A personnel/user database implementing EAR/ITAR-compliant access controls to a project information system

The Jet Propulsion Laboratory (JPL), a Federally Funded Research and Development Center (FFRDC) under contract to NASA, must comply with all Federal statutes and regulations applicable to import and export control. Specific controls include the Export Administration Regulations (EAR), International Traffic in Arms Regulations (ITAR), and the Code of Federal Regulations (CFR), which apply to dissemination of information. Implementing EAR- and ITAR-compliance in a complex information system environment with stringent cost constraints dictates a simple, cost-effective implementation that is easily modifiable for a variety of projects. NASA's Space Infrared Telescope Facility (SIRTF) project recently developed and implemented a combined EAR/ ITAR-compliant access request and project personnel database at its JPL project office. This paper describes the approach used in designing the SIRTF prototype, explains the adaptability of the database to varying levels of project complexity, and discusses lessons learned.