Export Controls: International Space Station Technology Transfers (Letter
Report, 11/03/1999, GAO/NSIAD-00-14).

The international space station, with 16 nations involved, is one of the
largest scientific collaborations attempted. Under international
agreements, NASA, as the U.S. representative, is obligated to deliver,
disclose, or transfer technology, data, and commodities needed to
implement the program. Members of Congress have raised concerns about
the extent of safeguards to protect technology and information exported
in support of the space station. This report provides information on (1)
the licenses granted to NASA to export space station-related technology
and commodities and plans to export encryption technology and (2) the
results of internal and external assessments of NASA's export control
program and NASA's actions to implement audit recommendations.
Encryption technology maintains the secrecy of information and is needed
to provide secure transmission of command and control instructions
between ground and space components of the space station.

--------------------------- Indexing Terms -----------------------------

 REPORTNUM:  NSIAD-00-14
     TITLE:  Export Controls: International Space Station Technology
	     Transfers
      DATE:  11/03/1999
   SUBJECT:  Export regulation
	     Technology transfer
	     Internal controls
	     Exporting
	     Licenses
	     International trade
	     Internal audits
	     Dual-use technologies
	     Data encryption
IDENTIFIER:  NASA International Space Station Alpha Program
	     U.S. Munitions List
	     Russia

******************************************************************
** This file contains an ASCII representation of the text of a  **

** GAO report.  Delineations within the text indicating chapter **
** titles, headings, and bullets are preserved.  Major          **
** divisions and subdivisions of the text, such as Chapters,    **
** Sections, and Appendixes, are identified by double and       **
** single lines.  The numbers on the right end of these lines   **
** indicate the position of each of the subsections in the      **
** document outline.  These numbers do NOT correspond with the  **
** page numbers of the printed product.                         **
**                                                              **
** No attempt has been made to display graphic images, although **
** figure captions are reproduced.  Tables are included, but    **
** may not resemble those in the printed version.               **
**                                                              **
** Please see the PDF (Portable Document Format) file, when     **
** available, for a complete electronic file of the printed     **
** document's contents.                                         **
**                                                              **
** A printed copy of this report may be obtained from the GAO   **
** Document Distribution Center.  For further details, please   **
** send an e-mail message to:                                   **
**                                                              **
**                                            **
**                                                              **
** with the message 'info' in the body.                         **
******************************************************************
GAO/NSIAD-00-14

Report to the Chairman and Ranking Minority Member, Committee on Science
House of Representatives

November 1999

EXPORT CONTROLS

International Space Station Technology
Transfers
*****************

*****************

GAO/NSIAD-00-14

Letter                                                                     3

Appendixes

Appendix I:Commodities Exported Using Individual Validated Licenses

                                                                         18

Appendix II:Examples of ISS-Related Commodities Exported in 1998 Under No
License Required Authority

                                                                         19

Appendix III:Comments From the National Aeronautics and Space Administration

                                                                         20

Appendix IV:Comments From the Department of Commerce

                                                                         26

CBM     common berthing mechanism

EVA     extravehicular activity

ISS     International Space Station

MOU     Memorandums of Understanding 

MDM     multiplexer/demultiplexer

NASA    National Aeronautics and Space Administration

OIG     Office of the Inspector General

RAM     Random Access Memory

                                                     National Security and 
                                             International Affairs Division

B-283363

November 3, 1999

The Honorable F. James Sensenbrenner, Jr.
Chairman
The Honorable Ralph M. Hall
Ranking Minority Member
Committee on Science
House of Representatives

With 16 countries involved, the International Space Station Program is one
of the largest scientific collaborations ever attempted./Footnote1/ Under
international agreements related to the program, the National Aeronautics
and Space Administration (NASA), as the U.S. representative, is obligated
to deliver, disclose, or transfer technology, data, and commodities
necessary to meet its responsibilities in implementing the program.
Concerned about the extent of safeguards to protect technology and
information exported in support of the space station, you and the late
Representative George Brown asked us to evaluate NASA's implementation of
federal export control regulations. Specifically, we are providing
information on 
(1) licenses granted to NASA to export space station-related technology
and commodities and plans to export encryption technology and (2) the
results of internal and external assessments of NASA's export control
program and NASA's actions to implement audit recommendations. Encryption
technology provides a capability to maintain the secrecy of information
and is needed to provide secure transmission of command and control
instructions between ground and space elements of the space station.

