SOR/2025-219202510
30
202511
28
NUCLEAR SAFETY AND CONTROL ACTNuclear Security RegulationsP.C.2025-743202510
30
The Canadian Nuclear Safety Commission makes the annexed Nuclear Security Regulations under subsection 44(1)a of the Nuclear Safety and Control Actb.S.C. 2012, c. 19, s. 129(1)S.C. 1997, c. 9Ottawa, June 26, 2025Le président de la Commission canadienne de sûreté nucléaire,Pierre TremblayPresident of the Canadian Nuclear Safety Commission
Her Excellency the Governor General in Council, on the recommendation of the Minister of Natural Resources, under subsection 44(1)a of the Nuclear Safety and Control Actb, approves the annexed Nuclear Security Regulations made by the Canadian Nuclear Safety Commission.Definitions
DefinitionsThe following definitions apply in these Regulations.Act means the Nuclear Safety and Control Act. (Loi)business day means a day that is not a Saturday or a holiday. (jour ouvrable)Category I nuclear material means a nuclear substance listed in column 1 of the schedule that is in the form set out in column 2 and the quantity set out in column 3. (matière nucléaire de catégorie I)Category II nuclear material means a nuclear substance listed in column 1 of the schedule that is in the form set out in column 2 and the quantity set out in column 4. (matière nucléaire de catégorie II)Category III nuclear material means a nuclear substance listed in column 1 of the schedule that is in the form set out in column 2 and the quantity set out in column 5. (matière nucléaire de catégorie III)central alarm station operator means a person who holds an authorization referred to in subsection 57(1). (opérateur du poste central d’alarme)critical security measure means any equipment, process or system the continuous operation of which is necessary to ensure that an effective intervention can be made. (mesure de sécurité essentielle)design basis threat means all of the threats that are identified in respect of high-security sites by the Commission under subsection 28(1). (menace de référence)direct visual surveillance means direct and continuous observation of a person or place by a person who isphysically present where the person is located or at the place that is under observation; orremotely observing that person or place. (surveillance visuelle directe)Directive on Security Screening means the document entitled Directive on Security Screening, published by the Treasury Board Secretariat, as amended from time to time. (Directive sur le filtrage de sécurité)D-value means, in respect of a nuclear substance, the D-value set out for that substance in Table 1 to section 2 of the document entitled Dangerous quantities of radioactive material (D-values), published by the International Atomic Energy Agency, as amended from time to time. (valeur D)effective intervention means an intervention that is timely and powerful enough to prevent the unauthorized removal of nuclear substances from a nuclear facility andin respect of an area within a high-security site where the results of sabotage would be to endanger the health or safety of persons, to prevent sabotage; andin respect of an area within a high-security site where the results of sabotage would be to impact the health or safety of persons, to prevent or mitigate sabotage. (défense efficace)enhanced security clearance means a clearance referred to in subsection 45(1). (cote de sécurité approfondie)explosive substance has the same meaning as in section 2 of the Criminal Code. (substance explosive)facility-access security clearance means a clearance granted by a licensee, as defined in section 83, that allows a person to enter and remain in a nuclear facility referred to in paragraph 3(c).  (cote de sécurité donnant accès à l’installation)firearm has the same meaning as in section 2 of the Criminal Code. (arme à feu)high-security site means a nuclear facility at which Category I nuclear material or Category II nuclear material is produced, processed, used or stored. (site à sécurité élevée)high-security site access clearance means a clearance granted by a licensee, as defined in section 25, that allows a person to enter and remain in a protected area at a high-security site. (cote donnant accès au site à sécurité élevée)inner area means an area that is within a protected area and is for the processing, production, use or storage of Category I nuclear material. (zone intérieure)inspector means a person who is designated as an inspector under section 29 of the Act. (inspecteur)limited access area means a clearly demarcated area of a nuclear facility that is outside of a protected area and to which the licensee, as defined in section 25, controls access. (zone à accès limité)nuclear security event means an event that has potential or actual implications for nuclear security and that necessitates a response. (événement de sécurité nucléaire)nuclear security measure means a physical security or cyber security measure that is intended to deter, detect, delay or respond to a threat to a nuclear facility, a nuclear substance or the confidentiality, integrity or availability of sensitive information. (mesure de sécurité nucléaire)nuclear security officer means a person who holds an authorization referred to in subsection 55(1). (agent de sécurité nucléaire)nuclear security support person means a person, other than a nuclear security officer or central alarm station operator, whose duties in relation to a high-security site include any of the following:the design, installation, maintenance or repair of a nuclear security system or a nuclear security measure;the control, maintenance or repair of firearms and related equipment;the control, maintenance or repair of access control systems;the assessment, denial, revocation or granting of authorizations or clearances;the monitoring of threats that may affect the site; andtraining related to any of the activities referred to in paragraphs (a) to (e). (préposé à la sécurité nucléaire)nuclear security system means an integrated set of nuclear security measures at a nuclear facility. (système de sécurité nucléaire)off-site response force means a force that is not stationed at a nuclear facility and that is composed ofmembers of a local, regional, provincial or federal police force;members of a Canadian Armed Forces unit;members, other than those referred to in either paragraph (a) or (b), whoin the case of a high-security site, are capable of making an effective intervention at the site, taking into account the design basis threat and any other threat identified in the threat and risk assessment, andin the case of any other nuclear facility, are capable of making an effective intervention at the nuclear facility, taking into account the threats identified in the threat and risk assessment; orany combination of the members referred to in paragraphs (a) to (c). (force d’intervention externe)on-site nuclear response force meansa team of nuclear security officers who are permanently stationed at a high-security site; orthe members of a local, regional, provincial or federal police force or a Canadian Armed Forces unit, or any combination of those members, whose services the licensee, as defined in section 2, has retained and who are permanently stationed at a high-security site. (force d’intervention nucléaire interne)physical barrier means a fence, wall or similar impediment that controls access to the area that it encloses and delays unauthorized access to that area. (barrière physique)protected area means an area that is within a high-security site and is for the production, processing, use or storage of Category I nuclear material or Category II nuclear material. (zone protégée)sabotage means any deliberate act thatis directed against a nuclear facility or Category I nuclear material, Category II nuclear material or Category III nuclear material that is in use, storage or transport; andcould directly or indirectly impact the environment or the health or safety of persons as a result of exposure to radiation or the release of a nuclear substance. (sabotage)security exercise means a test of the elements of a contingency plan and nuclear security measures and, in the case of a security exercise referred to in subsection 101(1), a test of multiple nuclear security measures. (exercice de sécurité)security guard  means a person who carries out duties related to the security of a nuclear facility referred to in paragraph 3(c), such as direct visual surveillance of the facility and the protection of persons and property. (garde de sécurité)security personnel means the nuclear security officers, nuclear security support persons and central alarm station operators of a nuclear facility and their supervisors. (personnel de sécurité)sensitive information means information, including the information referred to in section 21 of the General Nuclear Safety and Control Regulations, in any form, including software, whose unauthorized disclosure, modification or destruction or to which denial of access could compromise nuclear security. (renseignements de nature délicate)threat and risk assessment means an assessment thatidentifies sensitive information and the threats to that information;identifies any threat that couldcompromise the security of a nuclear facility or its operations,exploit vulnerabilities in a nuclear facility’s nuclear security measures, orin the case of the transport of Category I nuclear material, Category II nuclear material or Category III nuclear material, compromise the security of sensitive information or the nuclear material; andevaluates the risks posed by those threats and the adequacy and effectiveness of an existing or proposed nuclear security system or nuclear security measure that is designed to protect against those threats. (évaluation de la menace et du risque)threat item meansan object, other than a match or pocket lighter, that is fabricated with combustible materials and that could be used to inflict burn injuries on persons or cause fire damage to property;a component of a weapon, an explosive device or an object referred to in paragraph (a); andany other item that could pose a threat to the security of a nuclear facility. (article dangereux)vehicle portal means a portal for the passage of land vehicles that has enclosed sides, a movable barrier at either end and is large enough to accommodate a land vehicle. (sas pour véhicule)vital area means an area that is inside a protected area and that contains equipment, systems, structures, components or nuclear substances the sabotage of which could directly or indirectly impact the environment or the health or safety of persons as a result of exposure to radiation or the release of a nuclear substance. (zone vitale)weapon has the same meaning as in section 2 of the Criminal Code. (arme)
General ProvisionsDefinition
Definition of licenseeIn this Part, licensee means any of the following persons:a person who, in relation to a high-security site, is licensed under the Act tocarry out an activity described in any of paragraphs 26(a), (e) or (f) of the Act; orproduce, refine, convert, enrich, process, reprocess, manage, store or dispose of Category I nuclear material or Category II nuclear material;a person who, in relation to a nuclear facility referred to in paragraph 3(c) of these Regulations, is licensed under the Act tocarry out an activity described in any of paragraphs 26(a), (e) or (f) of the Act; orproduce, refine, convert, enrich, process, reprocess, manage, store or dispose of a nuclear substance; anda person who, in respect of Category I nuclear material, Category II nuclear material, Category III nuclear material or a nuclear substance referred to in paragraph 3(d) of these Regulations, is licensed under the Act tocarry out an activity described in any of paragraphs 26(a), (e) or (f) of the Act, orproduce, refine, convert, enrich, process, reprocess, manage, store or dispose of a nuclear substance.
