It is correct that they would have to have a reliability status or they would have to have something beyond a reliability status, an actual security clearance. The lowest level of classification for contractors is reliability status, essentially a police investigation and criminal check.
On June 3rd, 2008. See this statement in context.