The regulatory scheme that defines how weapons are exchanged between the signatories, and that also addresses cyber weapons, including malicious software, Command and Control (C2) software, and internet surveillance software, is the Wassenaar arrangement. The Wassenaar arrangement is an international multilateral export control regime that aims to promote transparency and responsibility in the transfer of conventional arms and dual-use goods and technologies, which are goods and technologies that can have both civilian and military applications. The Wassenaar arrangement also covers cyber weapons, such as malicious software, C2 software, and internet surveillance software, which are goods and technologies that can be used to conduct cyberattacks or cyber espionage. The Wassenaar arrangement requires the signatories to report and control the export of the cyber weapons, and to prevent the proliferation or misuse of the cyber weapons
. References: [CISSP CBK, Fifth Edition, Chapter 2, page 95]; [CISSP Practice Exam - FREE 20 Questions and Answers, Question 18].