A significant percentage of NASA's international activities may involve
transfers of commodities, software, or technologies to foreign partners by
NASA or authorized contractors. To protect national security and U.S.
foreign policy interests, the export of technology and commodities to the
15 partner countries involved with NASA in the International Space Station
Program is controlled through a system of licenses. The Departments of
Commerce and State are responsible for granting NASA such licenses.
Commerce issues licenses for the export of dual-use items--those items
that have both commercial and military applications--on the Commerce
Control List. Similarly, State issues licenses for exports of U. S.
Munitions List items--articles, services, and related technical data
designated as defense articles and services. NASA's export activities must
conform to the procedures and regulations established by Commerce and State.

Results in Brief

Since April 1995, the Commerce Department has issued nine Individual
Validated Licenses/Footnote2/ to export specific items and one special
comprehensive license that allows NASA to export certain preapproved items
without seeking Commerce's approval each time NASA needs to export them
for the International Space Station Program. Although the special
comprehensive license was intended to preclude the need for individual
licenses, NASA has only used it once because it has not been updated and,
according to NASA officials, individual licenses are easier to obtain than
updating the special comprehensive license. As new export requirements
have materialized, NASA has elected to apply for individual licenses
rather than amend the special comprehensive license. The State Department
has not issued any licenses to NASA to export technology or commodities
for the International Space Station. However, NASA erroneously authorized
the export of radiation-hardened electronic parts to Russia in 1997
without first obtaining a license from State. NASA expects to export
encryption technology for use in the program but has not determined
whether a license is needed. NASA expects that such exports will be
limited to its Japanese and European partners.

Internal and external reviews of NASA's export control activities have
identified weaknesses, including a need for greater management involvement
in export-related decisions and additional training to educate employees
involved with technology control about export laws, regulations, and
procedures. NASA has taken steps to correct these weaknesses; however,
some additional actions are needed. For example, annual internal audits
have not provided sufficient information to assess the effectiveness of
NASA's export controls for the International Space Station Program.
Resulting reports of audits that were issued in 1997 and 1998 provide
little detail and analyses beyond completing a required audit checklist.

This report recommends improvements aimed at improving the quality of
NASA's internal audits.

Background

NASA had no formalized export control policy when the Space Station
Program began in 1984, nor when the space station partnership was
established in 1988. Although NASA issued a technical data and goods
transfer control plan for the earlier Space Station Freedom Program in
1991, that plan did not include procedures for making export-licensing
determinations. When Russia joined the International Space Station (ISS)
Program in 1993, the need for associated export controls was heightened.
Thus, NASA established a Space Station Export Control Steering Group and
an Interagency Export Control Working Group early in 1994 to assist in
developing an approach to controlling exports of ISS-related commodities.
Chaired by NASA, the groups comprised senior policy, legal, and technical
representatives from the Executive Office of the President's Office of
Science and Technology Policy and the Departments of State, Commerce, and
Defense.

Since 1994, NASA has been developing a more comprehensive technology
control plan specifically for the ISS Program. The plan has remained in
draft form but has been modified since its inception. NASA intends to
finalize its most recent draft plan in mid-November 1999. In the meantime,
NASA employees, contractors, and centers supporting the ISS Program have
been instructed to use the draft control plan as guidance in implementing
ISS-related export activities.

In 1995, NASA published an agencywide export control program document for
all programs involved in international activities. NASA based its export
control program on federal laws and regulations that require licenses for
exports of controlled technologies, commodities, and services. Commerce
and State are responsible for granting licenses to NASA and its

designated contractors for the export of technologies to ISS
partners./Footnote3/ Under the authority of the Export Administration Act,
Commerce established a licensing system for exports of dual-use items--
those items that have both commercial and military applications--on the
Commerce Control List. Similarly, under the authority of the Arms Export
Control Act, State issues licenses for exports of defense articles and
defense services that are on the U.S. Munitions List. The statutory
authority to issue regulations regarding the export of dual-use items and
defense articles and services is delegated to the Secretaries of Commerce
and State. Commerce and State published the Export Administration
Regulations and International Traffic in Arms Regulations, respectively,
implementing the acts. NASA must ensure that its ISS export activities
conform to these laws and regulations. NASA's export control program
document contains a step-by-step process for NASA employees and
contractors to follow in determining whether technology and commodities
can be exported to foreign countries, with or without a license.

NASA includes the following elements in its decision to export items in
support of the ISS Program: (1) the necessity of the export and its
consistency with NASA's export control program, (2) any prohibitions on
the export established by federal law or regulation, (3) whether State or
Commerce is responsible for authorizing the export, and (4) whether the
export requires a license. The export classification process includes
these elements.

The line of authority for all NASA export-related activities originates at
NASA headquarters and flows to the agency's field center export
administrators, program and project managers, and transportation officers.
These officials share responsibility for ensuring compliance with U.S.
export control regulations and NASA's export control program. NASA's
program requires training to be conducted at least annually and covers
issues and developments in export controls that impact the agency's
international activities.

