What are the practices that I should employ for protecting the export controlled information?
• Laboratory work should be physically shielded from observation by operating in secured laboratory spaces or during secure time blocks when observation by unauthorized persons is preventable. • Data, lab notebooks, hard copy reports, and research materials are held in locked, fireproof cabinets which are located in rooms with key-controlled access. • Electronic communications and all databases are managed via a type of virtual private network specifically a Secure Socket layer (SSL) which limits access to authorized users only and facilitates exchanges between those authorized users while encrypting (128 bit encryption) any data sent via Internet. • Discussions about the project or work products are limited to the identified contributing investigators and are held only in areas where unauthorized persons are not present. • Discussions with third-party subcontractors, such as identified manufacturing sites, are only conducted under signed confidentiality agreements and fully respecting
