Directive on Security Screening

Ensures that security screening in the Government of Canada is conducted in a way that is effective, rigorous, consistent and fair, and enables greater transferability of security screening between departments.
Date modified: 2025-01-07

Supporting tools

Directive:

Mandatory procedures:

More information

Policy:

Terminology:

Topic:

Hierarchy
View complete hierarchy

Archives

This directive replaces:

View all inactive instruments
Print-friendly XML

Appendix G: Mandatory Procedures for Granting, Ongoing Maintenance and Assurance of the Security Screening of an Individual

G.1 Effective date

  • G.1.1These procedures take effect on January 6, 2025.
  • G.1.2These procedures replace the Standard on Security Screening: Appendix F – Aftercare dated October 20, 2014.

G.2 Procedures

  • G.2.1These procedures provide details on the requirements set out in subsections 4.1.1 and 4.6.1 of the Directive on Security Screening.
  • G.2.2The chief security officer and those with subordinate responsibilities must apply the mandatory procedures below as follows:

    Security briefings

    • G.2.2.1The security briefing must:
      • G.2.2.1.1Involve the manager of the individual or security officials;
      • G.2.2.1.2Inform the individual of their responsibilities under the Policy on Government Security, including at a minimum:
        1. Access permissions attached to their screening level;
        2. The security expectations related to their position, contract or other arrangement; and
        3. Shared security responsibilities within the organization;
      • G.2.2.1.3Be completed before an individual is provided access to sensitive information and assets, including IT systems and facilities;
      • G.2.2.1.4Be conducted in these circumstances:
        1. Following a decision to grant or grant with conditions;
        2. Whenever a change occurs in the security screening level of the individual;
        3. As required based on the update cycle as defined in at Annex G2 or Annex G3; and
        4. As determined by the department based on its security risk environment;
      • G.2.2.1.5Provide an opportunity for the individual to ask questions;
      • G.2.2.1.6Include the signing of the Security Screening Certificate and Briefing Form by the individual; and
        • G.2.2.1.6.1Be retained in the security screening file of the individual;
    • G.2.2.2Inform CSIS when a security clearance is granted, via form CSIS 4195 Notification of Security Clearance;

    Security awareness

    • G.2.2.3Conduct security awareness, in accordance with Appendix H: Mandatory Procedures for Security Awareness and Training Control of the Directive on Security Management, at minimum, as an outcome of the granting and updating phases of the security screening life cycle; and
      • G.2.2.3.1Inform individuals of the requirement to report changes in personal circumstances, including at minimum the following:
        1. Change in criminal record status;
        2. Involvement with law enforcement;
        3. Association with criminals; or
        4. A significant change in financial situation;
      • G.2.2.3.2Inform individuals who work in security or intelligence organizations of the requirements to report additional changes in their personal or legal status, including a change in marital status; and
      • G.2.2.3.3Inform managers how to report and to whom they are to report observed changes in behaviour of individuals for whom they are responsible;

    Recurring activities

    • G.2.2.4Review the security screening requirements of positions when new programs or activities are established or substantially modified and, at minimum, every five years; and:
      • G.2.2.4.1Inform security screening service providers of any changes in requirements;
    • G.2.2.5Conduct security screening activities for individual security screening files that meet the minimum frequencies, as prescribed in Annex G1;

    Updates

    • G.2.2.6Update the individual’s security screening prior to the end of their validity period, in addition to the conduct of recurring activities;
    • G.2.2.7Re-examine the reliability or loyalty of an individual since the individual was last granted a security status or clearance:
      • G.2.2.7.1Conduct the update process consistent with:
        • G.2.2.7.1.1Security Screening update cycles and the activities identified in Annex G2; or
        • G.2.2.7.1.2Site Access screening update cycles and the activities identified in Annex G3;
      • G.2.2.7.2Evaluate whether changes in personal circumstances pose a security risk;
      • G.2.2.7.3Determine the continued eligibility of an individual to hold a security status or clearance, based on the collective evaluation of security screening activities; and
      • G.2.2.7.4Provide a security briefing to inform the individual of their security responsibilities consistent with subsections G.2.2.1 and G.2.2.3;
    • G.2.2.8When an individual does not provide consent, withdraws consent or does not provide the required information, proceed in accordance with subsection B.2.2.5.2 of Appendix B: Mandatory Procedures for the Management of Personal Information for the Purpose of Security Screening;
    • G.2.2.9Repeat any security screening activity where:
      • G.2.2.9.1Required by the update cycle; or
      • G.2.2.9.2There is reason to believe:
        1. The activities were conducted improperly; or
        2. There is no documentation on the file of the initial conduct of the screening activities;

    Upgrades

    Downgrades

    • G.2.2.12When downgrading a valid status or clearance to a lower level:
      • G.2.2.12.1Provide a security briefing to inform the individual of their security responsibilities consistent with subsections G.2.2.1 and G.2.2.3;
        • G.2.2.12.1.1 Which includes informing individuals and managers that the individual may no longer access higher levels of sensitive information and assets, including IT systems and facilities;

    Security debriefing

Annex G1: Minimum Frequency for the Recurring Update of Security Screening Activities

Security screening activities Minimum frequency Security screening activities Minimum frequency

Reliability status

  • Nil

Not applicable

Enhanced Reliability status

  • Financial inquiry
  • Criminal record check
  • Internet inquiry

5 years

Secret clearance

  • Financial inquiry
  • Criminal record check

5 years

Enhanced Secret clearance

  • Financial inquiry
  • Criminal record check
  • Internet inquiry

5 years

Top Secret clearance

  • Financial inquiry
  • Criminal record check
  • Internet inquiry

3 years

Enhanced Top Secret clearance

  • Financial inquiry
  • Criminal record check
  • Internet inquiry

1 year

Annex G2: Security Screening Activities and Associated Minimum Update Requirements

Security screening activities Update requirement Security screening activities Update requirement

Reliability status

10 years

Enhanced Reliability status:

All activities for Reliability status plus:

  • Internet inquiry
  • Law enforcement records check
  • Security questionnaire or security interview

10 years

Secret clearance

All activities for Reliability status plus:

  • CSIS security assessment

10 years

Enhanced Secret clearance

All activities for Secret clearance plus:

  • Internet inquiry
  • Law enforcement records check
  • Security questionnaire or security interview

10 years

Top Secret clearance

All activities for Secret clearance plus:

  • Internet inquiry
  • Law enforcement records check
  • Security questionnaire or security interview
  • Foreign travel, foreign assets, character references, education, military service

5 years

Enhanced Top Secret clearance

All activities for Top Secret clearance plus:

  • Polygraph examination

5 years

Annex G3: Site Access Screening Activities and Associated Update Requirements

Site Access screening activities Update requirement
Site Access status
  • Updated application form covering period since last update
  • Criminal record check
 10 years: May be updated more frequently when employment, engagement, assignment, contract or arrangement has lapsed for 12 months or more

Site Access clearance

All activities for Site Access status plus:

  • CSIS security assessment

10 years: May be updated more frequently when employment, engagement, assignment, contract or arrangement has lapsed for 12 months or more

Additional activities

May be used in accordance with subsection A.2.2.10, “Position analysis for non-employees.”

All activities for Site Access clearance plus:

  • Internet inquiry
  • Law enforcement records check
  • Security questionnaire or security interview
  • Polygraph examination

10 years: May be updated more frequently when employment, engagement, assignment, contract or arrangement has lapsed for 12 months or more

"Page details"

Date modified: