CSP & CGP Compliance Resources for Defence Contractors

Understanding the Contract Security Program (CSP)

Essential Reading for Defence Contractors

The Contract Security Program is mandatory for any organization working on classified Government of Canada contracts. This guide explains what CSP is, who needs it, and the core requirements.

What triggers CSP requirements
Facility Security Clearance process
Personnel security screening levels
Document security requirements
PSPC audit expectations

Key Takeaway: CSP compliance requires a systematic approach covering personnel, physical security, and information security. Organizations should start preparation 6–12 months before contract award.

Personnel Security Screening: A Step-by-Step Guide

Navigate the Clearance Process

Obtaining security clearances for your employees can be time-consuming. This guide walks you through each screening level and how to avoid common delays.

Reliability Status vs. Secret vs. Top Secret
TBS 330-23E form completion tips
Common reasons for delays
RCMP and CSIS screening timelines
Maintaining and renewing clearances

Key Takeaway: Accurate, complete applications are crucial. Small errors or omissions can delay clearances by months. Budget 3–6 months for Secret clearances, 6–12 months for Top Secret.

Controlled Goods Program (CGP) Essentials

What You Need to Know

If your organization examines, possesses, or transfers controlled goods, you need CGP registration. This guide explains the program requirements and compliance obligations.

What qualifies as controlled goods
CGP registration process
Record-keeping requirements
Transfer authorization procedures
Preparing for CGP audits

Key Takeaway: CGP violations carry serious penalties. Proper registration, meticulous record-keeping, and understanding transfer rules are essential for compliance.

Preparing for Your First PSPC Audit

Audit Readiness Checklist

PSPC audits evaluate your compliance with Contract Security Program requirements. Use this checklist to ensure you're fully prepared.

Security policy manual completeness
Personnel screening file organization
Facility security measures verification
Document control system review
Incident reporting procedures

Key Takeaway: Preparation is everything. Organizations that conduct internal audits 2–3 months before PSPC visits typically pass with zero or minor findings.

Common CSP Compliance Mistakes to Avoid

Learn from Others' Errors

After 20+ years supporting contractors, I've seen the same mistakes repeatedly. Here are the most common pitfalls and how to avoid them.

Inadequate security manuals
Poor personnel file management
Insufficient physical security
Incomplete document tracking
Lack of employee security training

Key Takeaway: Most audit findings are preventable. The key is understanding requirements clearly and implementing systematic processes from day one.

Building a Security Program from Scratch

For New Defence Contractors

Starting a security program can feel overwhelming. This guide breaks down the process into manageable steps for organizations new to federal contracts.

Assessing your security requirements
Designating a Chief Security Officer
Developing policies and procedures
Implementing physical security
Training your workforce

Key Takeaway: Start with a solid foundation. Invest time upfront in proper policy development and training to avoid costly remediation later.