UMass High-Risk and Cyber Risk Travel Destinations

	Country	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Department of State Level 3	US Department of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33 Country of Concern
	Collaboration powered by Smartsheet   |   Report Abuse
1	A High-Risk Destination is any domestic or international country, region, province or city designated by the Systemwide Travel Risk Management Advisory Committee (TARMAC), or a campus, as posing substantive health, safety, security risk to a University Traveler and/or the University.	TARMAC High-Risk Destination Criteria	TARMAC Elevated Cybersecurity Risk Destination Criteria	Healix Risk Information	US Department of State Travel Advisories	US Department of State Travel Advisories	CDC Travel Health Notices	Country is comprehensively sanctioned	Country has significant restrictions on encryption	National Security Presidential Memorandum (NSPM)-33 identifies the country as a country of concern
2	(A)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
3	Afghanistan	Yes	Yes	C	No	C	No	No	No	No
4	Albania	No	No	No	No	No	No	No	No	No
5	Algeria	Yes	No	No	No	R	No	No	No	No
6	American Samoa	No	No	No	No	No	No	No	No	No
7	Andorra	No	No	No	No	No	No	No	No	No
8	Angola	Yes	No	R	No	No	No	No	No	No
9	Anguilla	No	No	No	No	No	No	No	No	No
10	Antarctica	No	No	No	No	No	No	No	No	No
11	Antigua and Barbuda	No	No	No	No	No	No	No	No	No
12	Argentina	No	No	No	No	No	No	No	No	No
13	Armenia	Yes	No	R	No	R	No	No	No	No
14	Aruba	No	No	No	No	No	No	No	No	No
15	Australia	No	No	No	No	No	No	No	No	No
16	Austria	No	No	No	No	No	No	No	No	No
17	Azerbaijan	Yes	No	R	No	No	No	No	No	No
18	(B)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
19	Bahamas	No	No	No	No	No	No	No	No	No
20	Bahrain	No	No	No	No	No	No	No	No	No
21	Bangladesh	Yes	No	R	C	R		No	No	No
22	Barbados	No	No	No	No	No	No	No	No	No
23	Belarus	Yes	Yes	No	No	C	No	No	Yes	No
24	Belgium	No	No	No	No	No	No	No	No	No
25	Belize	Yes	No	No	R	No	No	No	No	No
26	Benin	Yes	No	R	No	R	No	No	No	No
27	Bermuda	No	No	No	No	No	No	No	No	No
28	Bhutan	No	No	No	No	No	No	No	No	No
29	Bolivia	Yes	No	No	No	R	No	No	No	No
30	Bonaire, Sint Eustatius and Saba	No	No	No	No	No	No	No	No	No
31	Bosnia and Herzegovina	No	No	No	No	No	No	No	No	No
32	Botswana	No	No	No	No	No	No	No	No	No
33	Brazil	Yes	No	No	No	R	No	No	No	No
34	British Indian Ocean Territory	No	No	No	No	No	No	No	No	No
35	Brunei	No	No	No	No	No	No	No	No	No
36	Bulgaria	No	No	No	No	No	No	No	No	No
37	Burkina Faso	Yes	Yes	C	No	C	No	No	No	No
38	Burundi	Yes	No	C	C	R	No	No	No	No
39	(C)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
40	Cambodia	Yes	No	R	No	R	No	No	No	No
41	Cameroon	Yes	No	R	No	R	No	No	No	No
42	Canada	No	No	No	No	No	No	No	No	No
43	Cape/Cabo Verde	No	No	No	No	No	No	No	No	No
44	Cayman Islands	No	No	No	No	No	No	No	No	No
45	Central African Republic	Yes	Yes	C	No	C	No	No	No	No
46	Chad	Yes	No	R	C	R	No	No	No	No
47	Chile	No	No	No	No	No	No	No	No	No
48	China	Yes	Yes	No	R	No	No	No	Yes	Yes
49	Christmas Island (Australia)	No	No	No	No	No	No	No	No	No
50	Cocos [Keeling] Islands (Australia)	No	No	No	No	No	No	No	No	No
51	Colombia	Yes	Yes	R	C	R	No	No	No	No
52	Comoros	NO	No	No	No	No	No	No	No	No
53	Congo - Democratic Republic of	Yes	Yes	C	C	R	No	No	No	No
54	Congo - Republic of	No	No	No	No	No	No	No	No	No
55	Cook Islands (New Zealand)	No	No	No	No	No	No	No	No	No
