After 6 years of working towards this moment, after dozens of web conferences with DOD staff, DIBCAC Staff and all sorts of experts, after reading hundreds of documents and revisions, after paying companies tens of thousands of dollars, I was told, during the last hour, of the last day, in our JSV audit, that all ITAR, for the gov., is CUI. First time anyone has shared that knowledge with me. Also, Preveil is not currently compliant. So thanks to Preveil we are probably going to have a negative score on our audit. Just hope I don't loose my job over this. Crazy that a company that sells compliance would fall out of it and not inform any of their customers.