Status of Licenses and Plans to Export Encryption Technology

Since April 1995, the Commerce Department has issued nine individual
licenses to export specific items and one special comprehensive license.
With one exception, NASA has not used the special comprehensive license
granted by Commerce to facilitate exporting the large volume of ISS-
related technology and commodities that it expected to transfer to the 
ISS partners. State has not issued NASA any licenses to export ISS-related
technologies. However, NASA inappropriately exported radiation-hardened
technology without having obtained a license from State. A centralized
database of exported technologies is in development and will include
information on items transferred without licenses. While encryption
technology has not been exported, the requirement for it is being
considered by NASA and its European and Japanese partners.

Licenses Issued to Export ISS Technologies
------------------------------------------

From April 1995 through May 1999, Commerce issued nine individual licenses
to NASA for the export of ISS-related technologies. An individual license
is granted in response to an application for a specific export. Six
licenses were for items shipped to Russia, two for items shipped to Italy,
and one license for items shipped to Germany. Appendix I includes a
description of the commodities transferred using these licenses and the
countries of destination.

For ISS-related exports, NASA may request an individual license or use the
ISS special comprehensive license. In May 1996, Commerce issued NASA a
special comprehensive license to facilitate the large volume of expected
exports incidental to the ISS Program and to eliminate the need to apply
for an individual license for each item it expected to export. The special
comprehensive license is to be used to export only items listed in the
bilaterally established exchange list and included in the license. None of
the items are under State's export control jurisdiction. The license
covers certain ISS hardware, software, and technical data under the export
control jurisdiction of Commerce. The license is only for the use of NASA
personnel and approved related entities, such as authorized contractors
and subcontractors listed in the license, and only when the entities have
received specific contractual direction from NASA.

With the exception of one case in which the item exported was returned
following a determination that procedures were properly followed, the

special comprehensive license has not been used./Footnote4/ NASA
headquarters export officials said that technologies listed in the special
comprehensive license, which was developed more than 3 years ago, need to
be reevaluated and that obtaining an individual license to transfer ISS
technologies is less complicated than amending the special comprehensive
license. In commenting on a draft of this report, Commerce stated that, in
1999, the NASA special license was fully entered into its electronic
license database, making it easier for NASA to submit changes. Commerce
further stated that, to export an item not identified in the original
application, NASA would need to submit one form; to export multiple items
not previously identified, NASA would submit an amendment form.

The special comprehensive license does not relieve NASA from its
obligation to request a separate license if one is required. Because
Commerce does not review each individual transaction authorized by the
special comprehensive license, NASA and the entities authorized to use it
must have mechanisms to ensure that each export made under it fulfills the
terms and conditions of the license and applicable provisions of
Commerce's export regulations.

NASA Failed to Obtain State License in One Case
-----------------------------------------------

According to NASA officials, State has not issued NASA any licenses
associated with the ISS Program to export items under the export control
jurisdiction of State. However, NASA disclosed that in January 1997,
radiation-hardened electronic parts were inappropriately exported to
Russia without a license. This export occurred because a NASA contractor's
parts supplier had received an erroneous export classification from the
manufacturer who was not aware that the parts were on State's U.S.
Munitions List, and NASA did not independently determine whether a license
was needed. Additional details about this export and the resulting NASA
investigation are discussed on pages 11 and 12 of this report.

A Database of All ISS Export Controlled Technologies Is Being Developed 
------------------------------------------------------------------------

NASA is not required to acquire a license for all export-controlled items
that are ISS related. Under federal export control regulations, NASA has
exported numerous ISS-related technologies with license exceptions. An
exception allows NASA to export, under stated conditions, items subject to
Commerce's Export Administration Regulations that would otherwise require
a license. As required by State's and Commerce's regulations, NASA's
export control program includes the requirement that records be maintained
for at least 5 years on all exports and transfers. NASA's draft 
ISS export control plan reiterates these requirements. Appendix II shows
examples of ISS-related export controlled commodities NASA exported in
1998 without licenses.

According to NASA officials, NASA's centers have retained individual
records of all ISS items that the agency has made export classification
decisions on and exported since 1995. However, the records were not
summarized and the ISS program office could not readily provide us with a
complete list of ISS technologies exported to its partners without
licenses. Although such a database is not required under export control
regulations, having this information would be useful to supplement
guidance and as a crosscheck in reaching future export classification
decisions. Moreover, it would provide NASA, State, and Commerce with a
tool to use in conducting reviews to assess NASA's compliance with export
laws and regulations.

