|
|
|
|
|
by Jtsummers
1033 days ago
|
|
I've worked in or with companies doing mixed ITAR and non-ITAR work for my whole career, they've all managed it pretty well. If you have competent HR they mark people as ITAR-eligible or not. If you have competent facilities people, they install prox card readers or cipher locks for physical access control (if it's a shared space, if you can have separate buildings may not be necessary). And if you have competent IT folks, they use standard access control mechanisms to segregate ITAR data and ensure only ITAR folks (really, this is easy because it should just be project folks) can access it. Is it a pain? Yes. But honestly other than HR tracking ITAR/non-ITAR people it's things everyone does already. You have physical access controls to keep people out of areas that don't need to be in them, and you use digital access controls for the same in your data systems today. So one extra group has to track one extra flag (ITAR/non-ITAR) and otherwise everything works as it already works. |
|