The entity assesses and partially The entity has substantially Procedures and systems are in The entity is proactive in assessing Ongoing manages ongoing suitability of all developed its procedures and place to ensure that the ongoing and managing the suitability of assessment personnel affecting. Information systems to assess and manage suitability of personnel is assessed personnel, including security of personnel of security concern for ongoing ongoing suitability of all and managed in accordance with clearance maintenance suitability of personnel is personnel. In the majority of the entity’s personnel security risk requirements (where relevant), to assessed and shared on an ad cases, information of security assessment. The entity has ensure integrity of the entity’s core hoc basis with relevant concern for ongoing suitability of established lines of business. The entity has well stakeholders. Some security personnel is assessed and shared communication and processes to established lines of communication clearance maintenance by the entity with relevant ensure information of security and robust processes to ensure requirements (where relevant) stakeholders. Procedures are concern is shared with information of security concern for are met. mostly in place to ensure stakeholders as appropriate. The ongoing suitability of personnel is compliance with security entity has procedures in place to shared with stakeholders in a clearance maintenance ensure compliance with all timely manner. requirements (where relevant). security clearance maintenance requirements (where relevant). Partial ad hoc processes are in Separating personnel, in the The entity has in place systems The entity has proactively Separating place to ensure that separating majority of cases, understand and processes to ensure that all implemented systems and personnel personnel have their access to their ongoing security obligations separating personnel understand processes that are reviewed Australian Government resources and have their access to their ongoing security obligations, regularly for separating personnel. withdrawn and are informed of Australian Government resources particularly where they have had Access to Australian Government their ongoing security withdrawn. Systems and access to sensitive and security resources is withdrawn from obligations. processes are substantially classified information and personnel on separation. The entity developed to verify consistency of resources during their ensures separating personnel are separating personnel practices employment. Separating debriefed and provided a across the entity. personnel have their access to comprehensive understanding of Australian Government resources their ongoing security obligations. withdrawn within an appropriate Information of security concern timeframe. about separating personnel is shared with relevant stakeholders, including internally, where appropriate. Risk assessments are undertaken, where appropriate.
Ongoing assessment of personnel The entity assesses and partially manages ongoing suitability of all personnel affecting. Information of security concern for ongoing suitability of personnel is assessed and shared on an ad hoc basis with relevant stakeholders. Some security clearance maintenance requirements (where relevant) are met. The entity has substantially developed its procedures and systems to assess and manage ongoing suitability of all personnel. In the majority of cases, information of security concern for ongoing suitability of personnel is assessed and shared by the entity with relevant stakeholders. Procedures are mostly in place to ensure compliance with security clearance maintenance requirements (where relevant). Procedures and systems are in place to ensure that the ongoing suitability of personnel is assessed and managed in accordance with the entity’s personnel security risk assessment. The entity has established lines of communication and processes to ensure information of security concern is shared with stakeholders as appropriate. The entity has procedures in place to ensure compliance with all security clearance maintenance requirements (where relevant). The entity is proactive in assessing and managing the suitability of personnel, including security clearance maintenance requirements (where relevant), to ensure integrity of the entity’s core business. The entity has well established lines of communication and robust processes to ensure information of security concern for ongoing suitability of personnel is shared with stakeholders in a timely manner. Separating personnel Partial ad hoc processes are in place to ensure that separating personnel have their access to Australian Government resources withdrawn and are informed of their ongoing security obligations. Separating personnel, in the majority of cases, understand their ongoing security obligations and have their access to Australian Government resources withdrawn. Systems and processes are substantially developed to verify consistency of separating personnel practices across the entity. The entity has in place systems and processes to ensure that all separating personnel understand their ongoing security obligations, particularly where they have had access to sensitive and security classified information and resources during their employment. Separating personnel have their access to Australian Government resources withdrawn within an appropriate timeframe. The entity has proactively implemented systems and processes that are reviewed regularly for separating personnel. Access to Australian Government resources is withdrawn from personnel on separation. The entity ensures separating personnel are debriefed and provided a comprehensive understanding of their ongoing security obligations. Information of security concern about separating personnel is shared with relevant stakeholders, including internally, where appropriate. Risk assessments are undertaken, where appropriate.
govsec05-annexa-personnel-security.docx