BIS Sends Cybersecurity Control Rule for Interagency Review

The Bureau of Industry and Security sent an interim final rule for interagency review that could affect certain information security export controls for cybersecurity items. The rule, received by the Office of Information and Regulatory Affairs Sept. 17, builds upon a proposed rule published by BIS in 2015 that was intended to gather feedback on new Wassenaar Arrangement controls on some cybersecurity items. At the time, BIS said public comments “revealed serious scope and implementation issues regarding these controls,” so the agency returned to Wassenaar to renegotiate the controls. The interim final rule, if approved and published, could outline the “progress” BIS made during the renegotiation and make changes to the Commerce Control List.