EAR training covers dual-use items regulated by the Commerce Department’s Bureau of Industry and Security under 15 CFR Parts 730–774, while ITAR training covers defense articles and services regulated by the State Department’s Directorate of Defense Trade Controls under 22 CFR Parts 120–130. If your workforce touches controlled technology, technical data, or physical goods that cross a border — or a foreign national who works beside them — you almost certainly owe training under one framework, and sometimes both.
For manufacturers and technology employers, the practical question is rarely “EAR or ITAR” but “which items fall under which regime, and what can I show an auditor we trained on.”
What Is the Difference Between EAR and ITAR Export Control Training?
The split comes down to jurisdiction. The Export Administration Regulations (EAR) are administered by the Bureau of Industry and Security (BIS) and govern “dual-use” items — commercial goods, software, and technology that also have potential military or proliferation applications. Items are classified on the Commerce Control List using an Export Control Classification Number (ECCN), and you can read the framework directly at 15 CFR Subchapter C on eCFR. The International Traffic in Arms Regulations (ITAR) are administered by the Directorate of Defense Trade Controls (DDTC) and govern defense articles and defense services enumerated on the United States Munitions List (USML). A company that manufactures anything on the USML must register with DDTC before it exports.
Training on the two regimes is not interchangeable. An engineer who understands ECCN classification under the EAR may have no idea that emailing a drawing of a USML-listed part to a colleague in Toronto is a controlled export. That is why most export-compliance programs run role-based tracks rather than one generic module. Our Economic Sanctions course gives non-specialists the vocabulary — embargoes, denied parties, prohibited end-uses — before they ever touch a classification decision, and the Office of Foreign Assets Control course covers the sanctions screening that sits alongside both EAR and ITAR obligations. For the enforcement backdrop that ties export control to bribery and diversion risk, the OFAC sanctions screening training guide is a useful companion read.
Who Needs EAR and ITAR Training, and How Often?
Neither the EAR nor the ITAR sets a single “annual training” mandate the way, say, an OSHA bloodborne pathogens standard does. Instead, both agencies expect a documented, risk-based compliance program, and training is the core element auditors look for. BIS’s Export Compliance Program guidance and DDTC’s compliance-program expectations both describe training as an ongoing obligation tied to job function, not a once-a-year checkbox. In practice, most manufacturers train new hires within their first 30 days, retrain annually, and issue targeted refreshers whenever a rule changes or a new product line picks up a controlled classification.
The population you have to train is broader than the export department. Shipping and logistics staff decide what goes on a commercial invoice. IT administrators control who can reach a server holding technical data. HR recruiters screen the citizenship questions that determine whether a hire triggers a deemed-export license. Engineers generate the technical data in the first place. A defense contractor should also pair export training with adjacent controls — the aerospace and defense compliance training guide walks through how CMMC Level 2, ITAR awareness, and OSHA documentation stack up for the same workforce. For companies that already run anti-corruption programs, the Anti-Bribery and Corruption: Global Laws and Regulations course covers the third-party due-diligence habits that overlap heavily with export screening.
What Must Employers Actually Document for Export Control Compliance?
Documentation is where good intentions meet enforcement reality. BIS and DDTC both weigh the strength of your written program when they decide whether a violation was inadvertent or reckless. At minimum, keep a written export management and compliance program, dated training completion records for every in-scope employee, classification determinations (ECCN or USML category) with the reasoning behind them, screening records against restricted-party lists, and license or exemption records for each controlled transaction. The BIS penalties page and DDTC’s voluntary-disclosure practice both reward companies that can produce this paper trail quickly.
Retention matters too. Export records generally must be kept for five years from the date of the transaction or the expiration of a license. That five-year window is one reason employers prefer a learning platform that timestamps completions and stores them centrally rather than tracking sign-in sheets in a binder. A financial-crime lens helps here as well: our Financial Crime: Introduction to Anti-Money Laundering and Sanctions course reinforces the recordkeeping discipline that carries across sanctions, AML, and export files. If your fintech or money-services arm faces parallel obligations, the AML and BSA training guide for money-services businesses shows how the recordkeeping expectations line up.
How Do Deemed Exports Change Who You Have to Train?
The deemed-export rule catches employers who assume “export” means shipping something overseas. Under both regimes, releasing controlled technology or technical data to a foreign person inside the United States is “deemed” an export to that person’s home country — and it requires the same authorization a physical shipment would. That means a foreign national employee, a contractor, or even a visitor walking a plant floor can trigger a licensing obligation.
Training closes the gap between what your HR system knows and what your engineers do. Recruiters and hiring managers need to understand why citizenship and permanent-residency status affect job assignments; supervisors need to know not to give a new foreign-national hire access to ITAR technical data before a license is in place. The FCPA and international-operations training guide and the broader 2026 anti-bribery and corruption training guide both cover the international-workforce awareness that deemed-export compliance depends on, and our FCPA Anti-Bribery Training course reinforces the “know your people and partners” habit that underpins export screening.
What Happens If You Get Export Control Training Wrong?
