Security Information Online Management System

From: Communications Security Establishment

Overview and PIA Initiation

Government institution

Communications Security Establishment (CSE)

Name and description of the program or activity of the Government institution

Personnel and Physical Security programs within the Corporate Security Directorate at CSE provide assurance on the trustworthiness, reliability, suitability and loyalty of individuals who are starting or continuing work at CSE through means of security screenings and associated activities.

Short description of the project, initiative or change

The Security Information Online Management System (hereby referred to as “the system”) is the updated application built to support the CSE Personnel and Physical Security programs and the National Signals Intelligence (SIGINT) Registry.

The system is CSE’s personnel security database and also serves as the National SIGINT Registry. The system contains personal data pertaining to screening, clearance processing, recording of clearance, indoctrination, and de-indoctrination status and security incidents. Data within this system may be sourced from and shared with other departments and organizations in compliance with authorized derivative use purposes.

The implementation of the upgrade to the system has improved the Personnel Security processes for screening and indoctrinations. It has resulted in streamlining the process for capturing the data and improved data accuracy, while providing timely and reliable data for measuring performance. It possesses enhanced abilities to support management decisions, improve accessibility to official records, and provides linkages to internal and external stakeholders in a secure, protected environment.

Legal authority and policy instrument(s)

The Library and Archives of Canada Act governs the management of information within the Government of Canada, including the management of personnel security screening information contained in the system repository.

In accordance with Section 7.1 of the Financial Administration Act and the Policy on Government Security, CSE collects information for the purposes of personnel security screening under the Personnel and Physical Security programs. The National Defence Act, Security of Information Act and the CSSS-100: SIGINT Protection and Control policy authorize the collection of indoctrination information for the purposes of managing the National SIGINT Registry.