I think they mean that two people must be working together at all times whenever dealing with classified information.
You can't even access your own work computer without another person present.
It works. It's just extremely inefficient.
You can't even access your own work computer without another person present.
It works. It's just extremely inefficient.
That will leave a handful of system that do have external media. Those will have extreme access restrictions - at a minimum account restrictions and audit logs that will be regularly correlated with a hand-written log that contains timestamps and signatures of both people. They may even put the system in a room with keycard access that requires two different keycards and associated PINs to be entered before the door opens.
It goes without saying that their entire operational network is firewalled with an air-gap. If a user needs to have internet (or other extranet) access from the same desk as their operational network, they will have an entirely separate terminal for it, they may even have rules that require a minimum distance between the two terminals.
Of course, setting it up as a security measure would take rather more work.