INDUSTRIAL SECURITY PROGRAM GUIDE

1 INDUSTRIAL SECURITY PROGRAM GUIDEORGANIZATION SECURITY SCREENINGI nformation and AssetsOrganization ScreeningPersonnel SECURITY ScreeningCLASSIFIEDN ational InterestTop SecretFacility SECURITY ClearanceTop SecretSecretSecretPROTECTED Non-national InterestProtected C Designated Organization Screening Reliability StatusProtected BProtected ADesignated Organization Screening (DOS)Step 1: Obtain a Procurement Business Number (PBN). In order to do this, you need to register in the Supplier Registration Information (SRI) System. Things that may hold up this step: Incorrect Business Number identification (The first nine digits of your GST/HST number).

2 Is your Business Name up-to-date with CRA? This MUST be 2: Approved Source recognized by the ISP requests your organization s SECURITY screening by submitting a request for Private Sector Organization Screening (PSOS) to the ISP. Approved Sources include a government procurement officer (Find one here), a GC SECURITY officer or project manager leading a project on which you bid or intend to bid on or a National and Designated SECURITY Authorities on behalf of a foreign company or government that is contracting to your 3: After receiving a valid PSOS request from an approved source, the ISP will contact the organization via email or post to request information including: Information on your organization including structure, ownership, and legal status.

3 The appointment of a Company SECURITY Officer (CSO) and Alternate Company SECURITY Officer (see link for information about the duties of a CSO and how to appoint them) The relevant personnel SECURITY screening forms and accompanying documentation for the CSO and ACSO. The forms for the CSO must be accompanied by clear copies of two pieces of photo ID front and back. Acceptable pieces of identification are: Passport, Citizenship Card, Driver s License, Permanent Resident card, and other government ID issued in Canada containing the date of birth Identification of owners, directors, officers, or partners, referred to as Key Senior Officials (KSO s).

4 While these individuals do not need to be cleared for an organization screening at this level, they still need to be identified as part of the organization assessment. If the contract requires you to store or process Protected information at your site, the ISP will schedule a Field INDUSTRIAL SECURITY Officer to inspect and approve physical SECURITY and/or information technology SECURITY at the organization s site. You may be required to implement additional SECURITY measures at your organizations site in order to meet these contractual 4: Once the ISP has received all of the required documentation they will begin the SECURITY screening process for the CSO and ACSO.

5 If any additional information is required in order to complete these screenings, for example fingerprints, you will be contacted. ISP will send the Signed SECURITY Agreement and the CSO or Alternate CSO Attestation Form to be signed and returned to SECURITY PROGRAM GUIDE - page 2 Step 5: If no further information is required, the ISP advises the organization via clearance letter that the DOS has been granted. You should retain a copy of this letter for your records. You are now eligible to work on contracts at the PROTECTED level. This clearance is subject to renewal every 3 years.

6 Facility SECURITY Clearance (FSC)Step 1: Obtain a Procurement Business Number (PBN). In order to do this, you need to register in the Supplier Registration Information (SRI) 2: Approved Source recognized by the ISP requests your organization s SECURITY screening by submitting a request for Private Sector Organization Screening (PSOS) to the ISP. Approved Sources include a government procurement officer (Find one here), a GC SECURITY officer or project manager leading a project on which you bid or intend to bid on or a National and Designated SECURITY Authorities on behalf of a foreign company or government that is contracting to your 3: After receiving a valid PSOS request from an approved source, the ISP will contact the organization via email or post to request information including.

7 Identification and assessment of ownership Identification of owners, directors, officers, or partners and selection of Key Senior Officials (KSO). Key Senior Officials can be defined as owners, officers, directors (Board), executives and partners who occupy a position which may enable them to influence your organization s policies or practices in the performance of Protected and Classified contracts. For example, a KSO can be an individual from your organization who sits on the Board of Directors but is not involved in day to day management. The appointment and SECURITY screening of a Company SECURITY Officer (CSO) and Alternate Company SECURITY Officer (see link for information about the duty of a CSO and how to appoint them) The relevant personnel SECURITY screening forms and accompanying documentation for the CSO, ACSO and KSO s.

8 These individuals must be cleared to the same level as the FSC. The forms for the CSO must be accompanied by clear copies of two pieces of photo ID front and back. Acceptable pieces of identification are: Passport, Citizenship Card, Driver s License, Permanent Resident card, and other government ID issued in Canada containing the date of birth If the contract requires you to store or process Protected or Classified information at your site, the ISP will schedule a Field INDUSTRIAL SECURITY Officer to inspect and approve physical SECURITY and/or information technology SECURITY at the organization s site.

9 You may be required to implement additional SECURITY measures at your organizations site in order to meet these contractual 4: The organization s CSO will identify employees that require access to work on the contract and will take the following steps: Check the employee s identity (two pieces of identification). Acceptable pieces of identification are: Passport, Citizenship Card, Driver s License, Permanent Resident card, and other government ID issued in Canada containing the date of birth Ensure the employee fills out the screening forms provided by ISP correctly Verify employee s date of birth, address, education/professional qualifications, employment history, and personal references Review the form for missing information, including signatures and initials.

10 Use the CSO tools the ISP has created such as most common mistakes and form check lists to help ensure the forms are completed properly before sending them to the ISP. Forms that are not completed properly will be rejected. Submit the completed forms directly to the ISPI ndustrial SECURITY PROGRAM GUIDE - page 3 If any part of the screening forms are filled out incorrectly it will hold up the process. : The applicant s family name at birth is not provided Nicknames are provided as given names ( Bill instead of William, Tom instead of Thomas, ) Where the applicant has entered Canada within the last 5 years, a copy of the applicant s immigration paper is not included in the hard copy documentation There are gaps in the applicant s residence history (certain periods are not accounted for) Boxes are used as addresses (this is not acceptable)