Back to Frameworks

ITAR - International Traffic in Arms Regulations

Self-Assess
United States (Department of State, Directorate of Defense Trade Controls); extraterritorial reach to reexports, retransfers and brokering
v22 CFR Parts 120-130 as amended to 23 September 2026 (eCFR, fetched 2026-09-25); continuously amended by Federal Register rules
10 domains
99 controls

The U.S. International Traffic in Arms Regulations (22 CFR Parts 120-130), administered by the State Department's Directorate of Defense Trade Controls: jurisdiction and classification on the U.S. Munitions List, registration of manufacturers, exporters and brokers, licences and exemptions for defense articles, agreements for defense services, technical data and classified exports, country policies of denial and the duty to report dealings with proscribed countries, the Canadian, trilateral and treaty exemptions, dual and third-country national employees, violations, debarment, civil penalties and voluntary disclosure, brokering, and reporting of political contributions, fees and commissions. Built section by section from the eCFR text current to 23 September 2026, with rules taking effect in October and November 2026 recorded.

Verified

ITAR - International Traffic in Arms Regulations is a compliance framework from United States (Department of State, Directorate of Defense Trade Controls); extraterritorial reach to reexports, retransfers and brokering with 10 domains and 99 controls that map to 100 other frameworks. The largest domains are Part 123: Licences for defense articles – ITAR - International Traffic in Arms Regulations (23 controls), Part 120: Purpose, definitions and general policies – ITAR - International Traffic in Arms Regulations (18 controls), Part 124: Agreements and defense services – ITAR - International Traffic in Arms Regulations (12 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (10)

Part 120: Purpose, definitions and general policies – ITAR - International Traffic in Arms Regulations

18 controls
Controls in the Part 120: Purpose, definitions and general policies – ITAR - International Traffic in Arms Regulations domain of ITAR - International Traffic in Arms Regulations: 18 controls
CodeTitle
itar-international-traffic-in-arms-regulations::120.11Classify articles against the USML in the prescribed order of review
itar-international-traffic-in-arms-regulations::120.12Use commodity jurisdiction determinations where jurisdiction is in doubt and keep the outcome
itar-international-traffic-in-arms-regulations::120.13Recognise that one occasion of manufacturing, exporting or brokering triggers ITAR registration
itar-international-traffic-in-arms-regulations::120.14Obtain approval before exporting, furnishing defense services or brokering, unless an exemption applies
itar-international-traffic-in-arms-regulations::120.15Meet the conditions and recordkeeping duties attached to every exemption
itar-international-traffic-in-arms-regulations::120.16Confirm eligibility of the applicant and all parties before seeking or using any authorisation
itar-international-traffic-in-arms-regulations::120.17Support Blue Lantern end-use monitoring
itar-international-traffic-in-arms-regulations::120.18Manage the consequences of denial, revocation, suspension or amendment of authorisations
itar-international-traffic-in-arms-regulations::120.22Use advisory opinions and interpretations as guidance, not as authorisations
itar-international-traffic-in-arms-regulations::120.3Treat an article as a defense article on its characteristics, not its intended use
itar-international-traffic-in-arms-regulations::120.32Identify defense services wherever they are furnished
itar-international-traffic-in-arms-regulations::120.41Apply the 'specially designed' test and document releases with contemporaneous evidence
itar-international-traffic-in-arms-regulations::120.5Respect other agencies' jurisdiction when exporting EAR, nuclear and imported items with defense articles
itar-international-traffic-in-arms-regulations::120.50Recognise every event the ITAR treats as an export, including deemed exports
itar-international-traffic-in-arms-regulations::120.54Rely on the activities that are not exports only within their conditions
itar-international-traffic-in-arms-regulations::120.56Control releases of technical data by inspection, exchange and access information
itar-international-traffic-in-arms-regulations::120.62-120.66Determine U.S. person, foreign person, ownership, control and affiliate status
itar-international-traffic-in-arms-regulations::120.67Appoint empowered officials with real independence

Part 122: Registration of manufacturers and exporters – ITAR - International Traffic in Arms Regulations

7 controls
Controls in the Part 122: Registration of manufacturers and exporters – ITAR - International Traffic in Arms Regulations domain of ITAR - International Traffic in Arms Regulations: 7 controls
CodeTitle
itar-international-traffic-in-arms-regulations::122.1Register before manufacturing, exporting, temporarily importing or furnishing defense services
itar-international-traffic-in-arms-regulations::122.2Submit a complete and certified Statement of Registration and renew it on time
itar-international-traffic-in-arms-regulations::122.3Pay the correct registration fee tier
itar-international-traffic-in-arms-regulations::122.4(a)Notify DDTC within five days of indictments, ineligibility and registration changes
itar-international-traffic-in-arms-regulations::122.4(b)Give 60 days' advance notice of any sale or transfer of ownership or control to a foreign person
itar-international-traffic-in-arms-regulations::122.4(c)-(d)Transfer registrations, licences and agreements correctly after a merger or acquisition
itar-international-traffic-in-arms-regulations::122.5Keep registrant records for five years in a reliable, producible form

Part 123: Licences for defense articles – ITAR - International Traffic in Arms Regulations

23 controls
Controls in the Part 123: Licences for defense articles – ITAR - International Traffic in Arms Regulations domain of ITAR - International Traffic in Arms Regulations: 23 controls
CodeTitle
itar-international-traffic-in-arms-regulations::123.1Apply for the right licence with complete information and supporting documents
itar-international-traffic-in-arms-regulations::123.10Obtain nontransfer and use certificates where required
itar-international-traffic-in-arms-regulations::123.14Meet Import Certificate and Delivery Verification requirements when imposed
itar-international-traffic-in-arms-regulations::123.15Allow for congressional certification of high-value and sensitive exports
itar-international-traffic-in-arms-regulations::123.16(a)-(b)(1)Use the general hardware exemptions only within their limits, including for agreement support
itar-international-traffic-in-arms-regulations::123.16(b)(2)-(9)Apply the low-value spares, packing, mock-up, trade show and affiliate tooling exemptions correctly
itar-international-traffic-in-arms-regulations::123.17Use the personal protective gear exemption only for personal use and report losses
itar-international-traffic-in-arms-regulations::123.21Track licence validity and handle unused, expired and revoked licences
itar-international-traffic-in-arms-regulations::123.22(a)-(b)(2)File export information for every hardware export before departure
itar-international-traffic-in-arms-regulations::123.22(b)(3)Report technical data and defense service exports directly to DDTC
itar-international-traffic-in-arms-regulations::123.22(c)Retain or return licences as required
itar-international-traffic-in-arms-regulations::123.23Stay within the licence value tolerance
itar-international-traffic-in-arms-regulations::123.24Handle U.S. Postal Service exports of hardware and technical data correctly
itar-international-traffic-in-arms-regulations::123.25Seek licence amendments only for permitted changes
itar-international-traffic-in-arms-regulations::123.27Meet the conditions of the special regime for commercial communications satellite components
itar-international-traffic-in-arms-regulations::123.28Use a licence only for the items, end uses and parties it describes
itar-international-traffic-in-arms-regulations::123.3-123.4License or correctly claim exemptions for temporary imports of defense articles
itar-international-traffic-in-arms-regulations::123.5Control temporary exports and return articles on time
itar-international-traffic-in-arms-regulations::123.6-123.7License exports from foreign trade zones and to foreign warehouses
itar-international-traffic-in-arms-regulations::123.8 and 123.11License transfers of USML aircraft, vessels and satellites and their foreign voyages
itar-international-traffic-in-arms-regulations::123.9(a)Determine the true end user, end use and destination before applying or claiming an exemption
itar-international-traffic-in-arms-regulations::123.9(b)Tell end users and consignees that the articles are U.S.-controlled
itar-international-traffic-in-arms-regulations::123.9(c)-(e)Request approval for reexports and retransfers with full documentation, using the allied component exemption correctly

Part 124: Agreements and defense services – ITAR - International Traffic in Arms Regulations

