Data Centre Risk Management Series
Part 2: Security Clearances

Do your data centre cleaners have the right security clearances?

Data centre post-construction check list

Access forms properly completed

Data centre cleaning staff with id tag

Security ID carried on person

 

How much do you know about the cleaners accessing your data centre? Do they have the appropriate security clearance level? A security clearance is not only a background check, but also an assessment of whether a person can be trusted with classified resources and information. The clearance confirms that the holder, usually an Australian citizen, not only has had their identity established, but has both a valid need and is eligible to have access. In addition, the applicant must be willing to comply with the standards that protect those assets against misuse and demonstrate a proper appreciation of their security responsibilities and obligations. Regardless of whether mishandling classified material or property is inadvertent or intentional, the action can have serious repercussions.


Starting 1 October 2010, the Australian Government Security Vetting Agency (AGSVA), part of the Department of Defence, has been the central vetting agency responsible for conducting security clearance assessments on behalf of most government departments. Agencies exempt from the AGSVA include the Department of Foreign Affairs (DFAT), Australian Security Intelligence Organisation (ASIO), Australian Federal Police (AFP), Australian Secret Intelligence Service (ASIS) and Office of National Assessments (ONA). In 2013 – 14, the AGSVA conducted 33,276 security clearances. Recent Department of Defence figures show a total of 350,000 people hold security clearances, costing the government around $350 million. An Australian government agency must sponsor the security clearance application for government employees, contractors or other industry personnel accessing Commonwealth information resources. AGSVA security clearances are transferable between agencies, however a new sponsorship is required and additional checks may be needed. . An article in the Canberra Times describes the challenges faced by government contractors and would-be public servants in obtaining the required security clearance levels. 


Four current clearance levels have replaced the six previous levels. Depending on clearance level, they are revalidated by the AGSVA at regular intervals. Only the Positive Vetting level requires re-evaluation every five years.


Scroll left or right to see more data

Current AGSVA Clearance Levels Previous Clearance Levels Replaced Background Check Revalidation Average Cost Number of Holder

Baseline Vetting

Permits access to classified information/ resources up to and including PROTECTED.
Protected
Confidential
Highly Protected
Most recent 5 years 15 years $394 181,000

Negative Vetting Level 1

Permits access to classified information/ resources up to and including SECRET.
Secret Most recent 10 years 10 years $1,067 124,000

Negative Vetting Level 2

Permits access to classified information/ resources up to and including TOP SECRET.
Top Secret (NV) Negative Vetting Level 2 Most recent 10 years 5 years $2,023 31,000

Positive Vetting

Permits access to resources at all classification levels, including certain types of caveated and code word information.
Top Secret (PV) Entire life Annual security appraisal $8,967 10,000