Audit of Departmental Security

The objective of this audit was to determine whether Shared Services Canada (SSC) was implementing a security policy framework that was consistent with Treasury Board (TB) policies regarding security and whether Security Assessment and Authorization (SA&A) processes were in place and working as intended. The scope of the audit included SSC’s security policy framework and the SA&A process from April 1, 2012 to October 31, 2013.