According to NASA officials, the database of exported technologies
currently in development will be a centralized database and will include
information on items transferred without licenses and will be available
agencywide. The ISS database development is a Johnson Space Center and ISS
program office initiative.

Plans to Export Encryption Technology Are Being Discussed
---------------------------------------------------------

To date, no encryption technology has been exported for use in the ISS
Program. The requirements for and potential export of encryption
technology needed to support the ISS are being discussed by NASA, its
European and Japanese partners, and agencies that have export approval
authority for the technology. To date, no license has been applied for.
According to NASA officials, encryption will be needed to provide secure
transmission of command and control instructions between ISS ground and
space elements. The Japanese and European partners and NASA have agreed to
use a common U.S. standard technology as the means of encrypting command
and control communications. To use U.S. encryption technology, the
Japanese and European partners must agree to provide it a level of
protection equal to that provided by the United States, which would
require them to procure hardware from the list of sources approved by
Commerce's National Institute of Standards and Technology. NASA would
provide them technical support for the hardware selection, related
software development, and encryption key management, enabling them to
interpret the coded instructions. The Japanese and European partners are
considering a draft agreement that outlines U.S. protection requirements
for the technology. If they concur with U.S. protection requirements and
sign the agreement, NASA or the supporting contractor could initiate
action to obtain a license to export encryption technology to the
partners. NASA is collaborating with the National Security Agency and the
National Institute of Standards and Technology about exporting the
technology to these partners.

NASA officials stated that Russia would not be included as a destination
in any potential licenses for encryption technology. While Russia and the
United States will use a common infrastructure to transmit data between
ISS space and ground elements, the Russian Space Agency and NASA will not
use a common encryption technology or share such technology. Both the
United States and Russia have their own encryption systems. According to
NASA officials, Russia and the United States prefer using their own systems.

Reviews of NASA's Export Control Program Have Identified Some Weaknesses

NASA's export control program is subject to periodic internal reviews and
to external reviews by Commerce and State. Moreover, investigations can be
triggered by specific events requiring follow-up. The reviews and
investigations conducted to date have identified some weaknesses in NASA's
export control program. NASA officials have taken steps to address many of
these weaknesses. However, further actions are needed in some areas, such
as improving the quality of NASA's internal audits.

State's Review of License Application Triggered NASA's Investigation of
Radiation-Hardened Electronics Parts Exported Without License
---------------------------------------------------------------------------

In 1998, the State Department requested NASA's review and comment on a
license application involving a U.S. company affiliated with a Russian
company for radiation-hardened electronic parts. The license application
had also indicated that NASA had exported the parts to Russia in the past.
In reviewing the application, NASA detected a potential issue of improper
export with its prior transfer of the parts to Russia. NASA initiated an
investigation and found that it had inappropriately exported radiation-
hardened electronics parts to Russia for use in the ISS Program. NASA had
exported these parts without a license after the parts were erroneously
classified as the lowest level of controlled technology. NASA did not
follow its own policy, which is to determine the classification of
material proposed for export or to ensure that its contractors have
appropriately determined the material's classification. Instead, a NASA
contractor's supplier determined that the export of the parts to Russia
did not require a license and the contractor relied on that determination.
NASA, in turn, relied on its contractor's classification of these parts.

The parts were exported to Russia in January 1997. According to a NASA
export control official, the supplier's and manufacturer's regional office
officials were unaware that the radiation-hardened parts were on State's
U.S. Munitions List and therefore required an export license. NASA was
unaware of the error for about 18 months until the U.S. company affiliated
with a Russian company applied to State for an export license for the same
parts, and State referred the license application for NASA's review in
June 1998. According to a State official, the request for the license in
this instance was to support activities associated with the Russian Mir
space station. NASA export control officials told us that the application
inaccurately stated that NASA had obtained a license for an earlier export
of the same parts to Russia.

In a June 1998 letter to State about the incident, NASA formally
acknowledged the error and stated that it had reminded the Russian Space
Agency and the Russian company that the parts were solely for use in
Russian-provided components of the ISS and were not to be used for any
other purpose or transferred without NASA's written approval. The Russian
company responded that it had accounted for each of the exported parts and
indicated how they were being used and where they were located. NASA
accepted this response in good faith.

Although NASA may seek advice from the manufacturers to assist in the
determination, NASA is ultimately responsible for determining the correct
classification and requesting a license, if required. As a result of this
incident, NASA advised State in July 1999 that the ISS program office had
instituted specific changes to its export procedures, requiring

o   a manufacturer export office, rather than a sales office, to confirm
  export classifications of commercially available items and

o   a NASA manager to be directly involved in determining export
  classifications before proceeding with exports.

According to NASA, key features of this process include a centralized
database to capture all ISS exports and backup data, an Export Control
Council to review exports and resolve issues, and documented export
compliance training for employees. Also, training conducted by the ISS
export administrator highlights the fact that radiation-hardened parts are
export controlled. We concur with the need for these steps.

NASA's Office of Inspector General Assessment
---------------------------------------------

In March 1999, NASA's Office of the Inspector General (OIG) completed a
review of the agency's export activities related to controlled
technologies. The report noted that NASA had not identified all export-
controlled technologies related to its major programs and did not maintain
a catalog of classifications for transfers of export-controlled
technologies. The report further stated that agency oversight of training
for personnel in the export control program needed improvement and that,
as a result, NASA might not have adequate control over export-controlled
technologies to preclude unauthorized or unlicensed transfers. The OIG
recommended that NASA

o   establish a policy and procedures for cataloging controlled
  technology export classifications that would be available for all NASA
  installations; 

o   define the qualifications of personnel that perform export program
  audits;

o   designate only qualified personnel to perform annual audits of the
  export control program, in accordance with established policy; 

o   establish a policy for resolving and following up on recommendations
  resulting from export control audits;

o   enhance the current export control training program for NASA
  personnel, to include educating them about U.S. export laws and
  regulations and procedures for classifying and documenting exports; and 

o   expand training on a recurring basis to NASA employees involved
  directly or indirectly with technology control.

NASA concurred with the OIG report, and according to NASA officials, the
agency is taking actions as follows:

o   The agency plans to establish a central catalog of export control
  technologies. Each center has been requested to provide the
  headquarters Export Administrator copies of all classifications made
  for exports to facilitate the development of the catalog.

o   NASA is hiring additional staff to conduct training in export
  controls and write policy guidance. NASA officials told us that it was
  developing computer-based training and that the agency plans to expand
  training modules to include more in-depth coverage of export laws and
  regulations, classification requirements, and procedures useful for
  conducting the annual audits of the export control program.

o   In addition to computer-based training, the headquarters' and
  centers' export control administrators will continue to conduct
  training seminars on export controls.

o   Auditing requirements and auditor qualifications are being included
  in a NASA program directive and a NASA procedures guide scheduled to be
  completed at the end of 1999. The directive and guide will also specify
  how center management will follow up on recommendations resulting from
  export control audits.

Commerce's Assessment of NASA's Export Controls
-----------------------------------------------

In June 1998, Commerce's Office of Exporter Services reviewed NASA's
export control program, including the use of the special comprehensive
license for the ISS Program. The purpose of this review was to ensure that
NASA was complying with the Export Administration Regulations and the
terms of the license. Commerce also reviewed pertinent records associated
with NASA's export control program, indicating in its report that NASA did
not have a formal procedure in place to ensure that products were at the
consignee sites and were being used for the intended purpose. Commerce
concluded that, overall, NASA had adequate export controls and was
complying with the act's implementing regulations. However, to ensure full
compliance with the implementing regulations, Commerce recommended that NASA

o   revise its procedures for screening the Denied Persons List, a list
  of specific persons whose export privileges have been denied by Commerce;

o   update its export control audit module to reflect the latest Commerce
  terminology-using the Denied Persons List instead of the Table of
  Denial Orders;/Footnote5/

o   develop a procedure for verifying that exports of certain items are
  at their intended destinations; and

o   develop procedures for screening against Commerce's most current
  entities list, which provides notice of license requirements for
  certain end users when there is an unacceptable risk that the commodity
  or technology may be diverted.

NASA has taken steps to implement these recommendations. While Commerce
noted that NASA does not have a formal procedure in place to ensure that
products are being used by the intended entity and for the intended
purpose, it did not make recommendations regarding this point. NASA's
procedures developed in response to Commerce's review focus on verifying
that exports of certain items are at their intended destinations.
Ascertaining that usage is as intended is not addressed.