12 controls
Controls in the Part 124: Agreements and defense services – ITAR - International Traffic in Arms Regulations domain of ITAR - International Traffic in Arms Regulations: 12 controls
CodeTitle
itar-international-traffic-in-arms-regulations::124.1Obtain agreement approval before furnishing defense services and before amendments take effect
itar-international-traffic-in-arms-regulations::124.10Submit nontransfer and use assurances with agreements for SME and classified articles
itar-international-traffic-in-arms-regulations::124.11Allow for congressional certification of agreements for SME manufacture abroad
itar-international-traffic-in-arms-regulations::124.12Include the required content and undertakings in agreement transmittal letters
itar-international-traffic-in-arms-regulations::124.13Control technical data exported for off-shore procurement
itar-international-traffic-in-arms-regulations::124.14Obtain approval and include required terms for warehousing and distribution agreements
itar-international-traffic-in-arms-regulations::124.15Apply special controls to satellite and launch-related exports and failure investigations
itar-international-traffic-in-arms-regulations::124.2Use the training and allied maintenance exemptions within their limits
itar-international-traffic-in-arms-regulations::124.3Export technical data under an agreement only within its scope
itar-international-traffic-in-arms-regulations::124.4-124.6File concluded agreements and report non-conclusion and termination on time
itar-international-traffic-in-arms-regulations::124.7-124.8Draft agreements with the required information and mandatory clauses
itar-international-traffic-in-arms-regulations::124.9Add the manufacturing licence and SME clauses, including the annual sales report

Part 125: Technical data and classified articles – ITAR - International Traffic in Arms Regulations

10 controls
Controls in the Part 125: Technical data and classified articles – ITAR - International Traffic in Arms Regulations domain of ITAR - International Traffic in Arms Regulations: 10 controls
CodeTitle
itar-international-traffic-in-arms-regulations::125.1-125.2License technical data exports and disclosures, and keep them within their authorised use
itar-international-traffic-in-arms-regulations::125.3 and 125.7Export classified technical data and articles only with DSP-85 approval and NISPOM compliance
itar-international-traffic-in-arms-regulations::125.4(a)-(b)(3)Apply the government-directed and agreement technical data exemptions within their limits
itar-international-traffic-in-arms-regulations::125.4(b)(10)Apply the university employee exemption only with its three conditions
itar-international-traffic-in-arms-regulations::125.4(b)(11)-(13)Use the government arrangement, Part 126 and public release exemptions correctly
itar-international-traffic-in-arms-regulations::125.4(b)(4)-(8)Use the copies, maintenance, small arms, returns and follow-on classified data exemptions correctly
itar-international-traffic-in-arms-regulations::125.4(b)(9)Protect technical data carried or accessed by travelling and temporarily assigned employees
itar-international-traffic-in-arms-regulations::125.4(c)Respond to DoD requests for quotes within the bid exemption limits
itar-international-traffic-in-arms-regulations::125.5Limit disclosures during plant visits to what was approved
itar-international-traffic-in-arms-regulations::125.9Route classified export authorisations through the security service and return them on completion

Part 126: General policies, country restrictions and exemptions – ITAR - International Traffic in Arms Regulations

12 controls
Controls in the Part 126: General policies, country restrictions and exemptions – ITAR - International Traffic in Arms Regulations domain of ITAR - International Traffic in Arms Regulations: 12 controls
CodeTitle
itar-international-traffic-in-arms-regulations::126.1(a)-(d)Apply the policy of denial and exemption bar for proscribed countries
itar-international-traffic-in-arms-regulations::126.1(e)Report proposed or actual sales and proposals involving proscribed countries immediately
itar-international-traffic-in-arms-regulations::126.13Certify eligibility and list all parties on every application
itar-international-traffic-in-arms-regulations::126.14Meet the recordkeeping and reporting conditions of comprehensive authorisations
itar-international-traffic-in-arms-regulations::126.16 and 126.17Use the Australia and UK treaty exemptions only within the Approved Community with marking, records and notifications
itar-international-traffic-in-arms-regulations::126.18(a)-(c)Screen dual and third-country national employees of foreign recipients
itar-international-traffic-in-arms-regulations::126.18(d)-(e)Apply the allied-nationality and treaty-partner employee exemptions only to eligible individuals
itar-international-traffic-in-arms-regulations::126.4Use the U.S. Government transfer exemptions only within their scope
itar-international-traffic-in-arms-regulations::126.5Use the Canadian exemptions only for eligible Canadian end users and approved retransfers
itar-international-traffic-in-arms-regulations::126.6Meet the conditions for FMS and foreign military aircraft and vessel exemptions
itar-international-traffic-in-arms-regulations::126.7Use the Australia, UK and U.S. trilateral exemption only among eligible parties and items
itar-international-traffic-in-arms-regulations::126.9(u)Keep large uncrewed underwater vehicle activities within the UUV exemption

Part 127: Violations and penalties – ITAR - International Traffic in Arms Regulations

8 controls
Controls in the Part 127: Violations and penalties – ITAR - International Traffic in Arms Regulations domain of ITAR - International Traffic in Arms Regulations: 8 controls
CodeTitle
itar-international-traffic-in-arms-regulations::127.1(a)-(b)Prevent unauthorised exports, reexports, imports, brokering and unregistered business
itar-international-traffic-in-arms-regulations::127.1(c)Hold the organisation accountable for employees, agents and others entrusted with defense articles
itar-international-traffic-in-arms-regulations::127.1(d)-(e)Never deal with or for ineligible persons, or cause or aid a violation
itar-international-traffic-in-arms-regulations::127.11Address the presumption of denial for past convictions and ineligibility
itar-international-traffic-in-arms-regulations::127.12Make voluntary disclosures promptly, completely and with senior management authority
itar-international-traffic-in-arms-regulations::127.2Keep every export control document complete and truthful
itar-international-traffic-in-arms-regulations::127.3 and 127.10Understand criminal and civil penalty exposure and licensing consequences
itar-international-traffic-in-arms-regulations::127.7 and 127.9Check for debarred persons and parties related to them

Part 128: Administrative procedures – ITAR - International Traffic in Arms Regulations

1 controls
Controls in the Part 128: Administrative procedures – ITAR - International Traffic in Arms Regulations domain of ITAR - International Traffic in Arms Regulations: 1 controls
CodeTitle
itar-international-traffic-in-arms-regulations::128.5 and 128.13Respond to charging letters and appeal within the deadlines

Part 129: Brokering – ITAR - International Traffic in Arms Regulations

5 controls
Controls in the Part 129: Brokering – ITAR - International Traffic in Arms Regulations domain of ITAR - International Traffic in Arms Regulations: 5 controls
CodeTitle
itar-international-traffic-in-arms-regulations::129.10-129.11File annual brokering reports and keep brokering records
itar-international-traffic-in-arms-regulations::129.2-129.3Determine whether activities are brokering and register brokers
itar-international-traffic-in-arms-regulations::129.4-129.6Obtain brokering approval for listed articles with a complete, certified request
itar-international-traffic-in-arms-regulations::129.7Never broker for proscribed countries or listed persons without approval, and report such activity
itar-international-traffic-in-arms-regulations::129.8Maintain broker registration and notify changes and ownership transfers

Part 130: Political contributions, fees and commissions – ITAR - International Traffic in Arms Regulations

3 controls
Controls in the Part 130: Political contributions, fees and commissions – ITAR - International Traffic in Arms Regulations domain of ITAR - International Traffic in Arms Regulations: 3 controls
CodeTitle
itar-international-traffic-in-arms-regulations::130.12-130.13Obtain payment disclosures from vendors and from recipients of fees
itar-international-traffic-in-arms-regulations::130.14Keep Part 130 records for at least five years
itar-international-traffic-in-arms-regulations::130.9-130.11Report political contributions, fees and commissions above the thresholds

Your Compliance Coverage

If you comply with ITAR - International Traffic in Arms Regulations, you already cover:

EAR - Export Administration Regulations

7%

8 controls mapped

Compare →

ISO 15189:2022 - Medical Laboratories Requirements for Quality and Competence

4%

4 controls mapped

Compare →

South Korea ISMS-P

4%

4 controls mapped

Compare →

+ 97 more: DAMA-DMBOK2 - Data Management Body of Knowledge (2nd Edition) (4%), Pakistan Personal Data Protection Bill 2023 (3%)