56	Costa Rica	No	No	No	No	No	No	No	No	No
57	Cote d'Ivoire	Yes	No	R	No	R	No	No	No	No
58	Croatia	No	No	No	No	No	No	No	No	No
59	Cuba	Yes	Yes	No	No	No	No	Yes	No	No
60	Curacao	No	No	No	No	No	No	No	No	No
61	Cyprus	No	No	No	No	No	No	No	No	No
62	Czech Republic	No	No	No	No	No	No	No	No	No
63	(D)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
64	Denmark	No	No	No	No	No	No	No	No	No
65	Djibouti	Yes	No	No	R	No	No	No	No	No
66	Dominica	No	No	No	No	No	No	No	No	No
67	Dominican Republic	No	No	No	No	No	No	No	No	No
68	(E)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
69	East Timor [Timor-Leste]	No	No	No	No	No	No	No	No	No
70	Ecuador	Yes	No	R	R	R	No	No	No	No
71	Egypt	Yes	No	R	No	R	No	No	No	No
72	El Salvador	No	No	No	No	No	No	No	No	No
73	Equatorial Guinea	No	No	No	No	No	No	No	No	No
74	Eritrea	No	No	No	No	No	No	No	No	No
75	Estonia	No	No	No	No	No	No	No	No	No
76	eSwatini, Kingdom of	No	No	No	No	No	No	No	No	No
77	Ethiopia	Yes	No	R	C	R	No	No	No	No
78	(F)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
79	Falkland Islands (UK)	No	No	No	No	No	No	No	No	No
80	Faroe Islands (Denmark)	No	No	No	No	No	No	No	No	No
81	Fiji	No	No	No	No	No	No	No	No	No
82	Finland	No	No	No	No	No	No	No	No	No
83	France	No	No	No	No	No	No	No	No	No
84	French Guiana	No	No	No	No	No	No	No	No	No
85	French Polynesia	No	No	No	No	No	No	No	No	No
86	(G)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
87	Gaza Strip	Yes	No	C	No	C	No	No	No	No
88	Gabon	No	No	No	No	No	No	No	No	No
89	Gambia	No	No	No	No	No	No	No	No	No
90	Georgia	Yes	No	R	No	R	No	No	No	No
91	Germany	No	No	No	No	No	No	No	No	No
92	Ghana	Yes	No	No	R	No	No	No	No	No
93	Gibraltar	No	No	No	No	No	No	No	No	No
94	Greece	No	No	No	No	No	No	No	No	No
95	Greenland	No	No	No	No	No	No	No	No	No
96	Grenada	No	No	No	No	No	No	No	No	No
97	Guadeloupe	No	No	No	No	No	No	No	No	No
98	Guam	No	No	No	No	No	No	No	No	No
99	Guatemala	Yes	No	No	C	R	No	No	No	No
100	Guinea	Yes	No	R	No	No	No	No	No	No
101	Guinea-Bissau	Yes	No	No	C	No	No	No	No	No
102	Guyana	Yes	No	No	C	No	No	No	No	No
103	(H)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
104	Haiti	Yes	Yes	C	No	C	No	No	No	No
105	Holy See, The [Vatican City]	No	No	No	No	No	No	No	No	No
106	Honduras	Yes	No	C	C	R	No	No	No	No
107	Hong Kong	No	No	No	No	No	No	No	No	No
108	Hungary	No	Yes	No	No	No	No	No	Yes	No
109	(I)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
110	Iceland	No	No	No	No	No	No	No	No	No
111	India	Yes	No	R	R	R	No	No	No	No
112	Indonesia	Yes	No	R	No	R	No	No	No	No
113	Iran	Yes	Yes	R	No	C	No	Yes	Yes	Yes
114	Iraq	Yes	Yes	C	No	C	No	No	No	No
115	Ireland	No	No	No	No	No	No	No	No	No
116	Israel	Yes	Yes	R	C	R	No	No	Yes	No
117	Italy	No	No	No	No	No	No	No	No	No
118	(J)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
119	Jamaica	Yes	No	No	No	R	No	No	No	No
120	Japan	No	No	No	No	No	No	No	No	No
121	Jordan	Yes	No	R	R	R	No	No	No	No
122	(K)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
123	Kazakhstan	No	Yes	No	No	No	No	No	Yes	No
124	Kenya	Yes	No	R	R	R	No	No	No	No
125	Kiribati	No	No	No	No	No	No	No	No	No
126	Kosovo	Yes	No	No	R	No	No	No	No	No
127	Kuwait	Yes	No	No	No	R	No	No	No	No
128	Kyrgyzstan (The Kyrgz Republic)	Yes	No	R	R	No	No	No	No	No
129	(L)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
130	Laos	Yes	No	No	R	No	No	No	No	No
131	Latvia	No	No	No	No	No	No	No	No	No
132	Lebanon	Yes	Yes	C	No	C	No	No	No	No
133	Lesotho	No	No	No	No	No	No	No	No	No