Johnson Space Center Internal Audits
------------------------------------

NASA's export control program requires the agency's centers to conduct
annual audits of their export control practices and submit a report
describing the review process, audit results, and any recommendations to
NASA headquarters. However, such audits have not always been conducted in
a comprehensive and rigorous manner. NASA's OIG found during a 1999 review
of NASA's export control program that though a significant portion of
Johnson Space Center exports related to the ISS, the Center's auditor did
not review ISS exports. Moreover, we found that the Center's 1997 and 1998
annual audit reports were not sufficiently detailed to provide NASA
headquarters with sufficient information to assess the effectiveness of
the agency's export control practices. Center auditors documented their
reviews for fiscal years 1997 and 1998 by using a checklist-the NASA
Export Control Program Audit Module-that included general questions
requiring yes or no answers. Accompanying written reports, which were
supposed to include a description of the review process, the audit
results, and recommendations, were not prepared as required. Rather, the
Center auditors forwarded only the completed checklists, with limited
added detail, to the headquarters export administrator. For example, the
checklists for 1997 and 1998 included a yes answer in response to a
question regarding whether Commerce Export Administration Regulations'
record-keeping requirements were being followed. However, they did not
explain how the auditors reached this determination, nor did they include
any comments or recommendations on this issue. NASA guidance requires
auditors to verify, through sampling, that required screening and
licensing procedures are regularly followed and that required documents
are maintained in compliance with Commerce's Export Administration
Regulations. In commenting on a draft of this report, Commerce pointed out
that the special comprehensive license also requires that NASA conduct a
complete system review and not simply compare its procedures to an audit
checklist.

Agencywide Self-Assessment of Transfer/Export Control Practices
---------------------------------------------------------------

In December 1998, NASA initiated an assessment of its export control
program to determine whether its technology transfer and export control
procedures were thorough, rigorous, and provided for fully safeguarding
controlled goods and technologies, particularly in its international
partnerships and programs. NASA required managers and employees at various
organizational levels to complete a questionnaire designed to assess
technology controls in their areas of responsibility. Consolidation of all
assessments is under way, and NASA's centers will be briefed on results.
NASA officials told us that NASA has no plans to conduct a similar
agencywide self-assessment in the future on a regularly scheduled basis.

NASA requested feedback on its three-part questionnaire from (1) NASA
Enterprise directors, (2) center directors, and (3) center managers that
direct projects involving international participation. We examined the
assessments completed by the Human Exploration and Development of Space
Enterprise, the Johnson Space Center, and the ISS program office since
these entities are the most likely to be involved with ISS technology
transfers. While the responses about the effectiveness of the
implementation of NASA's export control program were generally favorable,
Johnson Space Center and ISS program office assessments cited a lack of
adequate staff for export control matters. In particular, the assessments
determined that additional personnel were needed for the time critical
export classification process. The ISS program office assessment indicated
that export control personnel were working with Johnson Space Center
management to increase the number of personnel involved.

Conclusions

NASA's internal audits at the Johnson Space Center have not been
comprehensive or detailed enough to judge the effectiveness of NASA's
export control program or compliance with export control laws and
regulations. The reports of audit lack evidence of audit work focused
specifically on ISS exports and do not include detailed information on
audit methods, findings, and recommendations as required by the agency's
export control program. Since NASA has no plans to conduct the agencywide
self-assessment on a regular basis, making the Johnson Space Center's
audit more useful takes on added urgency.

Recommendation

To enhance NASA's ability to oversee and implement its export controls of
ISS-related technologies, we recommend that the NASA Administrator ensure
that center-based audits are completed with sufficient detail to enable
the agency to identify weaknesses in NASA's export control procedures.

Agency Comments and Our Evaluation

NASA reviewed a draft of this report and stated that the report captured
the many facets of export control related to the ISS Program. NASA did not
explicitly state whether it agreed or disagreed with our recommendation.
NASA also provided technical comments to further clarify understanding of
some issues and suggested revisions that we have incorporated where
appropriate.

NASA's written comments are presented in appendix III.

We also provided drafts of this report to the Departments of Commerce and
State. We did not receive a written response from State. However, a State
official indicated the agency concurred with the report. Commerce provided
written comments, stating that the report is accurate (see app. IV). Both
State and Commerce provided technical suggestions for clarification
purposes that we incorporated where appropriate. 

Scope and Methodology

To determine the number and types of ISS-related licenses issued in
conjunction with the ISS Program and the destination of technology and
commodities exported to date, we compared export license records
maintained by NASA headquarters with Commerce's Export Control Automated
Support System database. Our comparison included ISS-related licenses that
Commerce issued between fiscal year 1994 and the first quarter of fiscal
year 1998. We also reviewed program office listings of ISS-related items
it exported without licenses. To obtain information on the status of
encryption exports, we reviewed NASA records and held discussions with
NASA officials about requirements for such exports and countries of
destination.

To determine the results of past reviews of NASA's export control program,
we reviewed audit reports conducted by NASA's OIG and Commerce and the
results of a NASA investigation of radiation-hardened electronic parts. We
also reviewed the methodology and results of recent internal audits of
export control practices conducted by NASA's Johnson Space Center. We
assessed NASA's responsiveness to audit recommendations by discussing
follow-up actions with NASA officials and documenting changes in NASA's
policies and procedures.

We conducted our review from September 1998 through September 1999 in
accordance with generally accepted government auditing standards.

