DTAG One From Working Group

OMB Control Number: 1405-0193

Expiration Date: 7-31-2020

Estimated Burden: 1 hour

DTAG Working Group 1 – One-Form Electronic Filing

Draft Questionnaire

Background information to complete survey:

The proposed DDTC One-Form (DS-7788) is envisioned to replace all currently required unclassified licensing forms (DSP 5, 6, 61, 62, 73, and 74). The One-Form DS-7788 user interface would be question based (similar to Turbo Tax) and would allow applicants to enter all data currently required by existing forms, transmittal letters, agreement documents, and other supporting documentation and to electronically sign the application. The system would also continue to allow users to provide data on a machine-to-machine basis (currently referred to as "batch filing"). Users would be allowed to make corrections after submittal during the DDTC review process. As currently envisioned, once DDTC has reviewed and approved the application, the system would produce a license that provides information for the applicant and foreign parties to ship against it.

DDTC tasked the Defense Trade Advisory Group (DTAG) with providing recommendations with the tasks in section 2-4 below. The DTAG would like additional information from industry to respond to this request. Participation in this survey is voluntary

Potential Public Information:

Under the Federal Advisory Committee Act (FACA), this Questionnaire and all aggregate survey data will be included in the DTAG records and will be subject to the Freedom of Information Act (FOIA).  As such the information is potentially releasable to the public in response to a FOIA request.

Survey Instructions:

Please forward this survey to the Trade Compliance and Information Technology professionals in your organization for input. A Word version of the survey will be provided to help gather the information. When your organization has a final response, please submit your answers to the survey via Survey Monkey. This survey’s distribution and the distribution of all information other than the DDTC tasking, is limited to DTAG members and their respective organizations.

Section 1 - General questions

1. In which industry is your company primarily involved? (Check all that apply)

   1. Aerospace

   2. Electronics

   3. Weapon systems

   4. Arms

   5. Marine

   6. Education/university

   7. Service provider

   8. Other _______________________

2. What is your company’s size? (Check one)

   1. Small – up to 100 employees

   2. Mid-sized – up to 500 employees

   3. Large – over 500 employees

3. Which regulatory agency controls the majority of your company’s products? (Check one)

   1. 100% State Department controlled

   2. 100% Commerce Department controlled

   3. Mix of both with majority State Department controlled

   4. Mix of both with majority Commerce Department controlled

   5. Other, please state which regulatory agencies apply (i.e. OFAC)

4. Do you have in-house IT support or use outside sources to service your company’s IT needs?

   1. In-house IT support

   2. Outside IT support

   3. Both

5. Do you currently file license applications using Electronic Batch filing in DTrade

   1. Yes

   2. No

6. Do you have in-house Trade Compliance support or use outside sources to service your company’s Trade Compliance needs?

   1. In-house Trade Compliance support

   2. Outside Trade Compliance support

   3. Both

Section 2 – Questions related to Task 1 –Interagency One Form

The Interagency One Form is an interagency form that allows industry to request authorizations from Department of State (DDTC), Department of Commerce (BIS) and Treasury (OFAC). TASK: Would your company benefit from a single interagency form where the data elements needed by DDTC, BIS, and OFAC are collected using a single system user interface or single machine-to-machine data interface?

1. Would your company benefit from the Interagency One Form where the data elements needed by DDTC, BIS, and OFAC are collected using a single system user interface or single machine-to-machine data interface?

   1. Yes

   2. No

2. What would be the benefits to having the Interagency One Form? Check any that apply:

   1. Ease of application – same form used for multiple agencies simplifies user entry

   2. Process simplification due to uniform data elements among agencies

   3. IT systems simplification

   4. Other – enter your own comments

3. Do you anticipate any negative impacts with the migration to the Interagency One Form?

   1. No

   2. If Yes, provide more information in the textbox below.

4. If DDTC implements the DDTC One Form DS-7788 in DECCS as an interim step to implementing an Interagency One Form at a later date, would this additional step be an additional burden to your company?

