The Company Initial Orientation Training for: Controlled Goods Training Course Code: RULES/CGB14 Version 2014 For persons requiring entry into Controlled Goods compliant Company facilities Training Purposes Only

Questions to be answered… Where does the need for Controlled Goods training come from? CG Consists of what legislation? What are Controlled Goods, specifically? What is ‘Need-to-Know’? How is CG compliance achieved? How is CG compliance lost? Who is the authority that governs Controlled Goods? Training Purposes Only

References Internet Resource: Company Resource: Controlled Goods: http://ssi-iss.tpsgc-pwgsc.gc.ca/dmc-cgd/index-eng.html; Company Resource: SharePoint “Useful Links”: Security Plan – Controlled Goods (7/12/2013). Training Purposes Only

Controlled Goods Program (CGPs) A Brief Overview… Training Purposes Only

CG Authority Controlled Goods is administered and controlled by the Department of Public Works & Government Services , Canada. Some companies are cleared to vet applications that do not set identified flags: Those that set flags must go to PWGSC for additional processing, including denial. Training Purposes Only

CG Training This is your Controlled Goods awareness introduction. Training is a required element of the program enabling all personnel the ability to function within established boundaries. Presently, no Update (Recurrent) Training is required to maintain Controlled Goods credentials. Training Purposes Only

CG Legislation The Canadian Controlled Goods program is essentially a response to the United States’, ITAR (International Trade in Arms Regulations) processes. Controlled Goods consist of four legislative documents: CG Directorate; CG Program; CG Regulations; and Defense Products Act (DPA). Training Purposes Only

What are CG’s Controlled Goods applies equally to documentation or parts-in-hand. These regulations do not distinguish, for example, between, the electrical and mechanical drawings of a device, and the device itself. Controlled Goods authority and access is also tempered by the ‘Need-to-Know’ standard of security. Question 1 Training Purposes Only

What is ‘Need-to-Know’ ‘Need-to-Know’ is not Want-to-Know. Curiosity Killed the Cat. ‘Need-to-Know’ is created by, for example, your work and boss’ directions. “Look up the procedure to adjust that system” direction from your supervisor has established your ‘Need-to-Know’ . Examining documents or devices without the prerequisite ‘Need-to-Know’ is not permitted. Question 2 Training Purposes Only

Personal Imaging Devices It is accepted that personal communication devices are prevalent. It is accepted that individuals are inseparable from their devices. Imagining capabilities within personal devices, shall NEVER be utilized in Controlled Goods environments. Question 3 Training Purposes Only

CG Compliance In addition to this training are a series of forms (about 12-pages) requesting detailed personal and historic data. Prior 5-years only; and Canadian Criminal Records Check – Unlimited timeline: If you resided outside Canada within the past 5-years: Requires additional Global Criminal Records Check. Training Purposes Only

CG Compliance Provided data is verified, and when judged acceptable, a letter is issued establishing your approval into the CG system. Approvals expires after 5-years; and Is contingent on you remaining with the company. Training Purposes Only

What affects CG Compliance Changes to circumstances affecting CG compliance must be reported to the HR Department immediately! For examples: Pictures taking; Criminal Arrest; Criminal or Civil Charges: DWI. This may suspend or cancel your CG approval… But the discussion must take place…IMMEDIATELY Question 4 Training Purposes Only

CG Obligations We are obligated to comply with Controlled Goods requirements on behalf of our customers; be they domestic or foreign. We are obligated to ensure that our data, goods and material viewing and/or handling actions meet the ‘Need-to-Know’ threshold, in advance. We are obligated to ensure that the security of data (electronic or printed hardcopy), goods and materials meet the security standards of our customers and regulators at all times. Question 13. Training Purposes Only

Additional Obligations We are obliged to control copied data mindfully, including the disposal (deletion) of such material. Our obligations extend to the storage and treatment of Serviceable or Unserviceable components – including ‘scrap’. We are obliged to treat data, goods and material as CG applicable when it is unclear that such restrictions apply – until proven otherwise. Question 3. Training Purposes Only

More CG Obligations We are obliged to ensure recipients of digitally delivered, CG materials are compliant to the CG program and possess the prerequisite ‘Need-to-Know’ before selecting ‘send’. This applies equally to ‘attachments’. Training Purposes Only

Verification Question 1 What are Controlled Goods? A. Documents such as drawings or assembly instructions. B. Written manufacturer’s testing procedures. C. The device in hand. D. All the above. Training Purposes Only

Verification Question 2 Before data or material is released, what other security related condition must be met along with CG approval? A. The prerequisite “Want-to-Know”. B. The prerequisite “Need-to-Know”. C. There is no other condition to be met. D. You feel comfortable about the suspected content. Training Purposes Only

Verification Question 3 When are personal imaging devices permitted to be used in a CG environment? A. Never. B. While on breaks. C. Only during lunch. D. There are no limitations. Training Purposes Only

Verification Question 4 Changes to circumstances affecting CG compliance must be reported to the HR Department immediately. Why? A. Suspension of CG approval may be required. B. Cancelation of CG approval may be required. C. The circumstance may affect work assignment. D. All the above! Training Purposes Only

Controlled Good Training End of Presentation. Thank You. Training Purposes Only