As of July 2009, the Government of Canada Security Policy (GSP) has been replaced by the Policy on Government Security (PGS)

COMPLIANCE INFORMATION

The most significant is that the new PGS elevates the responsibility of establishing and maintaining the departmental program to the Deputy Head from the Departmental Security Officer (DSO).

COMPLIANCE TIMETABLE

The transition period for full implementation of the related control objectives and requirements began July 1, 2009, and will end June 31, 2012.

BACKGROUND

Originally issued in 1986, the Government Security Policy (GSP) has been the top-tier policy instrument establishing the minimum requirements for departments and agencies of the Government of Canada. This function is maintained by the Policy on Government Security (PGS) and is supported by the new Directive on Departmental Security Management and the established Operational Security Standards.

Policy on Government Security (PGS)

Made effective on July 1st, 2009 the Policy on Government Security (PGS) replaced the Government Security Policy (GSP) as the pre-eminent and superior federal document describing the mandatory activities and actions to be undertaken by all departments and agencies of the Government of Canada with respect to security and security risk mitigation.

The PGS is supported by Directives and Operational Security Standards, which together describe the precise processes, roles and responsibilities, and activities to be taken and the timetable for compliance with these requirements.

Applicable Directives

These Directives support the PGS by detailing specific and topical requirements to be achieved by each department and agency of the Government of Canada.

1. Controlled Goods Directorate (CGD)
2. Directive on Departmental Security Management (new)
3. Directive on Identity Management (new)
4. Directive on Information Management Roles and Responsibilities

Operational Security Standards

These Standards support the PGS and detail precise minimum levels of performance expected for security and related activities necessary to achieve the government-wide standard of practice for each of these security and risk disciplines.

1. Business Continuity Planning (BCP)
2. Management of Information Technology (IT) Security (MITS)
3. Personnel Security
4. Physical Security
5. Readiness Levels for Federal Government Facilities
6. Security in Contracting

SUMMARY

Sentinel House senior staff have been working with the Government Security Policy for 20 years and we have the experience, skill, and knowledge to help any government department or agency assess, plan, design, implement, and manage the transition from GSP compliance to PGS compliance.

Please contact Sentinel House for a comprehensive discussion on the change in security and risk mitigation requirements for your government organization.