Canada Border Services Agency (CBSA) - Security Requirements

CBSA security requirements are the security conditions written into Canada Border Services Agency solicitations and contracts. They specify what a supplier must hold and do to protect sensitive government information, assets and work sites. PSPC states that security requirements are clauses written into government solicitation documents and contracts, and that they specify the security levels needed to safeguard sensitive information, assets and work sites (PSPC, bidding and contracting abroad).

For CBSA, these requirements follow the Government of Canada framework administered through the PSPC Contract Security Program. They typically combine a Security Requirements Check List (SRCL), organization screening, personnel screening and safeguarding rules. CBSA can also add conditions specific to its own facilities, such as escorted access to secure rooms. Each solicitation sets its own terms, so the requirement that applies to you is the one in the bid document.

How CBSA solicitations apply the Contract Security Program

PSPC's Contract Security Manual describes the requirements private-sector organizations must follow to safeguard government information and assets under contracts with security requirements. It applies to organizations registered in the Contract Security Program and to both Canadian and foreign contracts (Contract Security Manual).

Federal solicitations use SRCLs and Contract Security Program clauses as contractual requirements, including requirements for organization security clearances and personnel screening. Examples appear in this request for proposal and this one. A CanadaBuys notice for a standing offer states that Common PS SRCL #9 applied and required a valid Designated Organization Screening (DOS) with approved document safeguarding at Protected B (CanadaBuys notice).

The Coutts CCTV solicitation as a worked example

A CBSA CCTV procurement at Coutts shows how the requirements read in practice. The solicitation required the contractor to hold a valid DOS with approved document safeguarding at the Protected B level. It also required personnel who need access to protected information, assets or work sites to hold valid Reliability Status (CBSA Coutts CCTV RFP).

The same solicitation added an access-control condition. Contractor access to secure rooms must be escorted by CBSA employees, and contractors must remain escorted while working in those rooms. This is a site-level rule set by CBSA for that contract, separate from the organization and personnel screening.

Registration with your bid

PSPC states that organizations bidding on competitive solicitations, or responding to requests for proposals, with security requirements posted on or after May 2, 2022 must submit a completed Application for Registration with their bid or response (PSPC screening process changes). This applies to CBSA bids that carry security requirements, so registration should be prepared before the bid closes and not after award.

What it means for a supplier bidding on CBSA work

Read the security section of each CBSA solicitation before you commit to bid. Confirm whether it requires:

• Organization screening or a specified security clearance, such as a DOS.
• Personnel screening, such as Reliability Status, for staff who will access protected information, assets or sites.
• Approved document safeguarding, including the Protected level named.
• Security-approved work locations.
• Compliance with the SRCL, security guide, Contract Security Manual or other incorporated clauses.
• Escort or access-control procedures at CBSA premises.
• Prior approval for security-related subcontracts.

Check your organization's registration and the screening status of your proposed personnel early, and plan for escorted access if the work is inside secure CBSA rooms. PSPC's security requirements in contracting pages are the starting point for the program rules.