Online Survey | Built with Qualtrics Experience Management™

What is your name (First & Last)?

What is your UConn email (@uconn.edu)?

Which is NOT a general category of cloud services?

Platform as a service (PaaS)
Infrastructure as a service (IaaS)
Hardware as a service (HaaS)
Software as a service (SaaS)

According to "Encryption Carve Out," which of the following is considered a characteristic of an export, reexport, or transfer to send, take, or store "technology" or "software"?

Classified
Secured using "end-to-end encryption"
Secured using cryptographic modules compliant with Federal Information Processing Standards Publication
Not intentionally stored in a country listed in Country Group D:5

What section or statement describes how cloud providers are not required to obtain "deemed export" licenses for non-U.S. IT administrators that maintain/service cloud computing systems?

DDTC Advisory Opinion (27 May 2014)
BIS Advisory Opinion (13 Nov 2014)
BIS Advisory Opinion (11 Jan 2011)
DDTC Advisory Opinions (29 Jul 2011)

According to ITAR 125.4(b)(9), who may possess or use technical data exported, reexported, or retransferred?

Only a U.S. person
Any foreign entity
Both a U.S. person and authorized foreign person
Only authorized foreign personnel

Which is one of the best practices used to address compliance challenges?

Do not update policies and procedures for evolving technologies because new technology changes too quickly
Declassifying technology and software
Refrain from negotiating contract language with cloud service provider
Appreciating risks/means of unauthorized releases of controlled items