ITAR Compliance

Export control that works across borders

ITAR can affect how your organization handles defense articles, technical data, and defense services - even when the work takes place inside the United States. For European and German companies with U.S. operations, the difficult questions often involve who can access technical data, how information moves between subsidiaries and headquarters, and which activities require authorization.

ICTS helps you identify where export controlled items and information enter your operations, assess access and handling risks, and put practical procedures in place. We work with your existing ISO 27001, TISAX®, and CMMC controls where they apply, so your teams can manage these obligations within their day-to-day work.

Where ITAR questions arise

A U.S. subsidiary may receive controlled drawings from a defense customer, manufacture a controlled component, or share engineering systems with its European parent. Visiting engineers, expatriate employees, and overseas IT administrators may also have access to information that requires special handling. These situations call for a clear view of the items, data, people, systems, and authorizations involved.

Foreign ownership does not remove a U.S. company’s export control obligations. Likewise, an established information security program does not, by itself, determine whether technical data may be shared with a particular person or location.

How ICTS can help

ITAR applicability and readiness

We review your operations to identify where potentially controlled items and technical data are handled, how they move, and who can access them. The result is a prioritized plan for resolving gaps and questions.

Access controls and Technology Control Plans

We help design workable procedures for employees, visitors, headquarters teams, and IT administrators. This can include access rules, system separation, technical data handling, and a Technology Control Plan.

Program integration

We align relevant ITAR handling controls with your existing ISO 27001, TISAX®, and CMMC work. Shared controls can support a consistent process, while export-specific requirements receive their own attention.

Training and internal review

We help management, engineering, and operational teams understand the rules that affect their work, in English or German. We can also review whether documented procedures are working in practice.

ICTS supports compliance program design and information security implementation. We coordinate with qualified export control counsel when a project requires legal classification, licensing, or disclosure decisions.

Talk with us

Whether you are opening a U.S. operation, supplying a defense customer, or reviewing access between U.S. and European teams, we can help you identify the first questions to resolve.

Contact ICTS to discuss your ITAR readiness. Wir beraten Sie auch gerne auf Deutsch.