Security incident report for company security officers and alternate company security officers

Following a security incident or breach, the company security officer (CSO) or alternate company security officer (ASCO) must provide the information requested in accordance with Annex A: Guidelines on company security officer and alternate company security officer responsibilities – section VI. Security violations, breaches and compromises of the Contract Security Manual.

Do not submit protected and/or classified information with this report

When submitting this report, clearly indicate in your email message whether you must submit sensitive information as part of the incident reporting or investigation. The investigator assigned to the file will then contact you to make the necessary arrangements to obtain these documents.

Reminder

Annex A: Guidelines on company security officer and alternate company security officer responsibilities – section VII. Reporting of the Contract Security Manual states:

Upon receiving an incident report, the CSO must immediately conduct a preliminary inquiry to determine all of the circumstances and report the incident to Public Services and Procurement Canada’s (PSPC) Contract Security Program (CSP) within 24 hours. When the results of a preliminary inquiry indicate a suspected or actual breach or compromise of information and assets, the CSO must immediately notify PSPC’s CSP.

Print this page for your records

Before you select "Submit", print this page for your records.

Organizations must keep records of incidents and investigation reports for a period of 2 years following the incident. These records are subject to inspection and investigation by the program.

Date modified: