictions on the transfer of controlled technical data to foreign persons and entities. Organizations involved in defense manufacturing, engineering, aerospace, defense contracting, research, software development, or international defense trade must ensure compliance with ITAR requirements, including controls over access to ITAR-regulated information, products, and services. Non-compliance may result in significant civil penalties, criminal penalties, export restrictions, and other enforcement actions.

Related in Cybersecurity

CybersecurityFramework

ASD Essentials for Cloud

The ASD Essentials for Cloud is an Australian cybersecurity framework that provides a threat-informed, risk-based approach for securing cloud environments, helping organizations protect cloud services, data, identities, applications, and integrations from cyber threats.

Australian Signals Directorate (ASD)

View details
CybersecurityFramework

ASD Essentials for Operational Technology (OT)

The ASD Essentials for Operational Technology (OT) is an Australian cybersecurity framework that provides risk-based guidance for securing industrial control systems, cyber-physical systems, and other operational technology environments through prioritized security principles, actions, and domains tailored to OT-specific risks and operational requirements.

Australian Signals Directorate (ASD) • Australia

View details
CybersecurityFramework

ASD Essentials for Enterprise IT

The ASD Essentials for Cloud is a cybersecurity framework developed by the Australian Signals Directorate (ASD) to help organizations protect cloud environments from sophisticated cyber threats. It provides a structured approach based on Principles, Actions, and Domains for securing SaaS and PaaS environments, with a focus on identity, data, configurations, applications, integrations, and provider assurance.

Australian Signals Directorate (ASD) • Australia

View details
CybersecurityRegulation

RFFR ISM PSP-A — RFFR ISM Provider Security Plan Annex Template

The RFFR Provider Security Plan Annex (PSP-A) Template is a DEWR security assurance template used to document the implementation and status of security controls that protect departmental information and support the secure delivery of services under the Right Fit For Risk (RFFR) framework.

Australian Government • Australia • vSeptember 2026

View details

Ready to manage these frameworks?

6clicks maps regulations to controls, evidence and risks — automatically.

Book your strategy call