Welcome back to part 3 of our blog posts about ‘what is’ a particular area of regulatory concern and ‘how can’ RegDOX provide a solution. In this posting, we will stay with the area of export restrictions on data and focus on EAR compliance.
Did you miss a previous post? No worries! You can find all our blog posts here!
We will start by defining what EAR is and then providing tips for getting started with compliance. Finally, we will show how RegDOX can be helpful for your organization to become compliant.
What is EAR compliance?
“EAR” stands for Export Administration Regulations. ITAR and EAR are two United States export control laws that affect sales, distribution, and manufacturing of technology products.
What is the difference between ITAR and EAR?
We mentioned in our previous post that generally the ITAR regulates certain defense-related items. The ITAR’s primary objective is to keep these sensitive materials and technologies out of the hands of unlicensed foreign nationals. By contrast, the focus of the EAR is on “dual-use” items that can be used for both military and commercial purposes.
Another difference between the two regulatory schemes is that the EAR is documented by the Commerce Control List (CCL). On the other hand, the ITAR is documented by the the United States Munitions List (USML).
Finally, the two regulatory regimes differ in where they are drafted and enforced. The EAR regulations are enforced by the US Department of Commerce’s the Bureau of Industry and Security (BIS). The ITAR is promulgated and enforced by the US State Department’s Directorate of Defense Controls.
Steps for determining the scope of the EAR.
Who is covered under the EAR?
In order to help better identify which items are covered under your organization’s technology or data, the EAR has organized the CCL into ten different categories and various groups within each category.
I. Categories. The CCL is divided into ten categories as follows:
- Nuclear Materials, Facilities, and Equipment [and Miscellaneous Items]
- Specials Materials and Related Equipment, Chemicals, “Microorganisms,” and “Toxins”
- Materials Processing
- Electronics
- Computers
- Telecommunications and “Information Security”
- Sensors and Lasers
- Navigation and Avionics
- Marine
- Aerospace and Propulsion
II. Groups. Within each category, items are arranged by group. Each category contains the same five groups. Each group is identified by the letters A through E, as follows:
A. “End Items,” “Equipment,” “Accessories,” “Attachments, “Assemblies Parts,” and “Components,” and “Systems”
B. Test, Inspection and “Production Equipment”
C. “Materials”
D. “Software”
E. “Technology”
How to be EAR compliant, and how can RegDOX help you?
Any organization subject to EAR compliance is required to establish, maintain, and document the state of that compliance. Essentially, that organization needs a robust system to store, manipulate or transmit CCL-controlled items and demonstrate both on a real-time basis, as was as historically, compliance with the EAR. RegDOX is unique it is ability to meet this challenge.
RegDOX’s EAR-compliant solution enables users to securely manage and collaborate on regulated documents. RegDOX securely protects your confidential EAR-sensitive information through a highly secure, FedRAMP-approved ECM (Export Controlled Material) Platform. The RegDOX solution offers the following benefits.
☑ Tamper-proof audit trail
☑ Full encryption in-transit and at-rest
☑ Ongoing compliance with the legal requirements of the EAR
☑ Two-factor authentication
☑ Provider shielding
☑ Document storage management and collaboration
☑ U.S. based hosting
☑ Intuitive interface
☑ Systematic monitoring
Summary:
Cyberthreats are constantly emerging and evolving today. It is vital to protect your organization from a costly data breach. RegDOX protects your confidential documents with one of the most advanced encryption and security technologies available. This high standard of security ensures that all your authorized users’ activities in the web-based workspace stay confidential and are reliably protected from external access.
Learn more about the RegDOX EAR solution
See the enclave in action.
The Compliant Computing Enclave keeps CUI inside one boundary, with your endpoints out of scope and the evidence trail already built.
Talk to an Expert →