What we’re talking about
The Washington Post reported that China is targeting U.S. infrastructure with cyberattacks in a continuing effort to increase its ability to disable critical systems. The Cybersecurity and Infrastructure Security Agency (CISA) first announced these attacks in May of 2023. CISA identified the source as Volt Typhoon, a state sponsored hacking group affiliated with China. Chinese
A 2023 report from the U.S. House of Representatives stressed the importance of Bureau of Industry and Security (BIS) export controls to mitigate threats economic and national security threats from China. The bipartisan report stressed that China is using military, economic strength, and it technological base to further an agenda of global domination. It further
Recent reports from the Department of Defense (DoD) outline common cybersecurity weaknesses for Controlled Unclassified Information (CUI) protection by contractors. CUI is information that is possessed or created for the U.S. government that, by law, requires dissemination controls and safeguarding. These required security controls are specified in NIST SP 800-171. When prospective contractors respond to
Freeze-Thaw MIL-STD-810 Method 524 is used to evaluate equipment’s ability to withstand transitions in temperatures through the freeze point in the midst of ambient temperatures and when transitioned from environments of varying temperatures. Effects of exposures to these environmental conditions include: binding or distortion of parts, failure of seals, adhesives, and materials, and fogging of
DHS cybersecurity assessment criteria has been released that will set the bar for businesses seeking contract awards from the agency. The U.S. Department of Homeland Security has released this information to ensure that appropriate levels of “cyber readiness” are in place by its vendors. The DHS plan, released by Chief Information Security Officer Kenneth Bible, is
Performance of export control classifications is a requirement for businesses conducting sales of products and services, even if the sale is conducted within the United States, because the customer may be a non-U.S. person. Classification of products provides a determination that a proposed transaction is allowed under federal regulations, is prohibited, or requires licensing or
Vibro-Acoustic/Temperature MIL-STD-810 Method 523.4 testing is performed to evaluate the effects of acoustic noise, vibration, and temperature on aircraft externally carried stores during flight. Aircraft stores refer to devices that are mounted on aircraft suspension and release equipment such as missiles, rockets, or bombs. This MIL-STD-810 testing method can be used to: Reveal and correct
The National Security Guardrails for CHIPS have been established by the U.S. Department of Commerce in an effort to prevent manufacturing subsidies for semiconductor manufacturing from being diverted into nations considered to be national security threats. The CHIPS and Science Act, originally published in March of 2023 is an incentive to enhance global supply chain
Ballistic Shock MIL-STD-810 Method 522 evaluates equipment designed for armored combat vehicles’ ability to withstand the shock associated with non-perforating large caliber munition impact or blast. This testing can be used to provide a degree of confidence in the the equipment’s ability to function after such a shock, or be used to evaluate shock mitigation
A lawsuit filed against Penn State University by the U.S. Department of Justice illustrates the challenges the government faces in instituting effective protection of data. The suit filed under the False Claims Act (FCA) alleges, that the university misrepresented its adherence to required cybersecurity protocols in the handling of Controlled Unclassified Information (CUI) required.
A Technical Assistance Agreement (TAA) is a requirement under the International Traffic in Arms Regulations (ITAR) when an organization exports a defense service, technical data, or the assembly of a defense article. A defense article is defined as an item or technical data that is enumerated in the United States Munitions List (USML). Other important
Icing/Freezing Rain MIL-STD-810 Method 521 testing is used to verify that equipment can operate when exposed to ice accumulations from rain, drizzle, or sea spray. Freezing rain tests can also be used to evaluate de-icing equipment and techniques. Types of Ice Used in Testing Two types of icing is likely to occur in natural exposures:
Integrating compliance of export law and immigration discrimination requirements under the Immigration and Nationality Act (INA) can be challenging. Employers who export items controlled under the International Traffic in Arms Regulations (ITAR) and Export Administration Regulations (EAR) must prevent the deemed export of technical data to non U.S. Persons while avoiding employment discrimination. Recently, both SpaceX
Controlled Unclassified Information (CUI) document marking requirements apply to a wide range of users who access information related to the U.S. government. CUI is unclassified information that requires safeguards or dissemination controls in accordance with governmental regulations and policies. CUI is categorized into 20 “Organizational Index Groupings” to address sectors such as Defense, Export Control,
Monitoring of operational testing and the recording of all critical performance parameters has become a requirement in MIL-STD-810H. Operational testing has been a part of MIL-STD-810 since Revision C in 1975. It refers to testing the item in a manner that represents service use as documented in the mission profile. Changes in Monitoring Requirements Successive revisions
Managing an Export Compliance Program (ECP) properly ensures its effectiveness. These programs are essential to the sustainability of a business. However, any plan, no matter how well conceived, is only as effective as its execution. Planning the Export Compliance Program Specific requirements for an Export Compliance Program are contingent on the types of products an
