Is my company required to register under ITAR?

A frequently asked compliance question among government contracts firms is whether they are required to register under the International Traffic In Arms Regulations (“ITAR”). ITAR are the State Department controls that regulate defense products, technical data and...

ITAR Compliance in Office 365

The world of government data is surrounded by regulation. Whether that’s FedRAMP compliance, DFARS compliance, and the upcoming Cybersecurity Maturity Model Compliance framework(CMMC) — operating as a government entity (or as a contractor who handles government data)...

Who needs to be ITAR registered?

I often encounter misconceptions about the International Traffic in Arms Regulations (ITAR). Among the biggest sources of confusion is registering as a Manufacturer, Exporter or Broker under the ITAR. Let’s clear up the confusion and shed some light on the...

Understanding Baselines and Impact Levels in FedRAMP

The FedRAMP PMO fields a number of questions about impact levels and the security categorization of cloud services. Federal Information Processing Standard (FIPS) 199 provides the standards for categorizing information and information systems, which is the...