   1. Yes

   2. No

   3. If yes, provide detail below in the text box below and see Question 5

5. Would your company benefit from having the DDTC One Form DS-7788 developed in conjunction with the interagency One Form so that very little change would be needed when the Interagency One Form is subsequently implemented?

   1. Yes

   2. No

   3. Makes no difference

6. In addition to licenses, would there be a benefit to having other submissions and functionalities included in an interagency electronic filing system (i.e., Commodity Jurisdictions, CCATS, Voluntary Disclosures, Advisory Opinions, General Correspondences and Reporting)? Please provide response in text box.

7. What support will be needed from the USG agencies in transitioning to the Interagency One Form? Please provide response in text box.

8. Would you be willing to participate in any form of testing associated with new form/systems before go live?

   1. Yes

   2. No

Section 3 – Questions related to Task 2 – Electronic Batch Filing

TASK: Would expanding the current license based batch filing (to include registration filings and updates, notifications, CJ, etc.) positively impact your company, and if so, how do you want DDTC to prioritize this expansion?

1. Would expanding the current electronic batch filing to include registration filings and updates, notifications, CJ, etc. positively impact your organization?

   1. Yes

   2. No

   3. Impact Neutral

   4. Not applicable

2. What are the benefits to having batch filing capability for other types of submissions? Provide response in text box

3. Outside of electronic batch filing, how many manual submissions does your company make per year?

4. Does your company generate sufficient volume of these types of submissions to make electronic batch filing cost effective?

   1. Yes

   2. No

5. Does electronic batch filing work best within your company’s enterprise system?

   1. Yes

   2. No

   3. Not applicable

6. If expanded electronic batch filing is desired, how does industry want DDTC to prioritize this expansion? Prioritize the following types of transactions from 1 to 4 with 1 being most important:

   1. Registration filing

   2. Registration updates & changes

   3. Notifications to DDTC

   4. Commodity Jurisdiction determination requests

   5. Advisory Opinion requests

   6. Disclosure submissions

   7. General Correspondence authorization requests

   8. Reporting

Section 4 – Questions related to Task 3 – Authentication

TASK: Would modifying user access/authentication process from current Identrust Certifications to other modern access/authentication procedures positively impact industry, and if so, what are your specific modification recommendations and does a cost-benefit analysis support this recommendation?

1. Would modifying user access/authentication process from current IdenTrust Certifications to other modern access/authentication procedures positively or negatively impact your company? (check one)

   1. Positive

   2. Negative

   3. Neutral

2. What are the positive aspects of remaining with the current digital certifications? Please respond in the text box

3. What are the negative aspects of staying with the current digital certifications? Please respond in the text box

4. Would your company prefer one authentication method or several depending on the role(s) (super users vs. users) or individual(s) (third-party counsel/consultant vs. company designated Empowered Officials) accessing DECCS on behalf of your company? Please provide response in text box.

5. What other types of authentication are used by your company that might be applicable for DDTC use? Please provide response in text box.

6. What other types of authentication methods do you think might be valid replacements for digital certificates? (E.g. industry-standard two-factor authentication methods) Please provide response in text box.

7. Should authentication methods vary depending on the method of access such as human-to-web portal versus vender/machine interface to DECCS server? Please provide response in text box.

8. What does your company want in terms of data security?

   1. DFAR Cyber Security

   2. NIST 800-171

   3. Both

   4. Other _____________________

9. What does your company desire in terms of strength of authentication?

   1. Satisfy minimum encryption requirements

   2. Option available for greater encryption

   3. Satisfy requirement of UCTI, CUI and/or CDI

   4. Other (please specify) _________________________

PRA Statement

Public reporting burden for this collection of information is estimated to average 1 hour including time required for searching existing data sources, gathering the necessary documentation, providing the information and/or documents required, and reviewing the final collection.  You do not have to supply this information unless this collection displays a currently valid OMB control number.  If you have comments on the accuracy of this burden estimate and/or recommendations for reducing it please send them by mail: Department of State (A/GIS/DIR), Washington, D.C. 20520