One of the small manufacturing OSC's we work will be employing individuals that would be classified as "Foreign Persons." These positions don't need access to any CUI/ITAR data as part of their position responsibilities, and we will prevent any user accounts from accessing this data. However, we've previously defined the entire building as a "controlled area" (access control mechanisms, limiting visitor access, etc.). In particular, the shop floor has OT (SAs) that may have CUI data, and we certainly have printed CUI media following parts around in this area.

Redefining what our controlled areas are will likely not be feasible, as these employees will need to be in these areas to complete their work. Nor would it be feasible for them to employ another person to escort them around all the time. What other options would this OSC have to stay in compliance?