![](/web/20061026000713im_/http://ciisd.gc.ca/images/misc/spacer.gif) |
INFORMATION TECHNOLOGY SECURITY
(Also Known As EDP Document and Data Production)
Information technology security is the safeguarding of systems, information
and services from accidental and deliberate threats to security,
integrity and availability.
When a private sector organization is awarded a contract through PWGSC
to electronically process CLASSIFIED / PROTECTED government information on their information
technology systems, CIISD will request an Information Technology (IT) Security
Review to ensure the contractor complies with the .
The inspection may take from a few hours to two weeks depending on the
complexity and security level of the information to be processed. A report
containing recommendations and suggestions will be forwarded to the organization's
Company Security Officer for action.
Implementation of recommendations is mandatory and suggestions while not
mandatory should be considered.
Once CIISD has determined that the organization can process CLASSIFIED / PROTECTED government information in a secure manner, the organization will be approved
to process the government information at the level required by the
contract. Due to the constant change in the information technology field,
approval is granted by CIISD on a contract by contract basis only.
|