The organisation should conduct a background check of individuals before employment. General checks should include a risk assessment. A credit check may be required for individuals who will be given access to class 2 or 3 facilities, systems, or assets.
The information collected should determine the basis for assessing the candidate's suitability. A credit check should only be used when the risk assessment concludes other measures are insufficient for assessing a person's suitability.
A process should be in place for handling exemptions for individuals who are already security cleared under the National Security Act. It should also cover interactions with the preparedness authority in cases such as applying for exemptions or tracking specific requirements stipulated by them.