Security Clearance

[cojak]

This was put in the wrong forum - I am definitely not the OOP.

Hi,

My new employer has applied for my security clearance and I need some help filling sc form?

I work in financial industries and in last few years I worked for various bank.

Last year while working for a bank by mistake I copied a non sensitive technical document on bank’s laptop which belongs to another bank(my previous employer).

This raised a security incident and they immediately terminated my contract.

Do I need to mention this information in my SC clearance form? I am not able to find any field to add this information.

[northernladuk]

Are you a contractor or are you a permie?

Whatever the answer to your question is you still need to learn a lesson. If you are that careless with non sensitive information then how can you be trusted with high sensitive secret information?

This page explains the different security levels and the checks
https://www.gov.uk/government/public...earance-levels

For SC it says

What checks are involved

• successful completion of the Baseline Personnel Security Standard
• completion, by the individual, of a security questionnaire
• a departmental/company records check which will include, for example personal files, staff reports, sick leave returns and security records
• a check of both spent and unspent criminal records
• a check of credit and financial history with a credit reference agency
• a check of Security Service (MI5) records
• exceptionally, if there are any unresolved security concerns about the individual, or if recommended by the Security Service, the individual may also be interviewed
• in the event of any unresolved financial concerns, the individual may also be required to complete a separate financial questionnaire so that a full review of personal finances can be carried out
• checks may extend to third parties included on the security questionnaire.

As you can see bullet point 3 mentions security records. If you've put down your previous employer (client??) it's likely they'll find out anyway. If you do mention it its gonna be hard to get clearance sure? We've discussed SC long and hard and minor things like drugs, fighting, motoring convictions don't make you a threat to national security. Copying clients docs and distributing it around other clients isn't going to sit well with them so interesting to see what their SC checks make of it.

But as I say, you need to be honest with yourself and think how this 'mistake' came about. You are responsible for it whatever the situation. If you are prone to this type of 'mistake' then you don't want to be going in to an SC gig. They'll do a lot more than terminate you if you piss about with secret and confidential information.

[neilandersonhq]

Thanks for your response. Yes, I am a contractor. Some times in your life you make a silly mistake and regret for your whole life.

[Lance]

I would add the details of the mistake into the extra notes section of the SC submission. Better to be honest than hide it and be found out.
If the document was non-sensitive (as you state), and was copied in to your then current client's laptop, then I think sacking you was an overreaction anyway.


If it's genuine mistake it seems unlikely to affect the trust aspects of SC. And SC is more about trust not competence.

[northernladuk]

Thanks for your response. Yes, I am a contractor. Some times in your life you make a silly mistake and regret for your whole life.

So it's your client, not your employer. It sounds pedanctic but it's a key distinction which in some situations will make it easier for you if you use the right terminology.

[northernladuk]

If the document was non-sensitive (as you state), and was copied in to your then current client's laptop, then I think sacking you was an overreaction anyway..

I'm not so sure. Copying another banks data on to the estate of your current banking client isn't trivial. What will the current client think you are going to do with their data?

But anyway, fill the form in as Lance says and just see what the SC people say.

[malvolio]

I'm not so sure. Copying another banks data on to the estate of your current banking client isn't trivial. What will the current client think you are going to do with their data?

But anyway, fill the form in as Lance says and just see what the SC people say.

Just to add, the "mistake" probably won't harm SC overmuch as long as they are honest about it, but it rather blows a hole in SOX and related disciplines...

But as you say, disclose and see what happens is the only option.

[mangled]

If the OP wants to know the actual reason s/he was terminated by their original client it might be worth making a Subject Access Request (see here). This will mean that at least the disclosure on the SC application and any info provided to the SC service by that client match. It is just conceivable that the client didn't bother to make a big permant issue of it internally...

HTH,

[neilandersonhq]

Thanks for your response. I will disclose it in the form.

It was a vendor provided solution, the new client was using the same vendor and there we faced the exact same problem. I copied the solution In a pdf file and mailed it to my new email address. The solution contained my old client name.

I think banks want to play safe and avoid all risks. They took the maximum strict action they could take to avoid all risks.

Just a follow up question, the incident happened on my second month with the client. I couldn’t complete my two months. I was looking at an old sc form online and they suggested to only include employments where you worked for more than three months. Is that correct?

[malvolio]

Thanks for your response. I will disclose it in the form.

It was a vendor provided solution, the new client was using the same vendor and there we faced the exact same problem. I copied the solution In a pdf file and mailed it to my new email address. The solution contained my old client name.

I think banks want to play safe and avoid all risks. They took the maximum strict action they could take to avoid all risks.

No, they are subject to strict rules governing the use of data and their systems (hence my earlier reference to SOX), with heavy penalties for breaches, and you broke them. Simple...

Just a follow up question, the incident happened on my second month with the client. I couldn’t complete my two months. I was looking at an old sc form online and they suggested to only include employments where you worked for more than three months. Is that correct?

Don't ever look for loopholes in clearance. You deliberately have no idea what they know or consider relevant. When in doubt, tell them.