SKIP TO CONTENT
LFC

PROGRAM-BUILD DOMAIN 01 OF 05

Export control

ITAR and EAR exposure screening; registration decision support; jurisdiction and classification support; a technology and access-control plan; foreign-national (deemed export) controls; restricted-party screening; marking, recordkeeping, training, and audits.

THE PHASE THREAD

How export control moves through OORAH.

Screened in ORIENT, designed in ORGANIZE, built in REMEDIATE (technology and access control, screening, marking, recordkeeping), rehearsed in ASSESS (screening records and a renewal calendar), and sustained in HOLD (screening refresh and calendar upkeep).

01 · O
ORIENT
SCREENED

Trigger inventory, foreign-national exposure, and registration posture, with a source trail.

02 · O
ORGANIZE
DESIGNED

Technology and access control plan, restricted-party screening, training, and recordkeeping designed.

03 · R
REMEDIATE
IMPLEMENTED

Screening, marking, recordkeeping, and technology controls implemented.

04 · A
ASSESS
REHEARSED

Screening records rehearsed, with a renewal calendar.

05 · H
HOLD
SUSTAINED

Screening refresh and renewal calendar sustained.

PRIMARY PUBLIC REFERENCES

22 CFR Parts 120–130; 15 CFR Parts 730–774; DFARS 252.225-7048; 50 U.S.C. §§4801–4852.

STANDING BOUNDARY
No legal opinion and no license work. Registration and jurisdiction filings remain client- and counsel-executed. There is no "ITAR certification," and we never market one.
CURRENT CMMC POSTURE
CMMC Phase II (Level 2 and Level 3 third-party assessments) has been suspended since 2026-07-13 pending the Department of War reform review, and contracting officers were directed on 2026-09-03 to remove Phase II requirements from solicitations and contracts. Level 1 and Level 2 self-assessments, baseline NIST SP 800-171 Revision 2 compliance, SPRS, and the DFARS 252.204-7012 safeguarding obligation remain in force. CMMC work is quoted only after the current-posture check.
NEXT →
Document control
Program-build domain

← ALL FIVE PROGRAM-BUILD DOMAINS

SCOPE THE DOMAIN

Does this pursuit need export control?

Domains fire only when the route, the target contract, or an evidence gap justifies the spend. We will tell you if it does not.

A 30-minute introductory call. Bring the target solicitation and what you already know about your gaps.

SCHEDULE A 30-MINUTE CALLGET THE BRIEF

VOSB + SDVOSB CERTIFIED (SBA VETCERT) · UEI VU2HV8458J93 · CAGE 21BA0