134	Liberia	No	No	No	No	No	No	No	No	No
135	Libya	Yes	Yes	C	No	C	No	No	No	No
136	Liechtenstein	No	No	No	No	No	No	No	No	No
137	Lithuania	No	No	No	No	No	No	No	No	No
138	Luxembourg	No	No	No	No	No	No	No	No	No
139	(M)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
140	Macau	Yes	No	No	C	No	No	No	No	No
141	Madagascar	Yes	No	No	C	No	No	No	No	No
142	Malawi	No	No	No	No	No	No	No	No	No
143	Malaysia	No	No	No	No	No	No	No	No	No
144	Maldives	No	No	No	No	No	No	No	No	No
145	Mali	Yes	Yes	C	No	C	No	No	No	No
146	Malta	No	No	No	No	No	No	No	No	No
147	Marshall Islands	No	No	No	No	No	No	No	No	No
148	Martinique	No	No	No	No	No	No	No	No	No
149	Mauritania	Yes	Yes	R	C	R	No	No	No	No
150	Mauritius	No	No	No	No	No	No	No	No	No
151	Mayotte (France)	No	No	No	No	No	No	No	No	No
152	Mexico	Yes	No	R	R	R	No	No	No	No
153	Micronesia	No	No	No	No	No	No	No	No	No
154	Moldova, Republic of	Yes	Yes	No	R	No	No	No	Yes	No
155	Monaco	No	No	No	No	No	No	No	No	No
156	Mongolia	No	No	No	No	No	No	No	No	No
157	Montenegro	No	No	No	No	No	No	No	No	No
158	Montserrat	No	No	No	No	No	No	No	No	No
159	Morocco	No	Yes	No	No	No	No	No	Yes	No
160	Mozambique	Yes	No	R	No	R	No	No	No	No
161	Myanmar (Burma)	Yes	Yes	C	No	C	No	No	Yes	No
162	(N)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
163	Namibia	No	No	No	No	No	No	No	No	No
164	Nauru	No	No	No	No	No	No	No	No	No
165	Nepal	Yes	No	C	C	No	No	No	No	No
166	Netherlands	No	No	No	No	No	No	No	No	No
167	New Caledonia	Yes	No	No	C	No	No	No	No	No
168	New Zealand	No	No	No	No	No	No	No	No	No
169	Nicaragua	Yes	No	No	C	No	No	No	No	No
170	Niger	Yes	No	C	C	R	No	No	No	No
171	Nigeria	Yes	No	C	C	R	No	No	No	No
172	Niue	No	No	No	No	No	No	No	No	No
173	Norfolk Island (Australia)	No	No	No	No	No	No	No	No	No
174	North Korea	Yes	Yes	No	No	C	No	Yes	No	Yes
175	North Macedonia	No	No	No	No	No	No	No	No	No
176	Northern Mariana Islands	No	No	No	No	No	No	No	No	No
177	Norway	No	No	No	No	No	No	No	No	No
178	(O)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
179	Oman	Yes	No	No	No	R	No	No	No	No
180	(P)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
181	Pakistan	Yes	No	C	C	R	No	No	No	No
182	Palau	No	No	No	No	No	No	No	No	No
183	Panama	Yes	No	No	No	R	No	No	No	No
184	Papua New Guinea	Yes	No	C	C	R	No	No	No	No
185	Paraguay	No	No	No	No	No	No	No	No	No
186	Peru	Yes	No	R		R	No	No	No	No
187	Philippines	Yes	No	R	R	R	No	No	No	No
188	Pitcairn	No	No	No	No	No	No	No	No	No
189	Poland	No	No	No	No	No	No	No	No	No
190	Portugal	No	No	No	No	No	No	No	No	No
191	Puerto Rico	No	No	No	No	No	No	No	No	No
192	(Q)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
193	Qatar	No	No	No	No	No	No	No	No	No
194	(R)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
195	Reunion	No	No	No	No	No	No	No	No	No
196	Romania	No	No	No	No	No	No	No	No	No
197	Russia	Yes	Yes	R	No	C	No	Yes	Yes	Yes
198	Rwanda	Yes	No	No	No	R	No	No	No	No
199	(S)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
200	Saba	No	No	No	No	No	No	No	No	No
201	Saint Barthelemy	No	No	No	No	No	No	No	No	No
202	Saint Helena	No	No	No	No	No	No	No	No	No
203	Saint Kitts and Nevis	No	No	No	No	No	No	No	No	No
204	Saint Lucia	No	No	No	No	No	No	No	No	No
205	Saint Martin (French part)	No	No	No	No	No	No	No	No	No
206	Saint Pierre and Miquelon	No	No	No	No	No	No	No	No	No
207	Saint Vincent and the Grenadines	No	No	No	No	No	No	No	No	No
208	Samoa	No	No	No	No	No	No	No	No	No
209	San Marino	No	No	No	No	No	No	No	No	No
