Aerospace Risk Management Association
Education
(In-development)
Implementation Guidance On Compliance:
ITAR (International Traffic in Arms Regulations)
Governs who can access, manufacture, and export defense-related articles, technical data, and services. Critical for protecting controlled data, materials, and designs from unauthorized foreign access.
AS9100 (Aerospace Quality Management System)
A manufacturing-focused quality standard that ensures consistent, documented, and traceable production processes. Required by most aerospace primes for parts manufacturing and assembly (yes — this primarily applies to manufacturers).
NIST SP 800-171 / CMMC (Cybersecurity for DoD Contractors)
Establishes cybersecurity requirements for protecting Controlled Unclassified Information (CUI) within contractor systems. Increasingly mandatory for companies handling DoD data, even if they don’t manufacture parts.
DFARS Compliance (Defense Federal Acquisition Regulation Supplement)
Contractual rules layered onto federal contracts that govern reporting, cybersecurity, sourcing, flow-down requirements, and incident response obligations across the supply chain.
Implementation Guidance On Risk Management:
NIST Risk Management Framework (RMF)
A structured approach used by the U.S. government to identify, assess, and mitigate risk across systems, operations, and information. RMF focuses on ongoing risk management, not one-time compliance.
ISO 31000
An international standard for enterprise risk management that emphasizes identifying operational, regulatory, and strategic risks across the organization. Often used as the backbone for internal risk governance.
NIST SP 800-30
A detailed methodology for conducting risk assessments — identifying threats, vulnerabilities, likelihood, and impact. This is the risk lens behind many DoD and cybersecurity requirements.
COSO Enterprise Risk Management
A board-level risk framework used to evaluate how risks affect objectives, strategy, and performance. Particularly relevant for leadership, governance, and insurer confidence.
What do you need the most?
We only build education that provides value to the community. What the community needs the most is what we focus on the most. Please take the time to tell us which program you want to see.