Does "having a second person" even really lend itself to prevent spy-leaks though?
I'm imagining an embedded spy with access to this data wouldn't have to work too hard to circumvent such seemingly honor-based access systems.
I'm imagining an embedded spy with access to this data wouldn't have to work too hard to circumvent such seemingly honor-based access systems.
For starters, disable all USB ports other than on dedicated systems that are closely monitored. Then you can physically (with a guard at the door), verify that no data is copied out without a second person signing in with the person doing the copying, and signing out the data being copied. Add on electronic restrictions requiring acknowledgement from a second person, and regular audits of who takes out what, and it'd be a lot harder to get data out without finding someone to help you, knowingly or not.
There will always be workarounds, but you can at least make people put in more efforts into doing things that increases the chance they'll be noticed.