It looks like you're using an Ad Blocker.
Please white-list or disable AboveTopSecret.com in your ad-blocking tool.
Thank you.
Some features of ATS will be disabled while you continue to use an ad-blocker.
(g) "Need for access" means a determination that an
employee requires access to a particular level of classified
information in order to perform or assist in a lawful and
authorized governmental function.
(h) "Need-to-know" means a determination made by an
authorized holder of classified information that a prospective
recipient requires access to specific classified information
in order to perform or assist in a lawful and authorized
governmental function.
Sec. 1.2. Access to Classified Information. (a) No
employee shall be granted access to classified information
unless that employee has been determined to be eligible in
accordance with this order and to possess a need-to-know.
What is PROTECTED information?
PROTECTED is a Canadian term meaning information and assets related to other than the national interest that may qualify for an exemption or exclusion under the Access to Information Act or Privacy Act. There are three levels of PROTECTED information: PROTECTED A; PROTECTED B; and, PROTECTED C.
These levels are defined as follows:
A subset of PROTECTED information and assets that could reasonably be presumed to cause injury if compromised may be marked PROTECTED A
A subset of PROTECTED information and assets that could reasonably be expected to cause serious injury if compromised may be marked PROTECTED B.
A subset of PROTECTED information and assets that could reasonably be presumed to cause extremely serious injury, such as loss of life, if compromised may be marked PROTECTED C.
What is CLASSIFIED information and assets?
CLASSIFIED is an international term. In Canada, CLASSIFIED information and assets means information related to the national interest that may qualify for an exemption or exclusion under the Access to Information Act or Privacy Act and the compromise of which would reasonably be expected to cause injury to the national interest. There are three levels of classification: CONFIDENTIAL, SECRET, and, TOP SECRET.
These levels of classification are defined in Canada as:
CONFIDENTIAL - level of classification that applies to information and assets which when compromised could reasonably be expected to cause injury to the national interest.
SECRET - level of classification that applies to information and assets which when compromised could reasonably be expected to cause serious injury to the national interest.
TOP SECRET - level of classification that applies to information and assets which when compromised could reasonably be expected to cause exceptionally grave injury to the national interest.
Who decides what information and assets are considered CLASSIFIED / PROTECTED?
The originator of the information and assets determines the level of security. The levels of security of information and assets to be released to suppliers is identified in the Security Requirements Check List (SRCL) included in contractual documentation. If you are in doubt about any information in this area, contact CIISD.
What special physical security measures are required for a Classified/Protected contract?
The requirements will be dictated by the information and assets to be released to the private sector organization by the Government or produced by the organization. The physical security measures could vary from a locked cabinet in an open office to constructing a special security area which has stringent access controls, 24-hour monitoring, specialized security containers and other physical security considerations.
Information designated as Protected A and Protected B transmitted externally (Internet) must be encrypted.
All Protected C information must be encrypted for both internal and external (Internet) transmission. Due to the high sensitivity requirements, the strength of the encryption system, in unison with other safeguards, is important.