ECCN reference · Category 5: Telecommunications and information security
ECCN 5A002
"Information security" systems, equipment and "components," as follows
Systems, equipment and components. Reasons for control: NS (National security), RS (Regional stability), AT (Anti-terrorism), EI (Encryption items).
Does 5A002 need a license to your country?
Enter the full classification (for example 5A002.a.1) and a destination. The check reads the Country Chart, the end-use and embargo rules, and shows the rule and source behind the answer.
License requirements
Each control below comes from the entry’s License Requirements table. Where it names a Country Chart column, the countries with an X in that column need a license for the items the control covers, unless a License Exception applies.
- NS (National security): NS applies to entire entry.
Country Chart column NS1: a license is needed to 193 countries with an X
Afghanistan, Albania, Algeria, Andorra, Angola, Antigua and Barbuda, Argentina, Armenia, Aruba, Austria, Azerbaijan, Bahamas, The, Bahrain, Bangladesh, Barbados, Belarus, Belgium, Belize, Benin, Bhutan, Bolivia, Bosnia and Herzegovina, Botswana, Brazil, Brunei, Bulgaria, Burkina Faso, Burma, Burundi, Cambodia, Cameroon, Cape Verde, Central African Republic, Chad, Chile, China, Colombia, Comoros, Congo (Democratic Republic of the), Congo (Republic of the), Costa Rica, Cote d'Ivoire, Croatia, Curaçao, Cyprus, Czech Republic, Denmark, Djibouti, Dominica, Dominican Republic, Ecuador, Egypt, El Salvador, Equatorial Guinea, Eritrea, Estonia, Eswatini, Ethiopia, Fiji, Finland, France, Gabon, Gambia, The, Georgia, Germany, Ghana, Greece, Grenada, Guatemala, Guinea, Guinea-Bissau, Guyana, Haiti, Honduras, Hungary, Iceland, India, Indonesia, Iraq, Ireland, Israel, Italy, Jamaica, Japan, Jordan, Kazakhstan, Kenya, Kiribati, Korea, South, Kosovo, Kuwait, Kyrgyzstan, Laos, Latvia, Lebanon, Lesotho, Liberia, Libya, Liechtenstein, Lithuania, Luxembourg, Macau, Madagascar, Malawi, Malaysia, Maldives, Mali, Malta, Marshall Islands, Mauritania, Mauritius, Mexico, Micronesia (Federated State of), Moldova, Monaco, Mongolia, Montenegro, Morocco, Mozambique, Namibia, Nauru, Nepal, Netherlands, New Zealand, Nicaragua, Niger, Nigeria, North Macedonia, Norway, Oman, Pakistan, Palau, Panama, Papua New Guinea, Paraguay, Peru, Philippines, Poland, Portugal, Qatar, Romania, Russia, Rwanda, Samoa, San Marino, Sao Tome and Principe, Saudi Arabia, Senegal, Serbia, Seychelles, Sierra Leone, Singapore, Sint Maarten (the Dutch two-fifths of the island of Saint Martin), Slovakia, Slovenia, Solomon Islands, Somalia, South Africa, South Sudan, Republic of, Spain, Sri Lanka, St. Kitts and Nevis, St. Lucia, St. Vincent and the Grenadines, Sudan, Suriname, Sweden, Switzerland, Taiwan, Tajikistan, Tanzania, Thailand, Timor-Leste, Togo, Tonga, Trinidad and Tobago, Tunisia, Turkmenistan, Tuvalu, Türkiye, Uganda, Ukraine, United Arab Emirates, Uruguay, Uzbekistan, Vanuatu, Vatican City, Venezuela, Vietnam, Western Sahara, Yemen, Zambia, Zimbabwe.
- RS (Regional stability): RS applies to items controlled by 5A002.z.1.a, z.2.a, z.3.a, z.4.a, z.5.a. To or within any destination worldwide. See § 742.6(a)(6)(iii)(A) of the EAR.
- RS (Regional stability): RS applies to items controlled by 5A002.z.1.b, z.2.b, z.3.b, z.4.b, z.5.b. To or within the United Arab Emirates or destinations specified in Country Groups D:1, D:4, and D:5 of supplement no. 1 to part 740 of the EAR, excluding any destination also specified in Country Groups A:5 or A:6. See § 742.6(a)(6)(iii)(B) of the EAR.
- AT (Anti-terrorism): AT applies to entire entry. No Country Chart country has an X in column AT1; the destinations this control targets are under “Not decided by the Country Chart” below.
- EI (Encryption items): EI applies to entire entry. Refer to § 742.15 of the EAR.
Not decided by the Country Chart: Covered Donetsk region of Ukraine (DNR), Covered Luhansk region of Ukraine (LNR), Crimea region of Ukraine, Cuba, Iran, Korea, North, Syria. These destinations are under embargoes or other special controls in 15 CFR Part 746, which require a license for most items whatever the chart shows. Russia and Belarus also have broad Part 746 controls in addition to the chart.
A blank on the Country Chart is not permission to ship. End-use and end-user rules (15 CFR Part 744), embargoes and sanctions (Part 746), and the parties to the transaction still apply. Use the check above for your item and country.
List-based License Exceptions
As the entry lists them. Each exception has its own conditions in 15 CFR Part 740, and § 740.2 bars or limits most of them for Russia, Belarus, Country Group D:5 and embargoed destinations, so an entry’s “Yes” does not mean it is available everywhere.
- LVS: Yes: $500 for "components,"
- N/A for systems and equipment. N/A for 5A002.z.
- GBS: N/A
- ENC: Yes for certain EI controlled commodities, see § 740.17 of the EAR for eligibility.
- NAC/ACA: Yes, for 5A002.z.1.b, z.2.b
- AIA: Yes 5A002.z.1.a, z.2.a, z.3.a, z.4.a, z.5.a
- ACM: Yes for 5A002.z
- LPP: Yes for 5A002.z.1.a, z.2.a, z.3.a, z.4.a, z.5.a
- Note:
- See § 740.2(a)(9)(ii) of the EAR for license exception restrictions for ECCN 5A002.z.
Items in 5A002
The controls often apply to some paragraphs only, so check the full paragraph, for example 5A002.a.
Show all 24 paragraphs
- 5A002.a Designed or modified to use 'cryptography for data confidentiality' having a 'described security algorithm', where that cryptographic capability is usable, has been activated, or can be activated by any means other than secure "cryptographic activation", as follows:
- 5A002.a.1 Items having "information security" as a primary function;
- 5A002.a.2 Digital communication or networking systems, equipment or components, not specified in paragraph 5A002.a.1;
- 5A002.a.3 Computers, other items having information storage or processing as a primary function, and components therefor, not specified in paragraphs 5A002.a.1 or .a.2;
- 5A002.a.4 Items, not specified in paragraphs 5A002.a.1 to a.3, where the 'cryptography for data confidentiality' having a 'described security algorithm' meets all of the following:
- 5A002.a.4.a It supports a non-primary function of the item; and
- 5A002.a.4.b It is performed by incorporated equipment or "software" that would, as a standalone item, be specified by ECCNs 5A002, 5A003, 5A004, 5B002 or 5D002.
- 5A002.b Being a 'cryptographic activation token';
- 5A002.c Designed or modified to use or perform "quantum cryptography";
- 5A002.d Designed or modified to use cryptographic techniques to generate channelizing codes, scrambling codes or network identification codes, for systems using ultra-wideband modulation techniques and having any of the following:
- 5A002.d.1 A bandwidth exceeding 500 MHz; or
- 5A002.d.2 A "fractional bandwidth" of 20% or more;
- 5A002.e Designed or modified to use cryptographic techniques to generate the spreading code for "spread spectrum" systems, not specified by 5A002.d, including the hopping code for "frequency hopping" systems.
- 5A002.z Other commodities, as follows:
- 5A002.z.1.a Commodities that are described in 5A002.a and that also meet or exceed the performance parameters in 3A090.a or 4A090.a;
- 5A002.z.1.b Commodities that are described in 5A002.a and that also meet or exceed the performance parameters in 3A090.b or 4A090.b;
- 5A002.z.2.a Commodities that are described in 5A002.b and that also meet or exceed the performance parameters in 3A090.a or 4A090.a;
- 5A002.z.2.b Commodities that are described in 5A002.b and that also meet or exceed the performance parameters in 3A090.b or 4A090.b;
- 5A002.z.3.a Commodities that are described in 5A002.c and that also meet or exceed the performance parameters in 3A090.a or 4A090.a;
- 5A002.z.3.b Commodities that are described in 5A002.c and that also meet or exceed the performance parameters in 3A090.b or 4A090.b;
- 5A002.z.4.a Commodities that are described in 5A002.d and that also meet or exceed the performance parameters in 3A090.a or 4A090.a;
- 5A002.z.4.b Commodities that are described in 5A002.d and that also meet or exceed the performance parameters in 3A090.b or 4A090.b;
- 5A002.z.5.a Commodities that are described in 5A002.e and that also meet or exceed the performance parameters in 3A090.a or 4A090.a; or
- 5A002.z.5.b Commodities that are described in 5A002.e and that also meet or exceed the performance parameters in 3A090.b or 4A090.b.
Source
Commerce Control List, 15 CFR Part 774, Supplement No. 1 (official text on eCFR), as of August 21, 2026, 1:45AM EDT. Commerce Country Chart, Supplement No. 1 to Part 738, as of August 21, 2026, 1:45AM EDT.
This page is a preliminary reference, not legal advice, a classification ruling or permission to ship. Confirm the classification against the full official text.