See all 100 mapped frameworks ↓

Maps to 100 other frameworks

107 total controls
EAR - Export Administration Regulations
8 source controls mapped|11 target controls covered
7%
ISO 15189:2022 - Medical Laboratories Requirements for Quality and Competence
4 source controls mapped|5 target controls covered
4%
South Korea ISMS-P
4 source controls mapped|3 target controls covered
4%
DAMA-DMBOK2 - Data Management Body of Knowledge (2nd Edition)
4 source controls mapped|3 target controls covered
4%
Pakistan Personal Data Protection Bill 2023
3 source controls mapped|2 target controls covered
3%
OWASP Top 10:2025
3 source controls mapped|2 target controls covered
3%
OWASP DevSecOps Maturity Model (DSOMM)
3 source controls mapped|4 target controls covered
3%
OWASP ASVS
3 source controls mapped|2 target controls covered
3%
MITRE D3FEND
3 source controls mapped|2 target controls covered
3%
US Automated Commercial Environment (ACE) - CBP Trade Data Requirements
3 source controls mapped|3 target controls covered
3%
ISO/SAE 21434
3 source controls mapped|2 target controls covered
3%
ISO/IEC 27011:2024
3 source controls mapped|3 target controls covered
3%
ISO/IEC 27400:2022
3 source controls mapped|2 target controls covered
3%
CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0
3 source controls mapped|2 target controls covered
3%
AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)
3 source controls mapped|3 target controls covered
3%
ISO/IEC 27043:2015
3 source controls mapped|2 target controls covered
3%
IEC 62351 - Power Systems Communication Security
3 source controls mapped|2 target controls covered
3%
French Sapin II Law (Law No. 2016-1691)
3 source controls mapped|2 target controls covered
3%
ISO/IEC 29147:2018
3 source controls mapped|3 target controls covered
3%
IAIS Insurance Core Principles (ICPs)
3 source controls mapped|2 target controls covered
3%
Singapore Government Instruction Manual on ICT&SS Management (IM8)
3 source controls mapped|2 target controls covered
3%
ISO 19650 - Organisation and Digitisation of Information about Buildings and Civil Engineering Works (BIM)
3 source controls mapped|4 target controls covered
3%
OWASP API Security Top 10 - 2023
2 source controls mapped|2 target controls covered
2%
MiFID II / MiFIR
2 source controls mapped|1 target controls covered
2%
ISO 27799:2025
2 source controls mapped|1 target controls covered
2%
ASD Strategies to Mitigate Cyber Security Incidents
2 source controls mapped|2 target controls covered
2%
BSI IT-Grundschutz
2 source controls mapped|1 target controls covered
2%
FFIEC Cybersecurity Assessment Tool (CAT)
2 source controls mapped|1 target controls covered
2%
UAE Virtual Asset Regulatory Authority (VARA) Regulations
2 source controls mapped|1 target controls covered
2%
ICH Q10 - Pharmaceutical Quality System
2 source controls mapped|2 target controls covered
2%
SWIFT CSCF
2 source controls mapped|2 target controls covered
2%
NIST Special Publication 800-34 Revision 1, Contingency Planning Guide for Federal Information Systems
2 source controls mapped|3 target controls covered
2%
ISO 20400:2017 - Sustainable Procurement
2 source controls mapped|3 target controls covered
2%
ISO 41001:2018 - Facility Management Systems
2 source controls mapped|3 target controls covered
2%
ISO/IEC 27003:2017
2 source controls mapped|3 target controls covered
2%
ISO/IEC 27014:2020
2 source controls mapped|3 target controls covered
2%
ISO 28001:2007 Supply Chain Security Management
2 source controls mapped|4 target controls covered
2%
ISO 56002
2 source controls mapped|3 target controls covered
2%
ISO/IEC 17025:2017 - General Requirements for Testing and Calibration
2 source controls mapped|4 target controls covered
2%
IEC 62304:2015 Medical Device Software Lifecycle Processes
2 source controls mapped|5 target controls covered
2%
ISO 14064 - Greenhouse Gas Accounting and Verification (Parts 1-3)
2 source controls mapped|2 target controls covered
2%
W3C Verifiable Credentials (VC) Data Model 2.0
1 source controls mapped|1 target controls covered
1%
Vietnam Law on Cybersecurity (No. 116/2025/QH15)
1 source controls mapped|1 target controls covered
1%
USMCA Chapter 19 - Digital Trade (United States-Mexico-Canada Agreement)
1 source controls mapped|1 target controls covered
1%
TEFCA - Trusted Exchange Framework and Common Agreement
1 source controls mapped|1 target controls covered
1%
Regulation on the European Health Data Space (EHDS)
1 source controls mapped|1 target controls covered
1%
Protective Security Policy Framework (PSPF) Release 2026
1 source controls mapped|1 target controls covered
1%
PCAOB AS 2201 - Audit of Internal Control Over Financial Reporting (ICFR)
1 source controls mapped|2 target controls covered
1%
OCC Heightened Standards (12 CFR Part 30, Appendix D)
