Directive on Security Management - Appendix I: Standard on Security Event Reporting

Provides details on Government of Canada organizations that must be contacted to report different types of security events.
Date modified: 2019-07-01

More information

Topic:

Print-friendly XML

Note to reader

The Standard on Security Event Reporting took effect on July 1, 2019.

Appendix I. Appendix I: Standard on Security Event Reporting

I.1 Effective date

  • I.1.1This standard takes effect on July 1, 2019.

I.2 Standards

  • I.2.1This standard provides details on the requirements set out in section 4.1.7.
  • I.2.2Procedures are as follows:
    • I.2.2.1National security concerns: National security concerns, including those related to terrorism or controlled goods, must be reported to all of the following:
      1. Canadian Security Intelligence Service (CSIS) by telephone at 613-993-9620;
      2. Royal Canadian Mounted Police (RCMP) National Operations Centre (NOC) by telephone at 613-993-4460; and
      3. Office of the Chief Security Officer, Privy Council Office (PCO)
    • I.2.2.2Security incidents and other security events: Security incidents and other security events that will have, or are likely to have, a significant impact on federal departments or agencies, or that require an immediate or coordinated government-wide response, must be reported without delay to the Government Operations Centre (GOC) by telephone at 613-991-7000 or by e-mail at ps.goc-cog.sp@canada.ca and to the Office of the Chief Security Officer, PCO by telephone at 613-960-4000 or by e-mail at CMC-CGC@pco-bcp.gc.ca.
    • I.2.2.3Cyber security incidents and events: Cyber security incidents and other security events related to information technology (IT) must be reported in accordance with the Government of Canada Cyber Security Event Management Plan (GC CSEMP).
    • I.2.2.4Suspicious activity: Suspicious activity or behaviour that has a possible nexus to national security or that may be an indicator of serious criminal activity must be reported to the RCMP National Critical Infrastructure Team (NCIT) by email at SIR-SIS@rcmp-grc.gc.ca
    • I.2.2.5Readiness levels: Departmental decisions to activate higher levels of readiness and to return to lower levels of readiness must be reported without delay to the Office of the Chief Security Officer, PCO, by telephone at 613-960-4000 or by email at CMC-CGC@pco-bcp.gc.ca.
    • I.2.2.6Breach of trust: Security events related to alleged breach of trust must be reported to the RCMP Federal Policing Intake Unit by email at Unit@rcmp-grc.gc.ca (reports or calls may be redirected to local law enforcement organizations, as appropriate).
    • I.2.2.7Other criminal activity: Security events related to other potential criminal activity (for example, physical thefts of government assets) must be reported to the local police.
    • I.2.2.8Controlled goods and contractors: Incidents related to controlled goods and that involve contractors must be reported to Public Services and Procurement Canada’s Controlled Goods Program by email at dmc-cgd@tpsgc-pwgsc.gc.ca.
    • I.2.2.9Accountable COMSEC material: Incidents that involve accountable communications security (COMSEC) material must be reported to the chief security officer of the department where the COMSEC incident occurred.
    • I.2.2.10Cabinet confidences:All security incidents and other security events of significance involving Cabinet confidences must be reported to the Office of the Chief Security Officer, PCO by telephone at 613-960-4000 or by email at CMC-CGC@pco-bcp.gc.ca.
    • I.2.2.11Privacy breaches: Material privacy breaches must be reported to both of the following:
      1. Office of the Privacy Commissioner of Canada by email at notification@priv.gc.ca; and
      2. Treasury Board of Canada Secretariat by email at SEC@tbs-sct.gc.ca.
    • I.2.2.12Policy monitoring: Security incidents and other security events of significance must be reported to the Treasury Board of Canada Secretariat by email at SEC@tbs-sct.gc.ca on a cyclical basis or on request, for the purposes of government-wide policy monitoring.
    • I.2.2.13Criminal record information: Issues related to criminal record information by law enforcement agencies must be directed to the RCMP Canadian Criminal Real Time Identification Services by email at CCRTIS-SCICTR@rcmp-grc.gc.ca.

© Her Majesty the Queen in Right of Canada, represented by the President of the Treasury Board, 2019,
ISBN:

Date modified: