Before anyone can possess controlled goods or technologies, he or she must undergo security training or a security briefing. This is so important that the Controlled Goods Regulations stipulates training and briefing programs must be included in the security plan for an organization to register with the Controlled Goods Directorate.
The designated official is responsible for providing training programs and security briefings. Training programs will be delivered to persons who will possess, examine or transfer controlled goods on an ongoing basis. This can include board members, officers, employees, contractual workers and temporary workers, whether they have been assessed by the designated official or have been exempted by the Controlled Goods Directorate. Visitors who have been exempted by the Controlled Goods Directorate and are authorized to access controlled goods and/or controlled technologies will receive a security briefing prior to the visit. Assessed and exempt persons will not be allowed to access controlled goods until they have completed a training program or security briefing.
Security training includes general regulations as well as items specific to an organization. It covers such areas as the processes of becoming assessed, threats and risks, physical security, IT security, receiving controlled goods, sending controlled goods, reporting and handling security breaches, access to printed and electronic material, storing controlled goods, using controlled goods and escorting visitors. The training program will also discuss specific locations and situations where controlled goods are kept at a site.
Security briefings will inform the visitor of the importance of safeguarding controlled goods, restrictions on discussing controlled goods accessed during the visit and fines and penalties for compromising controlled goods. Security briefings also cover the unique location and controlled goods involved, the degree of access and any conditions placed on the visit.
The training program and security briefing are subject to inspection at any time by the
Controlled Goods Directorate.
The designated official will review the training and security briefing programs periodically to ensure they continue to meet the security needs for safeguarding controlled goods and/or controlled technologies and reflect any regulatory or legislative changes.
The designated official will maintain a log containing the date, names and signatures of the authorized person(s) who have received training and the security official who conducted the training. This log will be kept in a secure container such as a locked filing cabinet or a password protected electronic volume or file. Likewise, the designated official will maintain a log that contains the date, names and signatures of visitors who have received a security briefing and the security official who conducted the briefing. As with training records, this log will be kept in a secure container such as a locked filing cabinet or a password protected electronic volume or file. Access to these records will be restricted to the designate official and authorized person.
Training is ongoing. It will be delivered both to new employees and temporary workers who require access to controlled goods and periodically to those persons authorized to examine or possess controlled goods and/or controlled technologies in order to reinforce the information provided during the initial training and advise of any changes in the security plan or Controlled Goods Regulations. The period for refresher retaining should not exceed six months.
Personnel who understand how to properly possess, examine or transfer controlled goods and/or technologies will be able to make informed decisions to protect these items and preserve security.