Skip to content

ITAR

What is ITAR?

International Traffic in Arms Regulations controlling the export and temporary import of defense articles and services on the US Munitions List.

Compliance and Regulatory

Terms that appear alongside itar

Each of these is named in at least one of the same controls as itar. The number is how many controls name both.

Frameworks that govern itar

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →NIST SP 800-53 Rev 5View framework →

What the standards actually require on itar

Requirements naming itar across 4 standards, quoted from the control text.

US ITAR and EAR - Export Control and Data Security10 controls

Per ITAR (22 CFR Parts 120-130) + EAR (15 CFR Parts 730-774): Jurisdiction and Classification of Items + USML vs CCL + Export Control Classification Number (ECCN).

USEXPORT-1 · Jurisdiction and Classification (ITAR USML / EAR CCL) →
ITAR - International Traffic in Arms Regulations8 controls

Part 122 of ITAR (22 CFR 122.1-122.5) requires mandatory registration with the Directorate of Defense Trade Controls (DDTC) for entities engaged in (a) manufacturing of defense articles; (b) exporting or temporarily importing defense articles;

ITAR-Part122-Registration-Manufacturers-Exporters-Brokers-DDTC-Annual-Mandatory-Ineligibility · ITAR Part 122 Registration - Mandatory DDTC Registration for Manufacturers + Exporters + Brokers + Annual Renewal + DS-2032 Statement of Registration + Registration Fee Tiers + Ineligibility Criteria →
Defence Industry Security Program (DISP)1 control

The entity must flow down relevant DISP and security requirements to subcontractors handling classified information, and comply with export-control and controlled-technology obligations (Defence Trade Controls / ITAR where applicable).

DISP-ICT-SUPPLYCHAIN · Supply chain, subcontractor flowdown and export controls →
ITU Radio Regulations and Space Security Standards1 control

ITU coordinates radiocommunication + telecommunication standardization + and development across its three sectors with significant cross-sector cybersecurity work.

ITU-Cybersecurity-Space-Systems-Coord-ITU-T-X-Series-X.805-X.1500-ITU-D-WSIS-CIRT-Outer-Space-Treaty · ITU Cybersecurity of Space Systems + ITU-T X-Series (X.805 + X.1500 + X.1205) + Sector Coordination + ITU-D Development + WSIS + GCI Global Cybersecurity Index + CIRT National Computer Incident Response Teams + Multi-Sector ITU-R/T/D →

Questions people ask about itar

What is ITAR?
International Traffic in Arms Regulations controlling the export and temporary import of defense articles and services on the US Munitions List.
Why is ITAR important for compliance?
ITAR is a key concept in Compliance and Regulatory. Understanding itar helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address ITAR?
ITAR appears in the requirement text of US ITAR and EAR - Export Control and Data Security, ITAR - International Traffic in Arms Regulations, Defence Industry Security Program (DISP), ITU Radio Regulations and Space Security Standards. Across these standards we have identified 20 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about ITAR?
Explore our compliance framework pages to see how itar applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how ITAR applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.