OpenLegislation

Appendix D

United Kingdom

Original text. Later amendments are not shown.

FACILITY SECURITY CLEARANCE INFORMATION SHEET (FSCIS)

(MODEL)

1.

Introduction

1.1.

Attached is a sample Facility Security Clearance Information Sheet (FSCIS) for the rapid exchange of information between the National Security Authority (NSA) or Designated Security Authority (DSA), other competent national security authorities and the Commission (as contracting authority) with regard to the Facility Security Clearance (FSC) of a facility involved in classified tenders, contracts or subcontracts.

1.2.

The FSCIS is valid only if stamped by the relevant NSA/DSA or other competent authority.

1.3.

The FSCIS is divided into a request and reply section and can be used for the purposes identified above or for any other purposes for which the FSC status of a particular facility is required. The reason for the enquiry must be identified by the requesting NSA/DSA in field 7 of the request section.

1.4.

The details contained in the FSCIS are not normally classified; accordingly, when an FSCIS is to be sent between the respective NSAs/DSAs/Commission this should preferably be done by electronic means.

1.5.

NSAs/DSAs should make every effort to respond to an FSCIS request within ten working days.

1.6.

Should any classified information be transferred or a contract awarded in relation to this assurance, the issuing NSA/DSA must be informed.

Procedures and Instructions for the use of the Facility Security Clearance Information Sheet (FSCIS)

These detailed instructions are for the NSA/DSA or the Commission contracting authority that completes the FSCIS. The request should preferably be typed in capital letters.

HEADER The requester inserts full NSA/DSA and country name.

1.

REQUEST TYPE

The requesting contracting authority selects the appropriate checkbox for the type of FSCIS request. Include the level of security clearance requested. The following abbreviations should be used:

SECRET UE/EU SECRET = S-UE/EU-S

CONFIDENTIEL UE/EU CONFIDENTIAL = C-UE/EU-C

CIS = Communication and information systems for processing classified information

2.

SUBJECT DETAILS

Fields 1 to 6 are self-evident.

In field 4 the standard two-letter country code should be used. Field 5 is optional.

3.

REASON FOR REQUEST

Give the specific reason for the request, provide project indicators, number of contract or invitation to tender. Please specify the need for storage capability, CIS classification level, etc.

Any deadline/expiry/award dates which may have a bearing on the completion of an FSC should be included.

4.

REQUESTING NSA/DSA

State the name of the actual requester (on behalf of the NSA/DSA) and the date of the request in number format (dd/mm/yyyy).

5.

REPLY SECTION

Fields 1-5: select appropriate fields.

Field 2: if an FSC is in progress, it is recommended to give the requester an indication of the required processing time (if known).

Field 6:

  1. (a)

    Although validation differs by country or even by facility, it is recommended that the expiry date of the FSC be given.

  2. (b)

    In cases where the expiry date of the FSC assurance is indefinite, this field may be crossed out.

  3. (c)

    In compliance with respective national rules and regulations, the requester or either the contractor or subcontractor is responsible for applying for a renewal of the FSC.

6.

REMARKS

May be used for additional information with regard to the FSC, the facility or the foregoing items.

7.

ISSUING NSA/DSA

State the name of the providing authority (on behalf of the NSA/DSA) and the date of the reply in number format (dd/mm/yyyy).

FACILITY SECURITY CLEARANCE INFORMATION SHEET (FSCIS)

(MODEL)

All fields must be completed and the form communicated via Government-to-Government or Government-to-international organisation channels.

REQUEST FOR A FACILITY SECURITY CLEARANCE ASSURANCE

To: ____________________________________

(NSA/DSA Country name)

Please complete the reply boxes, where applicable:

[ ] Provide an FSC assurance at the level of: [ ] S-UE/EU-S [ ] C-UE/EU-C

for the facility listed below

  • [ ] Including safeguarding of classified material/information

  • [ ] Including Communication and Information Systems (CIS) for processing classified information

[ ] Initiate, directly or upon a corresponding request of a contractor or subcontractor, the process of obtaining an FSC up to and including the level of … with … level of safeguarding and … level of CIS, if the facility does not currently hold these levels of capabilities.

Confirm accuracy of the details of the facility listed below and provide corrections/additions as required.

1.

Full facility name:

Corrections/Additions:
……

2.

Full facility address:

……

3.

Postal address (if different from 2)

……

4.

Zip/post code/city/country

……

5.

Name of the Security Officer

……

6.

Telephone/Fax/Email of the Security Officer

……

7.

This request is made for the following reason(s): (provide details of the pre-contractual (proposal selection) stage, contract or subcontract, programme/project, etc.)

…
Requesting NSA/DSA/Commission contracting authority: Name: … Date: (dd/mm/yyyy) …
REPLY (within ten working days)

This is to certify that:

  1. 1..

    [ ] the abovementioned facility holds an FSC up to and including the level of [ ] S-UE/EU-S

    [ ] C-UE/EU-C.

  2. 2..

    The abovementioned facility has the capability to safeguard classified information/material:

    [ ] yes, level: … [ ] no.

  3. 3..

    the abovementioned facility has accredited/authorised CIS:

    [ ] yes, level: … [ ] no.

  4. 4..

    [ ] in relation to the abovementioned request, the FSC process has been initiated. You will be informed when the FSC has been established or refused.

  5. 5..

    [ ] the abovementioned facility does not hold an FSC.

  6. 6..

    This FSC assurance expires on: … (dd/mm/yyyy), or as advised otherwise by the NSA/DSA. In the case of earlier invalidation or any changes to the information listed above, you will be informed.

  7. 7..

    Remarks:

    …

    Issuing NSA/DSA Name: … Date: (dd/mm/yyyy) …

<Placeholder for reference to applicable personal data legislation and link to mandatory information to the data subject, e.g. how Article 13 of the General Data Protection Regulationf1 is implemented.>

Annotations

Footnotes

f1

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1).