Thank you for the question, Mr. Chair.
As I mentioned previously, the responsibility for the contract security program falls under my authority, and we're doing many things to make sure that this is occurring.
First, we're working with the client departments to identify their needs in terms of security for the specific contracts they want to put forward. It's super important to identify this at the outset, at the beginning of the work, to properly identify the security requirements of the contract that will be issued.
Once this is established, between a discussion with the client and with the procurement authority, we are starting by doing the security clearance of an organization. In order to contract with the government when there are security requirements, you need to hold a designated security clearance for your organization. We're looking at many aspects. We are looking at key senior officials and we're also asking the supplier to identify a chief security officer. Once they get that security clearance for their organization, we can start clearing the employees who will work under those contracts. An employee can only be cleared up to the level of an organization. If the organization has a “secret” clearance, we cannot clear the employees up to “top secret” clearance, for example.
Then, we work with procurement authorities to make sure that we include in the contracts the proper security clause to monitor the security requirement throughout the life of the contract. It's important to know that those security clauses also need to be put in the subcontractor contracts. If the prime contractor is using a subcontractor as part of his work, the subcontracting contracts need to have the same clauses as the prime contractor clause.
Finally, in doing the work—let's assume that the contract has been awarded and there are security requirements—it will be the responsibility of the contractor to make sure that the resources working under that contract have the proper security clearances to work on that contract and, if they add resources during the management of the contract, that those people also have the proper security clearances. It's how we make sure that security requirements are taken care of.