Where should the type information be: in tags and descriptors 422

that is for gov. work.

there was a situation involving industrial espionage and theft of product secrets. there was some claim (in civil court action aspect of the siutation) that several billion dollars in revenue was at stake. as i understand it, the court made some statement about 1) attractive target (akin to the swimming pool argument, people aren't capable of resisting the temptation of several billion dollars)) and 2) having to demonstrate security proportional to what is at risk (if you are going to claim that several billion dollars is at risk ... you have to demonstrate security procedures proportional to what is at risk).

slightly different post on security proportional to risk:

for more drift ... engineering testcells in bldg. 14

bldg. was inside perimeter fence ... with door badge readers on the bldg. and additional door badge readers on interior machine room (which included motion-intrusion detection stuff).

inside the machine room were the "testcells" ... in addition to being organized for testing ... a testcell was inside a mini-room (maybe 6ft sq) composed of heavy-guage steel mesh (sides and top, bottom was solid metal sheet). door to each "testcell" had high-security, four number combination lock.

there was some separate commercial security for offices on exterior walls with windows. the windows had special "vibrators" (countermeasure for reflected beam off the window being able to decode interior sound ... aka reproduce vocal converstation). The sheetrock on the walls were replaced with a special version that had thin lead lining.

--