Sounds like standard operating procedure for Classified programs. Everything is either printed and brought in, or burned to a CD-R and virus scanned and then brought in.