210	Sao Tome and Principe	No	No	No	No	No	No	No	No	No
211	Saudi Arabia	Yes	Yes	R	No	R	No	No	Yes	No
212	Senegal	No	No	No	No	No	No	No	No	No
213	Serbia	No	No	No	No	No	No	No	No	No
214	Seychelles	No	No	No	No	No	No	No	No	No
215	Sierra Leone	No	No	No	No	No	No	No	No	No
216	Singapore	No	No	No	No	No	No	No	No	No
217	Sint Maarten (Dutch part)	No	No	No	No	No	No	No	No	No
218	Slovakia	No	No	No	No	No	No	No	No	No
219	Slovenia	No	No	No	No	No	No	No	No	No
220	Solomon Islands	No	No	No	No	No	No	No	No	No
221	Somalia	Yes	Yes	C	No	C	No	No	No	No
222	South Africa	No	No	No	No	No	No	No	No	No
223	South Georgia & South Sandwich Islands	No	No	No	No	No	No	No	No	No
224	South Korea	No	No	No	No	No	No	No	No	No
225	South Sudan	Yes	Yes	C	No	C	No	No	No	No
226	Spain	No	No	No	No	No	No	No	No	No
227	Sri Lanka	No	No	No	No	No	No	No	No	No
228	Sudan	Yes	Yes	C	No	C	No	No	No	No
229	Suriname	No	No	No	No	No	No	No	No	No
230	Svalbard and Jan Mayen	No	No	No	No	No	No	No	No	No
231	Sweden	No	No	No	No	No	No	No	No	No
232	Switzerland	No	No	No	No	No	No	No	No	No
233	Syria	Yes	Yes	C	No	C	No	Yes	No	No
234	(T)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
235	Taiwan	No	No	No	No	No	No	No	No	No
236	Tajikistan	Yes	No	R	R	No	No	No	No	No
237	Tanzania	Yes	No	No	R	No	No	No	No	No
238	Thailand	Yes	No	R	No	R	No	No	No	No
239	Togo	Yes	No	R	No	R	No	No	No	No
240	Tokelau	No	No	No	No	No	No	No	No	No
241	Tonga	No	No	No	No	No	No	No	No	No
242	Trinidad and Tobago	Yes	No	No	C	No	No	No	No	No
243	Tunisia	Yes	Yes	R	No	R	No	No	Yes	No
244	Turkey	Yes	No	R	No	R	No	No	No	No
245	Turkmenistan	No	No	No	No	No	No	No	No	No
246	Turks and Caicos Islands	No	No	No	No	No	No	No	No	No
247	Tuvalu	No	No	No	No	No	No	No	No	No
248	(U)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
249	Uganda	Yes	No	R	C	No	No	No	No	No
250	Ukraine	Yes	Yes	C	No	C	No	Yes	Yes	No
251	United Arab Emirates	No	No	No	No	No	No	No	No	No
252	United Kingdom	No	No	No	No	No	No	No	No	No
253	United States	No	No	No	No	No	No	No	No	No
254	Uruguay	No	No	No	No	No	No	No	No	No
255	Uzbekistan	Yes	No	R	No	No	No	No	No	No
256	(V)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
257	Vanuatu	No	No	No	No	No	No	No	No	No
258	Venezuela	Yes	Yes	C	No	C	No	No	No	No
259	Vietnam	No	No	No	No	No	No	No	No	No
260	Virgin Islands, British	No	No	No	No	No	No	No	No	No
261	Virgin Islands, U.S.	No	No	No	No	No	No	No	No	No
262	(W)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
263	Wallis and Futuna	No	No	No	No	No	No	No	No	No
264	West Bank	Yes	No	C	R	No	No	No	No	No
265	Western Sahara	No	No	No	No	No	No	No	No	No
266	(Y)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
267	Yemen	Yes	Yes	C	No	C	No	No	No	No
268	(Z)	Meets TARMAC High Risk Destination Criteria	Meets TARMAC Elevated Cyber Risk Criteria	Healix Countrywide or Regional Level 4 or 5	US Dept of State Level 3	US Dept of State Level 4	CDC Level 3 or 4	Comprehensively Sanctioned Country	Encryption Restrictions	NSPM-33
269	Zambia	No	No	No	No	No	No	No	No	No
270	Zimbabwe	No	No	No	No	No	No	No	No	No
271
272	KEY
273	Last updated 10/3/2025
274	C = Countrywide Rating
275	R = Regional Rating
276	Country is designated as a high-risk destination but not an elevated cybersecurity risk destination
277	Country is designated as an elevated cybersecurity risk destination, but not a high-risk destination
278	Country is designated as both a high-risk and an elevated cybersecurity risk destination