CISSP · Question #1465
International bodies established a regulatory scheme that defines how weapons are exchanged between the signatories. It also addresses cyber weapons, including malicious software, Command and…
The correct answer is C. Wassenaar arrangement. The Wassenaar Arrangement is a multilateral export control regime that governs the transfer of conventional arms and dual-use goods and technologies, including cyber tools like malware, C2 software, and surveillance technology.
Question
International bodies established a regulatory scheme that defines how weapons are exchanged between the signatories. It also addresses cyber weapons, including malicious software, Command and Control (C2) software, and internet surveillance software. This is a description of which of the following?
Options
- AGeneral Data Protection Regulation (GDPR)
- BPalermo convention
- CWassenaar arrangement
- DInternational Traffic in Arms Regulations (ITAR)
How the community answered
(21 responses)- B5% (1)
- C95% (20)
Why each option
The Wassenaar Arrangement is a multilateral export control regime that governs the transfer of conventional arms and dual-use goods and technologies, including cyber tools like malware, C2 software, and surveillance technology.
GDPR is a European Union data privacy regulation governing the collection and processing of personal data of EU citizens, not an arms or weapons exchange regulatory scheme.
The Palermo Convention (UN Convention against Transnational Organized Crime) is a treaty focused on combating organized crime such as trafficking and money laundering, not the regulation of weapons or cyber tool exchanges between nations.
The Wassenaar Arrangement is an international export control agreement among 42 participating states that regulates the transfer of conventional weapons and dual-use technologies. It was updated in 2013 to explicitly include intrusion software, command and control tools, and internet surveillance systems under its control list, making it the regulatory scheme described in the question.
ITAR is a United States domestic regulatory framework controlling the export and import of defense-related articles and services, not an international multilateral arrangement addressing cyber weapons among multiple signatory nations.
Concept tested: International cyber weapons export control regulations
Source: https://www.wassenaar.org/about-us/
Topics
Community Discussion
No community discussion yet for this question.