You are currently viewing CISSP certification: Rules, laws and regulations (the Wassenaar Arrangement).

CISSP certification: Rules, laws and regulations (the Wassenaar Arrangement).

Wassenaar Arrangement – Export/Import controls for Conventional Arms and Dual-Use Goods and Technologies.

  • 41 countries are a part of the arrangement.
  • Cryptography is considered “Dual-Use”.
    • Iran, Iraq, China, Russia and others have import restrictions on strong cryptography.
    • If it is too strong it can not be broken, they want to be able to spy on their citizens.
    • Companies have to make “Country Specific” products with different encryption standards.
  • The arrangement is used both to limit what countries want to export and to what some want to import.
  • It is the responsibility of the organization to know what is permitted to import/export from and to a certain country.
  • The Arrangement covers 10 Categories:
    • 1. Special Materials and Related Equipment,
    • 2. Materials Processing,
    • 3. Electronics,
    • 4. Computers,
    • 5.1– Telecommunications,
    • 5.2 “Information Security“,
    • 6. Sensors and “Lasers“,
    • 7. Navigation and Avionics,
    • 8. Marine,
    • 9. Aerospace and Propulsion.

Thor Pedersen

IT, information security, and project management trainer Best selling CISSP. CISM, and PMP instructor on Udemy. CISSP, CISM, C|EH, CDPSE, PMP, 2x CCNP, CompTIA Security+, SCP, 3x CCNA, et. Al.