Course in Export Regulation of Encryption Software
Online 300 h course in export regulation of encryption software. 6 modules covering Regulation (EU) 2021/821, category 5, part 2 (information security), Export Administration Regulations (15 CFR 730-774) and SAP GTS (Global Trade Services). Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Understand the reasons for state control over cryptography.
Classify encryption products under category 5, part 2, of Regulation (EU) 2021/821.
Apply the Export Administration Regulations and the ENC licence exception.
Compare the control regimes of the EU, the United States and other countries.
Manage licence applications and general authorisations.
Design an internal export compliance programme.
Develop a compliance project for an encryption software company.
Who it's for
- Export control manager looking to specialise in Export Regulation of Encryption Software.
- Product classification analyst looking to specialise in Export Regulation of Encryption Software.
- Foreign trade consultant in technology looking to specialise in Export Regulation of Encryption Software.
- Legal adviser in technology regulation looking to specialise in Export Regulation of Encryption Software.
- Compliance manager in software companies looking to specialise in Export Regulation of Encryption Software.
- Export licence manager looking to specialise in Export Regulation of Encryption Software.
- Engineering or science graduates looking to enter the software industry.
What you'll work with
- Regulation (EU) 2021/821, category 5, part 2 (information security)
- Export Administration Regulations (15 CFR 730-774)
- ENC licence exception (15 CFR 740.17)
- Wassenaar Arrangement
- Royal Decree 679/2014 (control of foreign trade in defence and dual-use material)
- Law 53/2007 (control of foreign trade in defence and dual-use material)
6 modules · 300 h
1.1History of the crypto wars1.2Symmetric and asymmetric cryptography1.3Key length and strength1.4End-to-end encryption1.5Cryptography as a dual-use good1.6Backdoor debate1.7Wassenaar Arrangement and its evolution1.8Post-quantum cryptography1.9Stakeholders: industry, states and civil society1.10Workshop: technical classification of a cryptographic product
2.1Regulation (EU) 2021/821 on dual-use items2.2Category 5 part 2 of Annex I2.3Cryptography note and mass-market exemption2.4General export authorisation EU0012.5Intra-EU transfers2.6Technical assistance and intangible transfers2.7Open source and public domain2.8Spanish authorities: SGCOMEX and JIMDDU2.9Penalties for non-compliance2.10Case study: export of a corporate VPN
3.1Export Administration Regulations (EAR)3.2Commerce Control List and ECCNs 5A002 and 5D0023.3ENC licence exception3.4Classification 5A992 and 5D9923.5Notifications and half-yearly reports3.6Open source software and notification3.7De minimis rule and re-export3.8Entity List and embargoed countries3.9ITAR for military cryptography3.10Exercise: determining the ECCN of a software product
4.1United Kingdom after Brexit4.2Import regulation in China4.3Chinese Commercial Encryption Law of 20204.4Russia and FSB certification4.5India and access requirements4.6Israel and control of cyber products4.7Usage restrictions versus export controls4.8Lawful access and data retention4.9Current international sanctions4.10Case study: global distribution of a messaging app
5.1Internal compliance programme (ICP)5.2Recommendation (EU) 2019/13185.3Product classification5.4Screening of recipients5.5Control of technology and foreign personnel5.6Cloud repositories and transfers5.7Training and internal audit5.8Surveillance cyber-products and human rights5.9End-user due diligence5.10Workshop: designing an ICP for an SME
6.1Description of the cryptographic product6.2Analysis of encryption functionalities6.3EU and US classification6.4Target markets6.5Required licences6.6End-user risks6.7Compliance plan6.8Documentation and records6.9Report and presentation6.10Final review with the tutor
How you'll learn
Delivered 100% online through the SEIUM campus, with downloadable materials, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the intake, which makes it possible to combine the programme with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is SAP GTS (Global Trade Services), BIS SNAP-R, Descartes Visual Compliance, advanced Excel, in free, academic or evaluation versions. The exercises draw on real procedures for classifying cryptographic products, export compliance audits and the preparation of licence applications. Assessment is continuous, module by module, plus a final integrating project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Understand the reasons for state control over cryptography.
Classify encryption products under category 5, part 2, of Regulation (EU) 2021/821.
Apply the Export Administration Regulations and the ENC licence exception.
Compare the control regimes of the EU, the United States and other countries.
Manage licence applications and general authorisations.
Where this takes you
Requirements
- No prior degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 300 hours, spread over 3 to 5 months. That is between 10 and 15 hours a week on average, compatible with a full-time job.
The programme uses SAP GTS (Global Trade Services), BIS SNAP-R, Descartes Visual Compliance and advanced Excel. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An SEIUM Institute diploma upon passing the continuous assessment and the final integrating project. This is in-house training, not an official qualification issued by the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area are credited towards the higher programme. Check the recognition policy when enrolling.
Related programmes
Ethics in the Design of Armoured Vehicles Course
Online course of 300 hours in ethics in armoured vehicle design. 6 modules covering armoured vehicles, crew protection, safety and people, use and law, industry and…
Course in ISO Military Software Certification
Online 300-hour course in ISO military software certification. 6 modules covering DO-178C (software in airborne systems), ISO/IEC/IEEE 12207 (software lifecycle processes) and IBM Engineering Requirements Management…
Course in Ethics Standards in University Defence Research
Online 300-hour course in ethics standards in university defence research. 6 modules covering Regulation (EU) 2021/821 (dual-use export control), Regulation (EU) 2021/697 (European Defence Fund) and…
More in Defense, Military Engineering & Land Systems
All Defense, Military Engineering & Land Systems programmes → · How to apply · Fees & financing · Scholarships