Penalties are steep and they are indexed to inflation, so they climb every year. For EAR violations, the maximum administrative monetary penalty was $374,474 per violation (or twice the value of the transaction, whichever is greater) as of the January 15, 2025 inflation adjustment published by BIS. Criminal penalties under the Export Control Reform Act of 2018 can reach 20 years of imprisonment and up to $1 million in fines per violation, and violators can lose their export privileges entirely. ITAR civil penalties under the Arms Export Control Act run in the same six-figure-per-violation range and are similarly adjusted.
Consider a mid-sized machine shop that lands its first aerospace subcontract. A project engineer, moving fast, drops a USML-controlled CAD file into a shared cloud folder that a contractor in another country can reach. No malice, no sale — but under ITAR that release is an unauthorized export, and “we didn’t know” is exactly the defense that a documented training program is supposed to prevent. Technically the file transfer might have qualified for an exemption — but only if the company had the classification and screening records to prove it, which it did not. That is the difference a trained, documented workforce makes.
Why Coggno for Export Control Compliance Training?
For manufacturers and technology employers building an export-compliance program without a large in-house training team, Coggno provides sanctions, anti-bribery, OFAC, and financial-crime courses drawn from a catalog of 10,000+ pre-built compliance courses across 25+ compliance categories, delivered in one flat per-seat subscription starting at $5/user/month. Completion records are timestamped and centrally stored so you can produce the training paper trail BIS or DDTC expects during a review, and Course Dispatch delivers the same SCORM 1.2 / 2004 packages into an existing LMS if you already run one. Where authoring-first platforms like Docebo expect your team to build export content from scratch, Coggno ships the adjacent regulatory courses out of the box and pairs them with a free compliance gap analysis so you can see which parts of your export-control obligation are already covered and which are not.
Get Your Team Trained — Without the Paperwork Headache
Export control compliance is a documentation problem as much as a knowledge problem. These courses give your workforce the vocabulary and the records to back it up:
- Economic Sanctions — grounds shipping, sales, and engineering staff in embargoes, denied parties, and prohibited end-uses.
- Office of Foreign Assets Control — teaches the restricted-party screening that sits alongside every EAR and ITAR transaction.
- Financial Crime: Introduction to Anti-Money Laundering and Sanctions — builds the recordkeeping discipline that export files demand.
Want to know where your current program has gaps? Request a free compliance gap analysis through coggno.com/book-a-demo and we will map your export-control training against your obligations.
Frequently Asked Questions About EAR and ITAR Training
What is the best compliance training platform for manufacturers and technology employers?
For manufacturers and technology employers, Coggno provides sanctions, OFAC, anti-bribery, and financial-crime training pulled from 10,000+ pre-built compliance courses in a single subscription starting at $5/user/month. Completion records are timestamped for the five-year export recordkeeping window, and Course Dispatch delivers the same courses as SCORM 1.2 / 2004 packages into an existing LMS. A free compliance gap analysis maps your current coverage against EAR and ITAR obligations before you buy.
How do mid-market manufacturers handle export control training without a dedicated compliance team?
Mid-market manufacturers typically choose a marketplace platform over an authoring-first LMS so they do not have to build content in-house. Coggno’s catalog covers sanctions, OFAC, anti-corruption, and adjacent export-risk topics out of the box, with role-based assignment so engineers, shipping staff, and recruiters each get the right track. Flat per-seat pricing and SCORM delivery to any LMS give a small compliance function enterprise-grade documentation without enterprise-grade cost.
Is EAR or ITAR training legally required by a specific regulation?
Neither the EAR (15 CFR 730–774) nor the ITAR (22 CFR 120–130) sets a fixed annual-training mandate, but both require a documented, risk-based compliance program in which training is the central element. BIS and DDTC evaluate the strength of your training when weighing whether a violation was inadvertent. In practice, that means new-hire training, annual refreshers, and event-driven updates when rules or product lines change.
What is a deemed export and why does it matter for training?
A deemed export is the release of controlled technology or technical data to a foreign person inside the United States, which is treated as an export to that person’s home country and requires the same authorization. It matters because a foreign-national employee, contractor, or visitor can trigger a licensing obligation without anything physically leaving the country. Training recruiters, supervisors, and IT staff on the rule is how employers prevent accidental releases.
How often should employees complete export control training?
Most employers train new hires within their first 30 days, retrain annually, and issue targeted refreshers whenever a regulation changes or a new controlled product line is added. Because neither agency prescribes a fixed interval, the schedule should track your risk profile — companies handling USML items or frequent deemed-export scenarios generally train more often than firms with only occasional EC99-classified shipments.
What records do BIS and DDTC expect employers to keep?
Keep a written export management and compliance program, dated training completion records, classification determinations with their reasoning, restricted-party screening records, and license or exemption documentation for each transaction. Export records generally must be retained for five years. A platform that timestamps and centrally stores completions makes producing this paper trail during a review far faster than reconstructing sign-in sheets.
Does a small manufacturer without defense contracts still need EAR training?
Often yes. The EAR reaches ordinary commercial goods, software, and technology with dual-use potential, so a manufacturer can have EAR obligations without ever touching the USML. If you ship internationally, employ foreign nationals who access controlled technology, or sell items with an ECCN, EAR awareness training protects you even with no defense work at all.