1 source controls mapped|1 target controls covered
1%
NIST Post-Quantum Cryptography Standards (FIPS 203, 204, 205)
1 source controls mapped|1 target controls covered
1%
Florida Digital Bill of Rights (FDBR)
1 source controls mapped|2 target controls covered
1%
ISO/IEC 27007:2020
1 source controls mapped|1 target controls covered
1%
FedRAMP High
1 source controls mapped|1 target controls covered
1%
FedRAMP Moderate
1 source controls mapped|1 target controls covered
1%
ISO/IEC 27031:2011
1 source controls mapped|1 target controls covered
1%
ISO 22320:2018
1 source controls mapped|3 target controls covered
1%
ISO/IEC 23837:2023
1 source controls mapped|1 target controls covered
1%
US Foreign Corrupt Practices Act (FCPA)
1 source controls mapped|1 target controls covered
1%
ISO/IEC 29100:2024
1 source controls mapped|3 target controls covered
1%
Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023)
1 source controls mapped|1 target controls covered
1%
Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018)
1 source controls mapped|2 target controls covered
1%
ISO/IEC 30111:2019
1 source controls mapped|2 target controls covered
1%
ISO/IEC 23894:2023
1 source controls mapped|3 target controls covered
1%
ISO/IEC 27004:2016
1 source controls mapped|3 target controls covered
1%
ISO/IEC 25012:2008 - Data Quality Model
1 source controls mapped|2 target controls covered
1%
Illinois Biometric Information Privacy Act (BIPA)
1 source controls mapped|1 target controls covered
1%
Barbados Data Protection Act 2019
1 source controls mapped|1 target controls covered
1%
IEC 60601-1 - Medical Electrical Equipment Safety
1 source controls mapped|2 target controls covered
1%
DFARS 252.204-7012 - Safeguarding Covered Defense Information
1 source controls mapped|1 target controls covered
1%
ISO/IEC 27557:2022 - Organisational Privacy Risk Management
1 source controls mapped|3 target controls covered
1%
ISO 26262:2018 - Functional Safety for Road Vehicles
1 source controls mapped|1 target controls covered
1%
PCI DSS 4.0
1 source controls mapped|1 target controls covered
1%
ISO/IEC 27050-1:2019
1 source controls mapped|1 target controls covered
1%
Albania Law No. 124/2024 on Personal Data Protection
1 source controls mapped|2 target controls covered
1%
Azerbaijan Law on Personal Data (2010)
1 source controls mapped|1 target controls covered
1%
Science Based Targets Initiative (SBTi) - Net-Zero Standard
1 source controls mapped|2 target controls covered
1%
Annex 11 to EU GMP - Computerised Systems
1 source controls mapped|3 target controls covered
1%
FedRAMP Rev 5
1 source controls mapped|2 target controls covered
1%
ISO/IEC 29115:2013 - Entity Authentication Assurance Framework
1 source controls mapped|1 target controls covered
1%
COBIT 2019
1 source controls mapped|1 target controls covered
1%
Connecticut Data Privacy Act (CTDPA)
1 source controls mapped|1 target controls covered
1%
ASIS SPC.1-2009 - Organizational Resilience Standard
1 source controls mapped|1 target controls covered
1%
FFIEC IT Examination Handbook
1 source controls mapped|1 target controls covered
1%
ISO 8000 - Data Quality
1 source controls mapped|2 target controls covered
1%
IATA Operational Safety Audit (IOSA) Standards Manual
1 source controls mapped|1 target controls covered
1%
IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1)
1 source controls mapped|3 target controls covered
1%
FTC GLBA Safeguards Rule (16 CFR Part 314)
1 source controls mapped|1 target controls covered
1%
ISO/IEC 29134:2023
1 source controls mapped|1 target controls covered
1%
Voluntary Principles on Security and Human Rights (VPs)
1 source controls mapped|1 target controls covered
1%
NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production
1 source controls mapped|2 target controls covered
1%
EASA Part-IS - Information Security in Aviation
1 source controls mapped|1 target controls covered
1%
ISO 9001:2015
1 source controls mapped|3 target controls covered
1%
ISO 22000:2018
1 source controls mapped|1 target controls covered
1%
SQF Code Edition 9 - Safe Quality Food
1 source controls mapped|1 target controls covered
1%
ISO 30401
1 source controls mapped|1 target controls covered
1%
ISO 45001:2018
1 source controls mapped|1 target controls covered
1%
ISO 39001:2012 - Road Traffic Safety Management
1 source controls mapped|1 target controls covered
1%
German Supply Chain Due Diligence Act (LkSG)
1 source controls mapped|1 target controls covered
1%
Aged Care Quality Standards 2019 (repealed edition)
1 source controls mapped|1 target controls covered
1%
AS9100D - Aerospace Quality Management System
1 source controls mapped|1 target controls covered
1%
Compare ITAR - International Traffic in Arms Regulations with EAR - Export Administration Regulations