Unless you publicly announce its contents earlier, we plan no further
distribution of this report until 14 days from its issue date. At that
time, we will send copies to the Honorable Daniel S. Goldin, NASA
Administrator; the Honorable Madeleine Albright, Secretary of State; the
Honorable William M. Daley, Secretary of Commerce; the Honorable Jacob
Lew, Director of the Office of Management and Budget; and other interested
parties. We will also make copies available to others upon request.

If you or your staff have any questions concerning this report, please
contact me on (202) 512-4841. Key contributors to this assignment were
Jerry Herley, Samuel Cox, and Shirley Johnson.

*****************

*****************

Allen Li
Associate Director
Defense Acquisitions Issues

--------------------------------------
/Footnote1/-^ The 16 countries are the United States, as lead partner;
  Canada; Japan; the European countries Belgium, Denmark, France, Italy,
  Germany, the Netherlands, Norway, Spain, Sweden, Switzerland, and the
  United Kingdom; Russia; and Brazil.
/Footnote2/-^ An Individual Validated License is a written authorization
  from the government to export. After a license application is approved,
  a license is issued by Commerce bearing the license number and
  validation date. The license will generally be valid for a 24-month
  period.
/Footnote3/-^ The Export Administration Act (50 U.S.C. app. 2401, as
  amended) has expired. However, Commerce carries out the Export
  Administration Regulations pursuant to an executive order issued under
  the President's authority in the International Emergency Powers Act. The
  Arms Export Control Act (22 U.S.C. 2778, as amended) authorizes the
  President to control the export and import of defense articles and
  services. The authority to issue regulations with respect to export of
  defense articles and services was delegated to the Secretary of State by
  Executive Order 11958. 
/Footnote4/-^ NASA verified its internal process of effecting an export
  under the authority of the ISS special comprehensive license in
  conjunction with the export of an electrical power system to its
  Japanese partner. The item was returned within 30 days.
/Footnote5/-^ Former terminology for Denied Persons List.

COMMODITIES EXPORTED USING INDIVIDUAL VALIDATED LICENSES
========================================================

------------------------------------------------------------------------
| Licenses     : Description                   : Destination           |
|----------------------------------------------------------------------|
| 1a           : Circuit emulator,             : Russia                |
|              : International Space Station   :                       |
|              : system bus upgrade,           :                       |
|              : multiplexer/demultiplexer     :                       |
|              : (MDM)                         :                       |
|----------------------------------------------------------------------|
| Amendment    : Circuit emulator, ISS system  : Russia                |
|              : bus upgrade, MDM              :                       |
|----------------------------------------------------------------------|
| Amendment    : Electronics equipment         : Russia                |
|              : connectors                    :                       |
|----------------------------------------------------------------------|
| Amendment    : Prototype and flight MDM,     : Russia                |
|              : field-testing equipment, and  :                       |
|              : cable kits                    :                       |
|----------------------------------------------------------------------|
| Amendment    : Prototype MDMs                : Russia                |
|----------------------------------------------------------------------|
| Amendment    : MDMs for payload blocks,      : Russia                |
|              : command and control,          :                       |
|              : navigation and guidance, and  :                       |
|              : testing; connectors; test     :                       |
|              : processors; and memory cards  :                       |
|----------------------------------------------------------------------|
| Amendment    : Microswitches, MDM spare      : Russia                |
|              : prototype, functional         :                       |
|              : equivalent, and flight        :                       |
|              : circuit boards                :                       |
|----------------------------------------------------------------------|
| 2            : Connectors, MDM prototypes    : Russia                |
|              : and circuit boards, spare     :                       |
|              : circuit boards, flight        :                       |
|              : enhanced MDMs, and flight     :                       |
|              : stand                         :                       |
|----------------------------------------------------------------------|
| 3            : Random Access Memory (RAM)    : Russia                |
|              : and optical couplers for      :                       |
|              : developmental and flight      :                       |
|              : stages                        :                       |
|----------------------------------------------------------------------|
| 4            : Synchronous RAM               : Russia                |
|----------------------------------------------------------------------|
| 5            : Microcircuit optical coupler  : Russia                |
|              : flight parts (radiation-      :                       |
|              : hardened) for service module  :                       |
|              : and functional energy block   :                       |
|              : matching unit requirements    :                       |
|----------------------------------------------------------------------|
| 6            : Hewlett Packard optical       : Russia                |
|              : coupler circuits              :                       |
|----------------------------------------------------------------------|
| 7            : Hatch assembly kits,          : Italy                 |
|              : including hatches, tracks,    :                       |
|              : trusses, and roller assemblies:                       |
|----------------------------------------------------------------------|
| 8            : Institute of Electrical and   : Germany               |
|              : Electronics Engineers         :                       |
|              : (Firewire) Ethernet           :                       |
|              : Hub/Gateway                   :                       |
|----------------------------------------------------------------------|
| 9            : Active and passive common     : Italy                 |
|              : berthing mechanism (CBM)      :                       |
|              : kits; CBM seal kits with      :                       |
|              : bold assemblies               :                       |
------------------------------------------------------------------------

a As shown, license 1 was amended six times.

EXAMPLES OF ISS-RELATED COMMODITIES EXPORTED IN 1998 UNDER NO LICENSE
REQUIRED AUTHORITY
===========================================================================

------------------------------------------------------------------------
| Description                      : Destination                       |
|----------------------------------------------------------------------|
| Articulating portable foot       : Canada                            |
| restraint for ISS                :                                   |
| extravehicular activity (EVA)    :                                   |
|----------------------------------------------------------------------|
| Seat track material to be used   : Russia                            |
| for evaluating ISS designs and   :                                   |
| for interfacing with seat track  :                                   |
| anchors                          :                                   |
|----------------------------------------------------------------------|
| Labels fabricated for National   : Japan                             |
| Space Development Agency of      :                                   |
| Japan flight in support of the   :                                   |
| ISS                              :                                   |
|----------------------------------------------------------------------|
| Protective caps to provide       : Canada                            |
| cover for ISS EVA-installed      :                                   |
| communication cable connector    :                                   |
|----------------------------------------------------------------------|
| Cable, Russian degassing pumps   : Russia                            |
| to support the Russian           :                                   |
| spacesuit unbiblical for         :                                   |
| flight/testing applications      :                                   |
|----------------------------------------------------------------------|
| Fans/hardware                    : Canada                            |
|----------------------------------------------------------------------|
| Bar code reader, laser           : Russia                            |
|----------------------------------------------------------------------|
| Camera equipment (35-70          : Russia                            |
| millimeter f2.8D lens, Nikon)    :                                   |
| in support of Russian segment    :                                   |
| imagery                          :                                   |
|----------------------------------------------------------------------|
| Terminal switching unit          : Russia                            |
|----------------------------------------------------------------------|
| Smith press station for          : Russia                            |
| training of ISS crews            :                                   |
|----------------------------------------------------------------------|
| 22-inch hand rails (class III)   : Russia                            |
| for ISS EVA training             :                                   |
|----------------------------------------------------------------------|
| Russian simplified aid for EVA   : Russia                            |
| rescue mockup                    :                                   |
|----------------------------------------------------------------------|
| Ammonium persulfate reservoir    : Russia                            |
| and acid reservoirs              :                                   |
|----------------------------------------------------------------------|
| Laptop computer                  : Russia                            |
|----------------------------------------------------------------------|
| Microfixtures                    : Canada                            |
|----------------------------------------------------------------------|
| On-board spacesuit control       : Russia                            |
| assembly                         :                                   |
------------------------------------------------------------------------

COMMENTS FROM THE NATIONAL AERONAUTICS AND SPACE ADMINISTRATION
===============================================================

*****************

*****************

*****************

*****************

*****************

*****************

*****************

*****************

*****************

*****************

The following are GAO's comments on the National Aeronautics and Space
Administration's (NASA) letter dated September 29, 1999.

GAO Comments

   1.We do not agree that the statement "NASA had no formalized export
         control policy when the International Space Station (ISS) Program
         began" is misleading. However, we have revised the text of the
         report to provide additional explanation. We believe that our
         report's background section accurately describes the status of
         the NASA export control policy when the ISS Program began as well
         as the current status of its export control plan for the ISS
         Program.

   2.In our opinion, the terminology "without license" is a more accurate
         characterization of the information that will be included in the
         database being developed.

   3.We believe that our report accurately states that none of the items
         on the bilateral exchange list are under State's export control
         jurisdiction.

   4.We have revised the text of the report to clarify this fact.

COMMENTS FROM THE DEPARTMENT OF COMMERCE
========================================

*****************

*****************

*****************

*****************

GAO Comments

The following are GAO's comments on the Department of Commerce's letter
dated October 21, 1999. 

1. We recognize that parties involved in the ISS Program have signed
Memorandums of Understanding (MOU). Signing these agreements is
recognition by the partners of their responsibility and obligation to
comply with the terms of the agreement. However, we believe a mechanism
that provides assurance that the partners are complying with the terms of
exports is a necessary step in NASA's implementation of its export control
policy. In our opinion, NASA's procedures for verifying that exports of
certain items are at their intended destinations do not provide adequate
assurance that the items are being used for the intended purpose.

(707379)

*** End of document. ***