yes and we were C2 cert in 2001. I was in charge of compliance. The PCs were locked in metal cabinets, cables shielded, all hardware ports disabled, no physica

yes and we were C2 cert in 2001. I was in charge of compliance. The PCs were locked in metal cabinets, cables shielded, all hardware ports disabled, no physical connection anywhere to the internet, vpn+checkpoint to other sites which were also C2, software was all source vetted and escrowed before being allowed on the network, crypto everywhere. Factory floor was shielded as well to prevent RF escaping, datacentre was three gated inside the facility and there were lockdown pads and access control both biometric and smartcard on every door. The software eng was the same except even heavier locked down with GPO and LSP. We could have put an apple II in there and it'd be C2.