Government of Canada
Symbol of the Government of Canada

Security Organization and Administration Standard

Table of Contents

1. Introduction 1.1 Purpose and scope 1.2 Roles and responsibilities 1.3 Concept 1.4 Guidance 2. Organizing of security documentation 3. Organization of the security function 4. Information security 4.1 Reviewing information holdings 4.2 Information classification and designation guide 4.3 Relationship to Access to Information and Privacy Acts 4.4 Types of designated information 4.5 Gravity of injury 4.6 Particularly sensitive, personal information 4.7 Invasion of privacy 4.8 Collecting personal information 5. Materiel asset security 6. Information technology security 7. Protecting personnel 8. Selecting safeguards 8.1 General 8.2 Classified information and assets 8.3 Designated information and assets 8.4 Limited examples of minimum safeguards 8.5 Information from other governments 9. Managing security risks 9.1 General 9.2 Assessing threats and risks 9.3 Process 10. Need to know 11. Marking information 12. Declassifying and downgrading 12.1 General 12.2 Automatic declassification and downgrading 12.3 Shared information 12.4 Access requests 12.5 Transfer of functions 12.6 Information transferred to the National Archives of Canada 12.7 Defunct departments 12.8 Review 12.9 Information from other governments 12.10 Classified cryptographic information 12.11 Classified security intelligence information 12.12 Confidences of the Queen's Privy Council 12.13 Revision of marking 13. Sharing sensitive information with other governments and organizations 14. Telework security 15. Security awareness training 16. Inspections and investigations 16.1 General 16.2 Personal privacy 16.3 Policies and procedures 16.4 Breaches of security 16.5 Criminal offences 16.6 Searches in criminal investigations 16.7 Disclosing sensitive information 16.8 Evidence 16.9 Investigative cooperation 16.10 Testing security systems 17. Managing security guards Appendix A - Guidance Appendix B - References Appendix C - Classifying Information Affecting the National Interest Appendix D - Marking Sensitive Information