INFORMATION TECHNOLOGY SECURITY
(Also Known As EDP Document and Data Production)

Information technology security is the safeguarding of systems, information and services from accidental and deliberate threats to security, integrity and availability.

When a private sector organization is awarded a contract through PWGSC to electronically process CLASSIFIED / PROTECTED government information on their information technology systems, CIISD will request an Information Technology (IT) Security Review to ensure the contractor complies with the Security Policy of the Government of Canada (GSP).

The inspection may take from a few hours to two weeks depending on the complexity and security level of the information to be processed. A report containing recommendations and suggestions will be forwarded to the organization's Company Security Officer for action.

Implementation of recommendations is mandatory and suggestions while not mandatory should be considered.

Once CIISD has determined that the organization can process CLASSIFIED / PROTECTED government information in a secure manner, the organization will be approved to process the government information at the level required by the contract. Due to the constant change in the information technology field, approval is granted by CIISD on a contract by contract basis only.