Application
Application of PartThis Part applies in respect ofCategory I nuclear material, Category II nuclear material and Category III nuclear material;high-security sites;the following nuclear facilities, other than those that are high-security sites:a nuclear fission or fusion reactor or subcritical nuclear assembly,a plant for the processing, reprocessing or separation of an isotope of uranium, thorium or plutonium,a plant for the manufacture of a product from uranium, thorium or plutonium,a plant for the processing or use, in a quantity greater than 1015 Bq per calendar year, of nuclear substances other than uranium, thorium or plutonium,a vehicle that is equipped with a nuclear reactor, anda facility for the disposal of Category I nuclear material, Category II nuclear material or Category III nuclear material that is generated at another nuclear facility; andnuclear substances, other than Category I nuclear material, Category II nuclear material or Category III nuclear material, that are referred to in any of paragraphs (c), (e) or (f) of the definition nuclear substance in section 2 of the Act, that have an activity greater than or equal to 10 times the D-value for that substance and that is located at a nuclear facility referred to in paragraph (b) or (c) of this section.
Licence Application
Required informationAn application for a licence in respect of Category I nuclear material, Category II nuclear material or Category III nuclear material or a nuclear facility, other than a transport licence, must contain, in addition to the information required by section 3 of the Nuclear Substances and Radiation Devices Regulations or sections 3 to 8 of the Class I Nuclear Facilities Regulations, as applicable,a nuclear security plan that containsa description of the proposed nuclear security system, including each nuclear security measure and any characteristics of the design of the nuclear facility that improve its security,a list that identifies each nuclear security measure that is a critical security measure and that sets out the compensatory measures that will be implemented in the event that it becomes degraded, inoperative or compromised,a description of the areas where Category I nuclear material, Category II nuclear material or Category III nuclear material or other nuclear substances are to be produced, used, processed, stored or transported and the location of those areas,the written arrangements made between the applicant and any off-site response force,the plan and procedures to assess and respond to nuclear security events at the nuclear facility,the process for controlling access to the nuclear facility and verifying the identity of each person who accesses it,the processes for determining who, on entering or exiting the nuclear facility, will be searched or screened, andthe cyber security program consisting of the plans, policies and procedures for the protection of the computer systems and electronic components of the nuclear facility against cyber security threats identified in the threat and risk assessment; andthe threat and risk assessment.
Security RequirementsNuclear Security Plan
Review and updateA licensee must review the nuclear security plan at least once per year and update it to reflect any changes to the information that it is required to contain.Copy to be provided before implementationThe licensee must provide a copy of the updated nuclear security plan to the Commission before it is implemented.
Threat and Risk Assessment
Minimum frequencyA licensee must conduct, at least once every five years, a threat and risk assessment specific to each nuclear facility at which they carry on licensed activities.Review and updateThe licensee mustreview the threat and risk assessment at least once per year and after any nuclear security event at the nuclear facility or after the licensee becomes aware of a change in any threat that is identified in the assessment or of a new vulnerability or threat;update the threat and risk assessment to implement any changes that were identified in the review as being necessary; andupdate the nuclear security plan if the changes referred to in paragraph (b) necessitate changes to the information that the plan is required to contain.Modifications to nuclear security systemAfter providing the copy of the updated nuclear security plan under subsection 5(2), the licensee must make the modifications to its nuclear security system that are necessary to counter any vulnerabilities or threats identified in the threat and risk assessment.Record to be keptFor each threat and risk assessment that is conducted, the licensee must keep a record that sets out the results of that threat and risk assessment and each update under paragraph (2)(b).Records to be providedA licensee must provide to the Commissionany record referred to in subsection (4) on request of the Commission; andthe record of the results of the threat and risk assessment or an update under paragraph (2)(b), as the case may be, within 60 days after the day on which the threat and risk assessment or the update is completed.
Effective interventionA licensee must implement nuclear security measures that ensure that an effective intervention can be made, taking into account the threats identified in the threat and risk assessment.
Security Program
Training program — behaviour of personnelA licensee must develop and implement a training program to ensure that its supervisors are trained to recognize and report behaviour of personnel, including contractors, that could pose a threat to security at a nuclear facility at which it carries on licensed activities.
Security cultureA licensee must implement measures to promote and support security culture.Record to be keptThe licensee must keep a record of the security culture measures that it implements.
Interfaces of safety, security and safeguardsA licensee must, to the extent possible, ensure thatnuclear security measures and, if any, nuclear material accountancy activities are designed and implemented so as to avoid and resolve conflicts between them and to detect, prevent and deter the unauthorized removal of any Category I nuclear material, Category II nuclear material or Category III nuclear material from a nuclear facility at which it carries on licensed activities;nuclear security measures do not compromise the environment or the health or safety of persons; andmeasures taken to protect the environment or the health or safety of persons do not compromise the security of a nuclear facility at which it carries on licensed activities.Process to coordinate measuresThe licensee must establish, implement and maintain a process toavoid and resolve conflicts between nuclear security measures and, if any, nuclear material accountancy activities; andcoordinate nuclear security measures, environmental protection measures and health and safety protection measures.Record to be keptThe licensee must keep a record that sets out the process referred to in subsection (2).
Compensatory measuresIf a critical security measure for a nuclear facility at which a licensee carries on licensed activities becomes degraded, inoperative or compromised, the licensee must immediately implement compensatory measures that are as effective as that measure was before it became degraded, inoperative or compromised.Records to be keptA licensee must keep a record that sets out the process for implementing the compensatory measures and a record that sets out each instance in which a compensatory measure is implemented.
Compromise of critical security measureWhen a licensee becomes aware that a device that is part of a critical security measure is degraded, inoperative or compromised in any way, including by loss, theft or unauthorized transfer, the licensee mustreplace the device or restore it to its proper functioning as soon as feasible; anddetermine, on the basis of an investigation, how it became degraded, inoperative or compromised.
Security guardsA licensee must ensure that each security guard at a nuclear facility at which it carries on licensed activities is trained and qualified to carry out their assigned duties.Record to be keptThe licensee must keep a record of the training that it provides to each security guard and proof that they are qualified to carry out their assigned duties.
Arrangements with off-site response forceA licensee must make written arrangements with an off-site response force that, alone or in conjunction with the on-site nuclear response force, if any, is capable of making, at a nuclear facility at which the licensee carries on licensed activities, an effective intervention against any physical threat identified in the threat and risk assessment.Provisions in arrangementsThe written arrangements must provide fora process for determining when and how the off-site response force is to be notified when a nuclear security event occurs at the facility;annual visits to the nuclear facility by members of the off-site response force to familiarize them with the facility;the joint development by the licensee and the off-site response force of a contingency plan to facilitate effective interventions by that force;the roles and responsibilities of the licensee and the off-site response force in responding to nuclear security events; andthe participation of the off-site response force in security exercises.Arrangements signedThe licensee must ensure that the written arrangements are signed by the licensee and a person who is authorized to sign on behalf of the off-site response force.
Alarm-monitoringA licensee must have alarm-monitoring capability or make arrangements with an alarm monitoring service.Alarm-monitoring serviceIf the licensee has made arrangements with an alarm-monitoring service, those arrangements must provide for the procedure by which the service will notify the licensee or the off-site response force in the event that an alarm signal is received from the nuclear facility.
Cyber Security and Protection of Information
Cyber security programA licensee must, for each nuclear facility at which it carries on licensed activities, implement and maintain the cyber security program referred to in subparagraph 4(a)(viii).Protection against cyber security threatsThe licensee must protect the computer systems and electronic components of the nuclear facility against the cyber security threats that are identified in the threat and risk assessment.
Protection of sensitive informationA licensee must protect the sensitive information that is identified in the threat and risk assessment against the threats that are identified in that assessment.Nuclear security measuresThe licensee must implement nuclear security measures that protect the confidentiality, integrity and availability of the sensitive information referred to in subsection (1) against the threats that are identified in the threat and risk assessment.Access to sensitive informationThe licensee must not permit a person to access sensitive information unless the person requires that access to carry out their duties.
Identity verification, clearance or authorizationA licensee must implement measures to protect the following information from loss or theft and unauthorized access, use, disclosure, duplication, alteration or destruction:information that is collected, used, retained or disclosed for the purposes of identity verification; andinformation that is collected, used, retained or disclosed in relation to a clearance or authorization.
Security Obligations Relating to Nuclear Substances
Category I nuclear materialA licensee must only produce, process, use or store Category I nuclear material in an inner area.
Category II nuclear materialA licensee must only produce, process, use or store Category II nuclear material in a protected area.
Category III nuclear materialA licensee must only produce, process, use or store Category III nuclear material ina protected area; orany other area that is equipped with detection, delay and response measures and that is designed and constructed to prevent unauthorized access to the material.
Other nuclear substancesA licensee may only produce, process, use or store a nuclear substance, other than Category I nuclear material, Category II nuclear material or Category III nuclear material, that has an activity that is greater than or equal to 10 times the D-value for that substance in an area within a nuclear facility that is designed and constructed to prevent unauthorized access to the nuclear substance.Security measuresIn respect of the area referred to in subsection (1), the licensee mustmaintain a list of the persons who are authorized to access the area;permit only authorized persons to access the area; andimplement measures to detect, and assess the necessary response to,any unauthorized access to a nuclear substance in the area, andany tampering or attempted tampering that could compromise or degrade a nuclear security measure or render it inoperative or ineffective.
Removal of nuclear substancesA licensee must ensure that nuclear substances are not removed from a nuclear facility at which it carries on licensed activities except in accordance with a licence.
Detection of unauthorized removalIf a licensee detects the unauthorized removal of nuclear substances from a nuclear facility at which it carries on licensed activities, it mustdetermine the reason for the unauthorized removal; andassess and immediately respond to the unauthorized removal.Record to be keptThe licensee must keep a record that sets out the process by which it will ensure that any unauthorized removal of nuclear substances from the facility is dealt with in accordance with subsection (1).
High-Security SitesDefinition
Definition of licenseeIn this Part, licensee means a person who, in relation to a high-security site, is licensed under the Act to carry out any of the following activities:carry out an activity described in any of paragraphs 26(a), (e) or (f) of the Act; orproduce, refine, convert, enrich, process, reprocess, manage, store or dispose of Category I nuclear material or Category II nuclear material.
Application
Application of PartThis Part applies in respect of high-security sites.
Licence Application
Additional information and documentsThe nuclear security plan contained in an application for a licence in respect of a high-security site must contain, in addition to the information and documents required under paragraph 4(a), the following information and documents:in the description of the proposed nuclear security system, a description of the central alarm station, the backup alarm station and the physical barriers, structures, devices and nuclear security measures in respect of each protected area, vital area and inner area in the site;a description of the protected areas, vital areas and inner areas in the site and the potential targets of sabotage and the location of those areas and targets in the site;information about the organizational structure, duties and training of nuclear security officers, the procedures those officers must follow and the minimum number of nuclear security officers and other personnel who will carry out duties related to security at the site;a description of the nuclear security measures that will be implemented by the licensee to ensure that an effective intervention can be made at that site, taking into account the design basis threat and any other threat identified in the threat and risk assessment;a description of the on-site and off-site communications equipment, systems and procedures;the tactical deployment plans developed with the off-site response force and, if any, the on-site nuclear response force, including an analysis of potential pathways for adversaries and security response times; andfor each physical barrier and nuclear security measure that is intended to delay adversaries who are described in the design basis threat or the threat and risk assessment, an analysis of the delay time provided by that barrier or measure and the data supporting that analysis.
Design Basis Threat
Commission to identify threatsThe Commission must identify any threat involving a person or group that may have the capability, motivation and intent to attemptthe sabotage of a high-security site; orthe unauthorized removal of Category I nuclear material or Category II nuclear material from a high-security site.Commission to inform licenseeThe Commission must inform each licensee of the design basis threat.
Nuclear security systemA licensee must design a nuclear security system taking into account the design basis threat and any other threat identified in the threat and risk assessment, evaluate the ability of the system to respond to those threats and make modifications to the system as necessary.Nuclear security measuresThe licensee must implement nuclear security measures that ensure that an effective intervention can be made, taking into account the design basis threat and any other threat identified in the threat and risk assessment.Record to be keptThe licensee must keep a record that sets out the processes it has implemented to design and make modifications to the nuclear security system.
Security RequirementsNuclear Security Officers
Number and dutiesA licensee must have, at all times, a sufficient number of nuclear security officers available at a high-security site to carry out the following duties:conducting patrols of the site, including in the limited access area, if any;controlling and monitoring the movement of persons, property, Category I nuclear materials, Category II nuclear materials, Category III nuclear materials and vehicles at the site, including in the limited access area, if any;conducting searches of persons and everything in their possession, including any land vehicle, when they enter or exit a protected area or inner area;assessing and responding to nuclear security events;apprehending and detaining intruders;observing and reporting on the movements of intruders;assisting in making effective interventions against intruders;operating nuclear security systems and devices; andcarrying out any other duties that nuclear security officers are required to carry out under these Regulations.Record to be keptThe licensee must keep a record that sets out the duties of its nuclear security officers and give a copy of it to each officer.
Provision of equipmentA licensee must provide each of its nuclear security officers with the equipment, devices and apparel that are necessary to carry out their duties.
Training, knowledge, skill and qualificationsA licensee must ensure that a nuclear security officer does not carry out a duty unlessthey have the training, knowledge and skill that is necessary to allow them to carry out that duty; andthey are qualified to carry out that duty.Continuing training programThe licensee must ensure that each of its nuclear security officers participates in a continuing training program that includes training regardingtheir duties and responsibilities when responding to nuclear security events, including the use of force;the security procedures and nuclear security measures that are relevant to their duties;the design basis threat and any other threat identified in the threat and risk assessment that is relevant to their duties; andthe licensee’s obligations under the Act and its regulations that are relevant to their duties.Record to be keptThe licensee must keep a record of the training received by each of its nuclear security officers.
Record to be kept — firearmsA licensee must keep a record that sets out the following information in respect of each of its nuclear security officers whose duties require them to carry a firearm:the officer’s name;information that demonstrates that the officer is authorized to carry firearms in Canada and is trained and qualified to use them; andwhether or not the officer is a member of the on-site nuclear response force.
Response Forces
On-site nuclear response force requiredSubject to subsection (2), a licensee must maintain an on-site nuclear response force that, in combination with the off-site response force and the nuclear security measures for the high-security site, is capable of making an effective intervention, taking into account the design basis threat and any other threat identified in the threat and risk assessment.ExceptionThe licensee is not required to maintain an on-site nuclear response force ifit implements nuclear security measures that are capable of ensuring that an effective intervention can be made, taking into account the design basis threat and any other threat identified in the threat and risk assessment; andat least 90 days before the first day on which the high-security site will operate without an on-site nuclear response force, it provides to the Commission notice in writing of its intent not to maintain one, a description of the measures referred to in paragraph (a) and information that demonstrates how implementation of those measures will ensure that an effective intervention can be made, taking into account the design basis threat and any other threat identified in the threat and risk assessment.FirearmsThe licensee must ensure that every nuclear security officer who is a member of its on-site nuclear response force is authorized to carry firearms in Canada and is trained and qualified to use them.EquipmentThe licensee must provide nuclear security officers who are members of the on-site nuclear response force with the equipment, devices and apparel that are necessary to make an effective intervention, taking into account the design basis threat and any other threat identified in the threat and risk assessment.
Arrangements with off-site response forceIn addition to meeting the requirements of section 14, the written arrangements made between the licensee and the off-site response force in respect of a high-security site must provide forthe means by which an immediate and continuous communication capability is to be established between the central alarm station, the backup alarm station, nuclear security officers and the off-site response force;the means by which the off-site response force, if requested by the licensee, is to assist the on-site nuclear response force, if any, in making an effective intervention, taking into account the design basis threat and any threat set out in the threat and risk assessment;the duties of the on-site nuclear response force, if any, when responding to nuclear security events and how the on-site nuclear response force will integrate their response with that of the off-site response force;if an on-site nuclear response force is not maintained at the site, the availability of a sufficient number of off-site response force members who are trained and equipped to make an effective intervention, taking into account the design basis threat and any threat set out in the threat and risk assessment; andan annual consultation between the licensee and the off-site response force regarding site familiarization and continuing training.
Contingency Plan
Plan requiredA licensee must develop and maintain a contingency plan to ensure that an effective intervention can be made, taking into account the design basis threat and any other threat identified in the threat and risk assessment.
Security Drill and Security Exercise Program
Program elementsA licensee must implement a security drill and security exercise program that, by means of physical drills, cyber security drills and security exercises, verifies and evaluatesthe readiness of security personnel; andthe effectiveness of all elements of the contingency plan and the nuclear security system, including the nuclear security measures for the transport of nuclear substances.Program updatesThe licensee must update the program after each security drill or security exercise if the results of that drill or exercise indicate that an update is necessary.
Security drillsA licensee must conduct a security drill at least once every 30 days to test the readiness of its security personnel and the operation of one or more nuclear security measures or one or more elements of the contingency plan.Participation of nuclear security officersThe licensee must ensure that, at least once in each quarter of a given year, every nuclear security officer whose duties include the implementation of the contingency plan participates in a security drill.
Security exerciseA licensee must, in cooperation with the off-site response force, at least once every two years, conduct a security exercise that teststhe ability of all elements of the contingency plan and the nuclear security measures to ensure that an effective intervention can be made, taking into account the design basis threat and any other threat identified in the threat and risk assessment; andthe readiness of its security personnel and the off-site response force to respond to the design basis threat and any other threat identified in the threat and risk assessment.Notice to CommissionThe licensee must notify the Commission in writing of its intent to conduct a security exercise at least four months before the day on which the exercise is to be held.
Records to be keptA licensee must, for each security drill and security exercise that it conducts, keep a record that containsan outline of the scenario for that drill or exercise;an evaluation of the readiness of its security personnel and the off-site response force;an evaluation of the effectiveness of the elements of the contingency plan and the nuclear security measures that were tested; anda description of any corrective actions that, taking the results of those evaluations into account, are necessary.Records to be provided — security exerciseThe licensee must, within 180 days after the day on which a security exercise is completed, provide to the Commission a copy of the record for that exercise.
Corrective action planIf a corrective action referred to in paragraph 40(1)(d) is to be implemented using a phased approach, the licensee must create a corrective action plan that sets outthe reasons for the corrective action;the rationale for the phased approach; anda timetable that sets out when each phase of the plan will be completed.ImplementationThe licensee must implement the corrective actions and, if they are to be implemented using a phased approach, each phase must be completed in accordance with the timetable set out in the corrective action plan.Corrective action plan to be providedThe licensee must, within 90 days after the day on which the related security drill or security exercise is completed, provide a copy of the corrective action plan, if any, to the Commission.
Central Alarm Station
Central alarm stationA licensee must ensure that the nuclear security measures referred to in subparagraphs 61(2)(a)(i) and (ii) and 68(1)(a)(i) and (ii) are monitored from a central alarm station.RequirementsThe central alarm station must belocated outside any vital area or inner area;designed, constructed and located so as to resist forced entry, taking into account the design basis threat and any other threat identified in the threat and risk assessment;attended at all times by at least one central alarm station operator;designed or operated so as to prevent a solitary central alarm station operator from tampering with or compromising a nuclear security measure or disabling it without the licensee’s authorization;equipped so as to enable a central alarm station operator inside the central alarm station to receive, assess and acknowledge the alarms referred to in subparagraphs 61(2)(a)(iii) and (b)(ii) and 68(1)(a)(iii) and (b)(ii); andequipped with devices thatenable and record secure communication with nuclear security officers, nuclear security support persons and the off-site response force, andare designed and installed such that the failure of one of the devices does not prevent that communication.EntryThe licensee must not permit a person to enter the central alarm station unless they are security personnel or otherwise authorized to enter by the licensee and they require entry to carry out their duties.Operational readinessThe licensee must implement processes that ensure that the central alarm station maintains operational readiness.
Backup Alarm Station
Station requirementsA licensee must establish a backup alarm station that isindependent from the central alarm station; anddesigned and equipped such that, in the event that the central alarm station is inoperative or cannot be used, it can carry out the same functions as the central alarm station.OperationsThe licensee must ensure that the backup alarm station is operated only by security personnel who have received training on its operation.EntryThe licensee must not permit a person to enter the backup alarm station unless they are security personnel or otherwise authorized to enter by the licensee and they require entry in order to carry out their duties.Operational readinessThe licensee must implement processes that ensure that the backup alarm station maintains operational readiness.TestingThe licensee must test the functions of the backup alarm station at least once every five years.
Clearances and AuthorizationsClearancesHigh-security Site Access Clearance
ConditionsA licensee may grant a high-security site access clearance to a person ifit determines, after verifying the information and documents set out in subsection (2) and taking the factors referred to in subsection (3) into consideration, that the person does not pose an unreasonable risk to the health or safety of persons or the security of the high-security site; orit verifies that the person holdsa valid high-security site access clearance or enhanced security clearance granted by another licensee, ora valid secret or top secret clearance granted under the Directive on Security Screening.Verification of documents and informationFor the purpose of paragraph (1)(a), the licensee must verify the following information and documents in respect of the person who is seeking the high-security site access clearance:the information and documents referred to in subsection 85(2); anda security assessment carried out by the Canadian Security Intelligence Service.Factors to be consideredFor the purpose of making the determination referred to in paragraph (1)(a), the licensee must take the following factors into consideration:the relevance of the information and documents referred to in subsection (2), including the circumstances of any convictions, their seriousness, number and frequency, the date of the last conviction and any sentence or other disposition;whether it is known or there are reasonable grounds to suspect that the personis or has been involved in — or contributes or has contributed to — criminal offences or acts of violence against persons or property,is or has been involved in — or contributes or has contributed to — activities that constitute threats to the security of Canada as defined in section 2 of the Canadian Security Intelligence Service Act,is or has been a member of a terrorist group as defined in subsection 83.01(1) of the Criminal Code or is or has been involved in — or contributes or has contributed to — the activities of such a group,is or has been a member of a criminal organization as defined in subsection 467.1(1) of the Criminal Code or has been involved in — or contributes or has contributed to — the activities of such an organization, oris or has been associated with anyone who is known to be involved in or to contribute to — or in respect of whom there are reasonable grounds to suspect involvement in or contribution to — activities referred to in subparagraph (i) or (ii), or who is a member of a group or organization referred to in subparagraph (iii) or (iv);whether there are reasonable grounds to suspect that the person is in a position in which there is a risk that they could be induced to commit an act or to assist or abet any person to commit an act that might constitute an unreasonable risk to the health or safety of persons or the security of the high-security site;whether a clearance issued in respect of the person has previously been revoked because the person provided false or misleading information to obtain the clearance;any other relevant information that enables the licensee to assess the risk.Period and conditionsThe high-security site access clearance may be granted for a period of no more than 10 years and must be subject to any terms and conditions that are necessary to minimize the risk to the security of the high-security site.Record to be keptA licensee that grants a high-security site clearance under paragraph (1)(b) must keep a record indicating how it verified that the person holds the clearance referred to in that paragraph.
Enhanced Security Clearance
ConditionsA licensee may grant an enhanced security clearance to a person ifit determines, after verifying the information and documents set out in subsection (2) and taking the factors referred to in subsection 44(3) into consideration, that the person does not pose an unreasonable risk to the health or safety of persons or the security of the high-security site; orit verifies that the person holdsa valid enhanced security clearance granted by another licensee, ora valid secret or top secret clearance granted under the Directive on Security Screening.Verification of information and documentsFor the purpose of paragraph (1)(a), the licensee must verify the following information and documents in respect of the person who is seeking the enhanced security clearance:the information and documents referred to in subsection 44(2); andthe results of a credit check.Period and conditionsAn enhanced security clearance may be granted for a period of no more than five years and must be subject to any terms and conditions that are necessary to minimize the risk to the security of the high-security site.
Record
List of personsA licensee must keep an up-to-date list of each person to whom a clearance has been granted under section 44 or 45 and that identifies their clearance.List to be providedThe licensee must, on request, provide a copy of the list to the Commission or an inspector.
Revocation
ConditionsA licensee must revoke a person’s high-security site access clearance or enhanced security clearance ifthe licensee concludes, based on an investigation, that the person poses or could pose an unreasonable risk to the health or safety of persons or the security of the high-security site;the person is no longer employed by or otherwise under contract to the licensee;the person’s duties have been completed, suspended or otherwise terminated;the person no longer requires the clearance to carry out their duties; orthe person provided false or misleading information to obtain the clearance.Commission to be notifiedThe licensee must notify the Commission in writing of any revocation made under paragraph (1)(a) or (e) within five business days after the day on which the revocation is made.
AuthorizationsExceptions
InspectorsSubsection 49(1) and sections 50 and 51 do not apply to an inspector who is designated to carry out inspections at high-security sites or to a person who is chosen by the inspector to accompany them under section 33 of the Act.First respondersDespite subsection 49(1) and sections 50 and 51, a member of the off-site response force, a peace officer or a member of an emergency service who requires access to a protected area, vital area or inner area for the purpose of carrying out their duties may enter and remain in the area without having been granted a high-security site access clearance or enhanced security clearance and, in the event of an emergency in that area, without an authorization referred to in paragraph 49(1)(b) or section 52.
Access to Protected Area
Requirements to enter and remainA person must not enter or remain in a protected area unlessthe licensee has granted the person a high-security site access clearance under section 44 or an enhanced security clearance under section 45;the licensee has granted the person an authorization to enter and remain in the protected area granted under subsection (2) or (3) or an authorization to enter and remain in an inner area granted under section 52; andif the authorization referred to in paragraph (b) is one referred to in subsection (3) or subsection 52(2), they are escorted in accordance with that authorization.Authorization — without escortThe licensee may grant an authorization to a person to enter and remain in a protected area without an escort ifit has, in respect of the high-security site, granted the person a high-security site access clearance or an enhanced security access clearance; andit prepares an identification report that contains the following information and documents in respect of the person:their name and date and place of birth,documentary proof of their lawful presence in Canada,the address of their principal residence,a photograph that depicts a frontal view of their face,their occupation,documentary proof that the licensee has granted them a high-security site access clearance, andthe documents verified by the licensee before granting them a high-security site access clearance.Authorization — with escortThe licensee may grant an authorization to a person to enter and remain in a protected area with an escort ifthe person presents to the licenseein the case of a person who is 18 years of age or over, two pieces of valid government-issued identification, one of which must be photo identification, andin the case of a person who is under the age of 18, documentary proof of their name and address; andthe licensee makes the authorization subject to the condition that the person is, while within the protected area, escorted at all times by a person who, in respect of the high-security site, has been granted a high-security site access clearance or enhanced security clearance.PeriodAn authorization referred to in subsection (2) may be granted for a period of no more than 10 years.ConditionsAn authorization granted under subsection (2) or (3) must be subject to any terms and conditions that are necessary to minimize the risk to the security of the high-security site.Copy of request for information and documentsIf requested by the person referred to in subsection (1), the licensee must provide them with a copy of all information and documents relating to the authorization that are in the licensee’s possession and that were provided to the licensee by or on behalf of that person.
Access to Vital Area and Inner Area
Vital areaA person must not enter or remain in a vital area unless the licensee has granted the person an authorization for the area under subsection 52(1) or (2) and, if the authorization is one referred to in subsection 52(2), the person is escorted in accordance with that authorization.
Inner areaA person must not enter or remain in an inner area unlessthe licensee has granted the person an authorization for the area under subsection 52(1) and they are accompanied by another person who has been granted an authorization referred to in that subsection; orthe licensee has granted the person an authorization for the area under subsection 52(2) and they are escorted at all times by two other persons who have been granted an authorization referred to in subsection 52(1).
Authorization — without escortA licensee may grant an authorization to a person to enter and remain without an escort in a vital area or inner area, as the case may be, ifit has granted an enhanced security clearance to the person for the high-security site; andthe person requires access to the area to carry out a duty required by the licensee.Authorization — with escortThe licensee may grant an authorization to a person to enter and remain with an escort in a vital area or inner area, as the case may be, ifthe person requires access to the area to carry out a duty required by the licensee;it obtains the following information and documents in respect of the person:their name,the address of their principal residence,the name and business address of their employer, anddocumentary proof of their lawful presence in Canada;it makes, in the case of an authorization to enter and remain in a vital area, the authorization subject to the condition that the person is, while within the area, escorted at all times by a person who is authorized to enter and remain in the area and is equipped with a device that permits them to immediately communicate with the central alarm station; andit makes, in the case of an authorization to enter and remain in an inner area, the authorization subject to the condition that the person is, while within the area, escorted at all times by two persons who are authorized to enter and remain in the area, each of whom is equipped with a device that permits them to immediately communicate with the central alarm station.PeriodAn authorization referred to in subsection (1) may be granted for a period of no more than five years.ConditionsAn authorization granted under subsection (1) or (2) must be subject to any terms and conditions that are necessary to minimize the risk to the security of the high-security site.Copy of information and documentsIf requested by the person referred to in subsection (2), the licensee must provide them with a copy of all information and documents relating to the authorization that are in the licensee’s possession and that were provided to the licensee by or on behalf of that person.
Records
Record to be keptA licensee must, for each person to whom an authorization has been granted under section 49 or 52, keep a record that sets out their name, their authorization and the day on which their authorization ends.Retention of recordThe record must be retained until one year after the day on which the person’s authorization ends or is revoked.Record to be providedThe licensee must, on request, provide a copy of the record to the Commission or an inspector.Record to be made availableThe licensee must make a copy of the record available to its nuclear security officers.
Security Personnel
Clearance requiredA licensee must not permit an employee, or any other person who is under contract to the licensee, to carry out the duties of security personnel or those related to nuclear security intelligence unless it has granted the person an enhanced security clearance.
Nuclear Security Officers
Written authorizationA person must not act as a nuclear security officer unless the licensee grants them written authorization to do so.Requirements for authorizationBefore granting the authorization, the licensee mustensure that it has granted the person an enhanced security clearance;ensure that the person has received training on, and that their knowledge and skill has been evaluated with respect to, the following topics as they relate to the duties of nuclear security officers at the high-security site:first aid and cardiopulmonary resuscitation,their duties when responding to nuclear security events, including the use of force,security procedures and nuclear security measures at the high-security site,threats to nuclear security, including sabotage and the unauthorized removal of nuclear substances, andthe licensee’s obligations under the Act and its regulations that are relevant to their duties;ensure that, if the person has previously been granted high-security site access clearance, the person has participated in continuing training related to the topics referred to paragraph (b); andobtain the following documents from the person:documentary proof that the person is a Canadian citizen or a permanent resident as defined in subsection 2(1) of the Immigration and Refugee Protection Act,a certificate, signed by a qualified medical practitioner, certifying that the person does not have a medical condition that would prevent them from performing the tasks that are likely to be assigned by the licensee,a certificate, signed by a fitness consultant who is recognized by the Canadian Society for Exercise Physiology or a person with equivalent or higher qualifications, certifying that the person is physically able to perform the tasks that are likely to be assigned by the licensee, anda certificate, signed by a qualified psychologist, certifying that the person is psychologically able to perform the tasks that are likely to be assigned by the licensee.Assessment by licenseeBefore granting the authorization to a person, the licensee must assess the person’s knowledge of the security procedures and nuclear security measures that are relevant to their duties and their ability to carry them out.Period and conditionsThe authorization may be granted for a period of no more than five years and must be subject to any terms and conditions that are necessary to minimize the risk to the security of the high-security site.Copy of information and documentsIf requested by the person referred to in subsection (2), the licensee must provide them with a copy of all information and documents relating to the authorization that are in the licensee’s possession and that were provided to the licensee by or on behalf of that person.
Nuclear Security Support Person
Written authorizationA person must not act as a nuclear security support person unless the licensee has granted the person written authorization to do so and, if the authorization is one referred to in subsection (3), they are escorted in accordance with subsection (4).Authorization — without escortThe licensee may grant an authorization to a person to act as a nuclear security support person without an escort if it has granted the person an enhanced security clearance for the high-security site.Authorization — with escortThe licensee may grant an authorization to a person to act as a nuclear security support person with an escort if it has obtained the following information and documents in respect of the person:their name;the address of their principal residence;the name and business address of their employer; anda copy of two pieces of valid government-issued identification, one of which must be photo identification.Conditions — escort requiredAn authorization granted under subsection (3) must be made subject to the following conditions:that the person enters or remains in the protected area or inner area only for the purpose of carrying out duties required by the licensee;that, when the person is in a protected area, they are escorted at all times by a person who is authorized under subsection (2);that, when the person is in a vital area, they are escorted at all times by a person who is authorized under subsection (2); andthat, when the person is in an inner area, they are escorted at all times by a person who is authorized under subsection (2) and two other persons who are authorized to enter and remain in the inner area with an escort.PeriodAn authorization referred to in subsection (2) may be granted for a period of no more than five years.ConditionsAn authorization granted under subsection (2) or (3) must be subject to any terms and conditions that are necessary to minimize the risk to the security of the high-security site.Copy of information and documentsIf requested by the person referred to in subsection (2), the licensee must provide them with a copy of all information and documents relating to the authorization that are in the licensee’s possession and that were provided to the licensee by or on behalf of that person.
Central Alarm Station Operator
Written authorizationA person must not act as a central alarm station operator unless the licensee grants them written authorization to do so.Requirements for authorizationBefore granting the authorization, the licensee mustensure that it has granted the person an enhanced security clearance;ensure that the person has received training on the following topics:the operation of the central alarm station,their duties when responding to nuclear security events,security procedures and nuclear security measures at the high-security site,threats to nuclear security, including sabotage and the unauthorized removal of nuclear substances, andthe licensee’s obligations under the Act and its regulations that are relevant to their duties; andobtain the following documents from the person:documentary proof that the person is a Canadian citizen or a permanent resident as defined in subsection 2(1) of the Immigration and Refugee Protection Act,a certificate, signed by a qualified medical practitioner, certifying that the person does not have a medical condition that would prevent them from performing the tasks that are likely to be assigned by the licensee, anda certificate, signed by a qualified psychologist, certifying that the person is psychologically able to perform the tasks that are likely to be assigned by the licensee.Period and conditionsThe authorization may be granted for a period of no more than five years and must be subject to any terms and conditions that are necessary to minimize the risk to the security of the high-security site.Copy of information and documentsIf requested by the person referred to in subsection (2), the licensee must provide them with a copy of all information and documents relating to the authorization that are in the licensee’s possession and that were provided to the licensee by or on behalf of that person.
Record
List of personsA licensee must keep an up-to-date list of each person to whom an authorization has been granted under section 55, 56 or 57 and that identifies the authorization.List to be providedThe licensee must, on request, provide a copy of the list to the Commission or an inspector.
Revocation
ConditionsA licensee must revoke an authorization granted to a person under this Part ifthe licensee concludes, based on an investigation, that the person poses or could pose an unreasonable risk to the health or safety of persons or the security of the high-security site;the person is no longer employed by or otherwise under contract to the licensee;the duties or functions of the person have been completed, suspended or otherwise terminated;the person no longer requires the authorization to carry out their duties; orthe person provided false or misleading information to obtain the authorization.Commission to be notifiedThe licensee must notify the Commission in writing of any revocation made under paragraph (1)(a) or (e) within five business days after the day on which the revocation is made.
Nuclear Security MeasuresPower Supply
Uninterrupted power supplyA high-security site must be equipped with devices that, in the event of the loss of the power supply, maintain an uninterrupted power supply for a period of time that is sufficient to allow for an alternate continuous power supply to be implemented for all critical security measures that require a power supply and that are described in the nuclear security plan.
Protected Area
Perimeter enclosed by physical barrierA protected area must be enclosed by a physical barrier that is located at its perimeter.Other nuclear security measuresThe perimeter of the protected area must beprotected by the following nuclear security measures:two or more independent nuclear security measures that detect intrusion or attempted intrusion and that are designed and installed such that the failure of one measure does not prevent the intrusion or attempted intrusion from being detected and an alarm from being triggered,a nuclear security measure that detects any tampering or attempted tampering that may cause any of the measures referred to in subparagraph (i) or (iv) to malfunction or cease to function,a nuclear security measure that, when an event referred to in subparagraph (i) or (ii) is detected, triggers a continuous alarm that is audible and visible in the central alarm station and that can only be shut off from inside the station by a central alarm station operator, andtwo or more independent nuclear security measures that facilitate an immediate assessment of the cause of the alarm by a central alarm station operator; orkept under the direct visual surveillance of a nuclear security officer who is equipped witha device that enables communication with the central alarm station, anda device that can trigger a continuous alarm that is audible and visible in the central alarm station and that can only be shut off from inside the station by a central alarm station operator.Design, construction and implementationThe physical barrier must be designed and constructed and the other nuclear security measures must be designed and implemented such that together theyprovide sufficient time for the off-site response force or, if any, the on-site nuclear response force to respond to any intrusion into the protected area; andreduce the risk of forced entry into the protected area by any vehicle.Security facilitiesPermanent security facilities such as guard posts and vehicle portals may join with the physical barrier if a continuous barrier is maintained.Means of entry or exitEach gate, door, window or other means of entry or exit in the physical barrier must beconstructed so that it can be closed and securely locked to resist unauthorized entry; andkept closed and securely locked except when persons or land vehicles are entering or exiting the protected area under the direct visual surveillance of a nuclear security officer.
Unobstructed areasBoth sides of the physical barrier referred to in subsection 61(1) must be bordered by an unobstructed area that is free from any structures, equipment or other obstructions and is large enough to allow for the unrestricted observation of the movement of any person or object within the area.LightingAn unobstructed area must be continuously and uniformly illuminated at an intensity that allows the presence of any person or object within the area to be clearly observed and assessed.
Vehicle and vessel barriersThe perimeter of a protected area must be protected by a nuclear security measure that is designed to protect against the forced entry of land vehicles — and, if the protected area is adjacent to a body of water, vessels — into the protected area.
Vital Areas
Identification processA licensee must establish a process to identify vital areas and keep a record that sets out that process.
Nuclear security measuresA vital area must be protected by nuclear security measures thatare in addition to those used to protect the protected area;control access to the vital area;detect unauthorized access to the vital area;delay adversaries who are described in the design basis threat or the threat and risk assessment long enough to ensure that an effective intervention can be made;triggers a continuous alarm that is audible and visible in the central alarm station in the event that an unattended point of entry or exit is opened and that can only be shut off from inside the station by a central alarm station operator; andare monitored to ensure that any tampering or attempted tampering with the measures is detected and assessed.Means of entry or exitEach gate, door, window or other means of entry or exit in a vital area must be securely locked when it is unattended.
List of personsA licensee must keep an up-to-date list of all persons who have access to keys, keycards or any other system, including a computer system, that controls access to a vital area.
Inner Area
Enclosed structureAn inner area must be within an enclosed structure that islocated at least 5 m away from every point in the physical barrier that encloses the protected area; anddesigned and constructed to prevent a person who has gained unauthorized access to Category I nuclear material from removing the material from the inner area before an effective intervention can be made.Means of entry or exitEach gate, door, window or other means of entry or exit in the enclosed structure must be kept closed and securely locked with a device that can only be unlocked from outside the structure by two persons who are authorized under subsection 52(1), with each of them simultaneously using a means of access control.
Nuclear security measuresAn inner area must beprotected by the following nuclear security measures that are in addition to those used to protect the protected area:two or more independent nuclear security measures that detect intrusion into, and unauthorized movement within and out of, the inner area,a nuclear security measure that detects any tampering or attempted tampering that may cause any of the measures referred to in subparagraph (i) or (v) to malfunction or cease to function,a nuclear security measure that, when an event referred to in subparagraph (i) or (ii) is detected, triggers the following continuous and independent alarms:an alarm that is audible and visible in the central alarm station and that can only be shut off from inside the station by a central alarm station operator, andan alarm that is audible and visible in at least one other attended place outside the inner area and that can only be shut off from that place by a person who is authorized under subsection 52(1),two or more independent nuclear security measures that facilitate an immediate assessment of the cause of an alarm, anda nuclear security measure that detects the unauthorized removal of Category I nuclear material, Category II nuclear material or Category III nuclear material from the inner area; orkept under the direct visual surveillance of a nuclear security officer who is equipped witha device that enables communication with the central alarm station, anda device that can trigger a continuous alarm that is audible and visible in the central alarm station and in at least one other attended place outside of the inner area and that can only be shut off from inside the station by a central alarm station operator or from that other place by a person who is authorized under subsection 52(1).Access controlAn inner area must be protected by nuclear security measures thatcontrol access to the area;record each attempt to access the area and verify the identity of each authorized person who enters the area; andare monitored to ensure that any tampering or attempted tampering with the measures is detected and assessed.
Access ControlProhibitions
Unauthorized personsA licensee must not permit an unauthorized person to enter or remain ina protected area;a vital area; oran inner area.Access without required escortThe licensee must not permit a person who has been granted an authorization to enter or remain in a protected area, vital area or inner area with escort to enter or remain in that area unless they are escorted in accordance with that authorization.
Reporting unauthorized personIf a person observes anyone in a protected area, vital area or inner area whom they believe on reasonable grounds is not authorized to be in that area, they must immediately report that fact to a nuclear security officer.
Weapons, explosive substances and threat itemsA licensee must ensure thatweapons are not taken into a protected area or inner area unless they are under the control of a peace officer, nuclear security officer or a member of an on-site nuclear response force or off-site response force who requires access to the area for the purpose of carrying out their duties;explosive substances are not taken into a protected area or inner area unlessthey are under the control of a peace officer, nuclear security officer or a member of an on-site nuclear response force or off-site response force who requires access to the area for the purpose of carrying out their duties; orthey are necessary for an operational requirement and are under the control of a person who is authorized by the licensee and escorted at all times by a nuclear security officer; andthreat items are not taken into a protected area or inner area unless they are necessary for an operational requirement.
Removal of nuclear materialA licensee must ensure that Category I nuclear material, Category II nuclear material or Category III nuclear material is not removed from a protected area or inner area except in accordance with a licence.Vital areaA licensee must ensure that Category I nuclear material, Category II nuclear material or Category III nuclear material is not removed from a vital area without its authorization.
Prohibited activitiesA person must nottake any weapons into a protected area or inner area unless they are under the control of a peace officer, nuclear security officer or a member of an on-site nuclear response force or an off-site response force who requires access to the area for the purpose of carrying out their duties;take any explosive substance into a protected area or an inner area unlessthey are a peace officer, nuclear security officer or a member of an on-site nuclear response force or off-site response force who requires access to the area for the purpose of carrying out their duties, orthey are authorized to do so by the licensee and escorted at all times by a nuclear security officer and the explosive substance is necessary for an operational requirement;take threat items into a protected area or inner area unless they are necessary for an operational requirement; orremove any Category I nuclear material, Category II nuclear material or Category III nuclear material from a protected area, vital area or inner area without the authorization of the licensee.