Coverage is not the same as your position

This page shows what ITAR - International Traffic in Arms Regulations overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.

The Compliance Position Diagnostic, $5,000 fixed, ten business days

What is ITAR - International Traffic in Arms Regulations and who does it apply to?

ITAR - International Traffic in Arms Regulations is a compliance framework from United States (Department of State, Directorate of Defense Trade Controls); extraterritorial reach to reexports, retransfers and brokering with 10 domains and 99 controls. The U.S. International Traffic in Arms Regulations (22 CFR Parts 120-130), administered by the State Department's Directorate of Defense Trade Controls: jurisdiction and classification on the U.S. Munitions List, registration of manufacturers, exporters and brokers, licences and exemptions for defense articles, agreements for defense services, technical data and classified exports, country policies of denial and the duty to report dealings with proscribed countries, the Canadian, trilateral and treaty exemptions, dual and third-country national employees, violations, debarment, civil penalties and voluntary disclosure, brokering, and reporting of political contributions, fees and commissions. Built section by section from the eCFR text current to 23 September 2026, with rules taking effect in October and November 2026 recorded. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does ITAR - International Traffic in Arms Regulations actually require?

ITAR - International Traffic in Arms Regulations has 99 controls organised across 10 domains. The largest domains are Part 123: Licences for defense articles – ITAR - International Traffic in Arms Regulations (23 controls), Part 120: Purpose, definitions and general policies – ITAR - International Traffic in Arms Regulations (18 controls), Part 124: Agreements and defense services – ITAR - International Traffic in Arms Regulations (12 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of ITAR - International Traffic in Arms Regulations do I already cover?

ITAR - International Traffic in Arms Regulations maps to 100 other compliance frameworks. The top mapping partners are EAR - Export Administration Regulations (7% coverage), ISO 15189:2022 - Medical Laboratories Requirements for Quality and Competence (4% coverage), South Korea ISMS-P (4% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I implement ITAR - International Traffic in Arms Regulations?

Start your ITAR - International Traffic in Arms Regulations compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ITAR - International Traffic in Arms Regulations requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 99 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,121 frameworks.

Get Started Free →

Free forever, no credit card required