The purpose of this standard is to assist printed board (PB) manufacturers in the development of requirements for the protection of intellectual property (IP) for their customers in commercial, industrial, and military and other high reliability markets. This standard will focus on protection of the inherent IP designed into the printed board such that IP flows from the customer to the PB manufacturer and IP that is incorporated into the PB is protected. Patent and other such “forever protection” of the manufactured product is beyond the scope of this document. This kit contains CD-ROM (PDF File) and a Book. Number of Pages: 15

1.2 Levels of Intellectual Property Protection
This standard recognizes that electrical and electronic products are subject to
classifications by intended end-item use. Additionally, different manufacturers may desire different levels of IP protection.
Three levels of IP protection have been established to reflect the differences in IP protection.

1.3 Selection of IP Level
The user is responsible for selecting the desired level of IP protection. The procurement documentation or data package shall state the IP level and any exceptions to specific parameters, where appropriate. Criteria defined in this document reflect three classes, which are as follows.

1.3.1 Level 1: Basic Intellectual Property Protection
This level of requirements provides good intellectual property protection and is best suited for high volume consumer goods. Items may be manufactured globally under Level 1 IP protection.

1.3.2 Level 2: High Intellectual Property Protection
This level of requirements provides a higher level of intellectual property protection and is best suited for high value goods. In most cases, items may be manufactured globally under Level 2 IP protection.

1.3.3 Level 3: Advanced Level for Military, Government, and Commercial Intellectual Property Protection
This level of requirements provides the highest intellectual property protection and is best suited for military and other high security systems. Items manufactured under Level 3 IP protection must be manufactured in the United States or in a State Department and DoD (or other appropriate government agency) approved location under the strict supervision of employees with U.S. or other required citizenship or residency status.

2 REFERENCE DOCUMENTS

2.1 International Traffic in Arms Regulations (ITAR)
The ITAR is a set of extraterritorial United States government regulations that implements the provisions of the Arms Export Control Act (AECA), as prescribed in 22 CFR Parts 120–130.1 The ITAR regulates the permanent and temporary export, re-export and temporary import of defense articles, technical data and defense services on the United States Munitions List (USML). The Department of State’s Directorate of Defense Trade Controls (DDTC) interprets and enforces the ITAR. Its goal is to safeguard U.S. national security and to further U.S. foreign policy objectives.

2.2 Export Administration Regulations (EAR)
The EAR is a set of extraterritorial United States government regulations that implement the provisions of the Export Administration Act of 1979, as amended 50 U.S.C. app. 2401–2420 (EAA), as prescribed in 15 CFR Parts 730–780.2 The EAR regulates the permanent and temporary export, re-export and temporary import of dual-use and commercial items, technology and services on the Commerce Control List (CCL). The Department of Commerce’s Bureau of Industry and Security (BIS) interprets and enforces the EAR. Its goal is to advance U.S. national security, foreign policy, and economic objectives.

TABLE OF CONTENTS

1 SCOPE
1.1 Purpose
1.2 Levels of Intellectual Property Protection 1
1.3 Selection of IP Level 1
1.3.1 Level 1: Basic Intellectual Property
Protection .1
1.3.2 Level 2: High Intellectual Property Protection 1
1.3.3 Level 3: Advanced Level for Military, Government,
and Commercial Intellectual Property
Protection .1

2 REFERENCE DOCUMENTS
2.1 International Traffic in Arms Regulations
(ITAR) .1
2.2 Export Administration Regulations (EAR) .1
2.3 Sarbanes-Oxley Act of 2002 .2
2.4 ISO/IEC 27002:2005, Information technology –
Security techniques – Code of practice for
information security management .2
2.5 MIL-PRF-31032, General Specification for Printed
Circuit Board/Printed Wiring Boards 2
2.6 AS9100, Quality Management Systems –
Requirements for Aviation, Space and
Defense Organizations .2
2.7 Directive-Type Memorandum (DTM) 08–027 –
Security of Unclassified DoD Information on
Non-DoD Information Systems 2

3 TERMS AND DEFINITIONS

4 PRINTED BOARD BEST PRACTICES
4.1 Corporate Policy .3
4.1.1 Intellectual Property Policy (IPP) Document 3
4.1.2 Identification of Risks 3
4.1.3 Employee Responsibilities .3
4.1.4 Management Responsibilities .4
4.2 Audits and Monitoring .4
4.3 IP Security Officer 4
4.3.1 Level 3 Requirements 4
4.4 Employee Training 4
4.4.1 Social Engineering and Phishing .4
4.5 New Employees 5
4.5.1 Level 2 Requirements 5
4.5.2 Level 3 Requirements 5
4.6 Legal Safeguards .5
4.6.1 Non-Disclosure Agreements .5
4.7 Supply Chain and Vendor Management.6
4.8 Import and Export Practices .6
4.8.1 Level 1 Requirements 6
4.8.2 Level 2 and Level 3 Requirements 6
4.9 Facility Access 6
4.9.1 Physical Access 6
4.9.2 Vendor Access 7
4.9.3 Permitted Electronics .7
4.10 Controlling Information Access 7
4.10.1 Access to Controlled Information .7
4.10.2 Information System User Access Management
4.10.3 Pre-Publication Review .8
4.10.4 User Responsibilities .8
4.10.5 Termination of Access .8
4.10.6 Data Management .8
4.10.7 Information Systems 9
4.11 Emergency Procedures 9
4.12 Documentation9
4.13 Work in Progress .9
4.14 Phototools 10
4.15 Product Marking .10
4.15.1 Level 2 and Level 3 Requirements 10
4.15.2 Full Marking .0
4.16 Sample Materials 11
4.17 Destruction of Scrap Materials 11