There are two elements.
Of course, there are personal security clearances, but from a contract perspective, a security requirements checklist is filled in at the beginning of the contracting process to determine the appropriate classification levels for the work to be conducted. Before the contracts are awarded, there's a determination of whether the bidders do, in fact, meet those requirements.