Thanks.
How do we ensure that's actually getting done? The reason I bring this up is that we were looking at the Nuctech issue where Global Affairs and PSPC both kind of shrugged and said that there isn't a box to tick that it could be a security issue and therefore it's not a security issue. No one checked with anyone because it didn't ask them to check a box on whether it was a security issue.
How are you preventing another department from not inquiring, or bringing something in because they don't know enough to ask, or if they're just ticking a box?