ITAR compliance risks
Unauthorized exports included the transfer of technical data
Significant improvements to its export compliance program that reduce the likelihood of future violations, including conducting internal and independent audits, conducting staff training on the ITAR (including more extensive training for personnel directly involved in export compliance), creating a fully documented compliance program (with formal procedures, checklists, and a compliance manual), and significantly increasing staff resources devoted to day-to-day compliance (including retaining an outside consultant to provide expert advice where needed). These steps were taken after the fact and should have been in place to prevent.
Posting drawings on website or sending to foreign supplier for quote can constitute an export without a license and bring penalties. Bright Lights USA
https://www.pmddtc.state.gov/sys_attachment.do?sysparm_referring_url=tear_off&view=true&sys_id=715d7289db99db0044f9ff621f961939
training tutorial
https://www.sbir.gov/tutorials/itar/tutorial-1#