Topics

ITAR, EAR, and DOE's 10 CFR Part 810: jurisdiction, classification, licensing, and deemed exports.

Controlled Unclassified Information, NIST SP 800-171, and getting through a CMMC Level 2 assessment.

Facility clearances, NISPOM, and the day-to-day work of an FSO.

Building a security program: frameworks like NIST CSF, risk, and the practical controls behind them.

U.S. state privacy laws, GDPR, and running a privacy program inside a technical firm.