ST0837

Source text

As written.

(15) Respondent will conduct a study to identify feasible enterprise improvements to maximize automation of the identification and tracking of ITAR-controlled technical data throughout Respondent's information technology infrastructure and otherwise safeguard ITAR-controlled data against unauthorized access within that infrastructure. On the basis of this study, Respondent will propose a plan to implement measures that will track, control, and record access to ITAR-controlled technical data by all users, including transfers onto laptops and portable storage devices, consistent with foreign privacy laws and any other technology or legal limitations. In drafting the proposed implementation plan, Respondent will seek to creatively minimize the impact of such limitations and will consult with the Director, DTCC prior to substantially circumscribing the scope of measures in the plan based on such limitations. Within one hundred twenty (120) days of the date of the Order, Respondent will submit the study results and its proposed plan for the implementation of such measures for approval by the Director, DTCC.

Related

Other DOS standards.