[Instructor] Many countries have requirements
about the types of information that may cross
international borders.
I discussed some of these in the privacy compliance video
earlier in this course,
but there are also reasons that Governments
want to restrict the flow of information
other than protecting private information.
In the United States,
the Government uses a category of regulations
known as export controls
to restrict the flow of goods and information
considered sensitive for military and scientific purposes.
These rules come in many different forms,
but let's take a look at three of the most common forms
of export controls in the United States.
The International Traffic in Arms Regulations,
or ITAR applies to anything that the Government
considers a defense article.
This includes many of the things you'd expect
to be classified as munitions.
Firearms, tanks, submarines,
and even nuclear weapons are considered munitions
under the ITAR regulations,
but ITAR also includes the technical data
associated with some military programs.
Government contractors, researchers,
and others who come into contact with this information
must protect it from unauthorized export.
Second, the Export Administration Regulations,
or EAR apply to technology and information
that's considered dual use.
This means that it's technology or information
that has both military and commercial applications.
EAR covers many broad categories of technology,
including sensitive electronics and computers,
lasers, navigation technology,
marine systems, and many other areas of technology.
And third, the Office of Foreign Assets Control
or OFAC restricts economic transactions with countries
that are considered sponsors of terrorism, narcotics,
or other activities considered contrary to the
foreign policy of the United States.
Information security professionals
must be aware of the various import and export controls
that apply to their industry,
and ensure that their activities remain compliant
with these regulations.