Data Centre Risk Management Series
Part 2: Security Clearances

How much do you know about the cleaners accessing your data centre? Do they have the appropriate security clearance level? A security clearance is not only a background check, but also an assessment of whether a person can be trusted with classified resources and information. The clearance confirms that the holder, usually an Australian citizen, not only has had their identity established, but has both a valid need and is eligible to have access. In addition, the applicant must be willing to comply with the standards that protect those assets against misuse and demonstrate a proper appreciation of their security responsibilities and obligations. Regardless of whether mishandling classified material or property is inadvertent or intentional, the action can have serious repercussions.

Starting 1 October 2010, the Australian Government Security Vetting Agency (AGSVA), part of the Department of Defence, has been the central vetting agency responsible for conducting security clearance assessments on behalf of most government departments. Agencies exempt from the AGSVA include the Department of Foreign Affairs (DFAT), Australian Security Intelligence Organisation (ASIO), Australian Federal Police (AFP), Australian Secret Intelligence Service (ASIS) and Office of National Assessments (ONA). In 2013 – 14, the AGSVA conducted 33,276 security clearances. Recent Department of Defence figures show a total of 350,000 people hold security clearances, costing the government around $350 million. An Australian government agency must sponsor the security clearance application for government employees, contractors or other industry personnel accessing Commonwealth information resources. AGSVA security clearances are transferable between agencies, however a new sponsorship is required and additional checks may be needed. . An article in the Canberra Times describes the challenges faced by government contractors and would-be public servants in obtaining the required security clearance levels. 

Four current clearance levels have replaced the six previous levels. Depending on clearance level, they are revalidated by the AGSVA at regular intervals. Only the Positive Vetting level requires re-evaluation every five years.