Identity Verification
Protected areaBefore a person who has been granted an authorization under section 49 enters a protected area, the licensee must verify their identity by two separate personnel identity verification systems, one of which must use biometric information.
Vital areaThe licensee must verify and record the identity of every person who enters a vital area.
Vehicle Access
Land vehiclesA licensee must not permit a land vehicle to enter a protected area, vital area or inner area unless there is an operational requirement for it to be in that area.
Vehicle accessA licensee must ensure that land vehicles only enter into or exit from a protected area through a vehicle portal or, if necessary for an operational requirement, through an opening with two moveable barriers.Both barriers not to be openBoth moveable barriers of a vehicle portal or opening must not be open at the same time except in the event of an emergency or if it is necessary to do so for an operational requirement.When both barriers are openWhen both moveable barriers of a vehicle portal or opening are open at the same time, the vehicle portal or opening, as the case may be, must beattended by at least one nuclear security officer who is equipped with a land vehicle; orprotected by other nuclear security measures that prevent unauthorized access to the protected area.
Inner Area Access
Means of entry or exitA licensee must not permit a gate, door, window or other means of entry or exit in the structure that encloses an inner area to be unlocked, opened or kept open except for the period of time necessary to allow for the passage of persons or items into or out of the area or for the completion of an operational requirement.Direct visual surveillanceWhile the means of entry or exit is unlocked, opened or kept open, the licensee must ensure that it is under the direct visual surveillance of a nuclear security officer who is dedicated exclusively to that task.Unlocked from outsideA licensee must not permit a gate, door, window or other means of entry or exit in the structure that encloses an inner area to be unlocked from the outside unless it is unlocked by two persons who are authorized to enter the inner area, at least one of whom is a nuclear security officer.
Person must be accompaniedA person who is authorized under subsection 52(1) to enter and remain in an inner area must not enter the area unless they are accompanied by another person who is authorized to do so under that subsection and they remain in visual contact with that other person.
Searches
Signage for high-security siteA licensee must post, in close proximity to the location at which the search of persons is conducted, signage that is visible to any person who is about to enter a high-security site that states, in English and French, that all persons entering and exiting the site and everything in their possession, including any land vehicle, areon entering the site, subject to search by a nuclear security officer — using any necessary screening and detection devices — for weapons, explosive substances, threat items and, in the case of a land vehicle, unauthorized persons; andon exiting the site, subject to search by a nuclear security officer for Category I nuclear material, Category II nuclear material and Category III nuclear material using devices capable of detecting that material.Signage for protected area and inner areaA licensee must post, in close proximity to the location at which the search of persons is conducted, signage that is visible to any person who is about to enter a protected area or inner area that states, in English and French, that all persons entering and exiting the area and everything in their possession, including any land vehicle, areon entering the area, subject to search by a nuclear security officer — using any necessary screening and detection devices — for weapons, explosive substances, threat items and, in the case of a land vehicle, unauthorized persons; andon exiting the area, subject to search by a nuclear security officer for Category I nuclear material, Category II nuclear material and Category III nuclear material using devices capable of detecting that material.
Search on entrySubject to subsection (3), a licensee must not permit any person to enter a protected area or inner area unless the person and everything in their possession, including any land vehicle, are searched by a nuclear security officer — using any necessary detection and screening devices — for weapons, explosive substances, threat items and, in the case of a land vehicle, unauthorized persons.Search on exitSubject to subsection (3), a licensee must ensure that all persons exiting a protected area or inner area and everything in their possession, including any land vehicle, are searched by a nuclear safety officer for Category I nuclear material, Category II nuclear material and Category III nuclear material using devices capable of detecting that material.ExceptionsThe following persons are not subject to a search under subsection (1) or (2):a nuclear security officer whose identity has been verified in accordance with section 74 and who requires access to or egress from the protected area or inner area for the purposes of carrying out their duties; anda person who, if they were granted an authorization to enter the area with an escort, is or was escorted in accordance with that authorization and who establishes to a nuclear security officer — by presentation of identification or other evidence — that they are a member of the off-site response force, a peace officer or a member of an emergency service who requires access to or egress from the protected area or inner area for the purpose of carrying out their duties.Search after entryIf the licensee has reasonable grounds to suspect that a person who is in a protected area or inner area has any of the following items in their possession, the licensee must not permit the person to remain in that area unless the person and everything in their possession, including a land vehicle, is searched for those items:weapons or explosive substances that are not under the control of a nuclear security officer or a member of an on-site nuclear response force or off-site response force;threat items that are not necessary for an operational requirement; orCategory I nuclear material, Category II nuclear material or Category III nuclear material that is being removed from the area without the authorization of the licensee.Conduct of searchA search of a person that is conducted under this section must bea non-intrusive search carried out by means of a hand-held scanner, a walk-through scanner equipped with a metal detector or any similar device; ora frisk search carried out by a person of the same sex as the person being searched and extending from head to foot, down the front and rear of the body, around the legs and inside clothing folds, pockets and footwear, if a nuclear security officer determines that it is necessary in order to maintain security.Search of land vehicleIf the high-security site is equipped with a vehicle portal, a search of a land vehicle that is conducted under this section must take place in the vehicle portal.
ProhibitionA person who refuses to submit to a search to which they are subject under section 81 must not enter a protected area or inner area.
Other Nuclear FacilitiesDefinition
Definition of licenseeIn this Part, licensee means a person who, in relation to a nuclear facility referred to in paragraph 3(c) of these Regulations, is licensed under the Act tocarry out an activity described in any of paragraphs 26(a), (e) or (f) of the Act; orproduce, refine, convert, enrich, process, reprocess, manage, store or dispose of a nuclear substance.
Application
Application of PartThis Part applies in respect of the nuclear facilities referred to in paragraph 3(c).
Facility-access Security Clearance
ConditionsA licensee may grant a facility-access security clearance to a person ifit determines, after verifying the information and documents referred to in subsection (2), that the person does not pose an unreasonable risk to the health or safety of persons or the security of the nuclear facility; orit verifies that the person holdsa valid facility-access security clearance, a high-security site access clearance or an enhanced security clearance granted by another licensee, ora valid reliability status or a secret or top secret clearance granted under the Directive on Security Screening.Verification of information and documentsFor the purpose of paragraph (1)(a), the licensee must verify the following information and documents in respect of the person who is seeking the facility-access security clearance:two pieces of valid government-issued identification, one of which must be photo identification;a record that sets out the results of any criminal record check, such as a check that is fingerprint-based; andtheir personal history for the last five years, composed of their educational history, professional qualifications, employment history and character references, but if their history cannot be established for that period, information relating to their trustworthiness, including, if available, the results of a criminal record check from each country in which they have resided for one or more years in the last five years.Period and conditionsA facility-access security clearance may be granted for a term not exceeding 10 years and must be subject to any terms and conditions that are necessary to minimize the risk to the security of the nuclear facility.Record and noticeA licensee that grants a facility-access security clearance under paragraph (1)(b) must keep a record indicating how it verified that the person holds a status or clearance, as the case may be, referred to in that paragraph.
List of personsA licensee must keep an up-to-date list of the persons to whom a facility-access security clearance has been granted.List to be providedThe licensee must, on request, provide a copy of the list to the Commission or an inspector.
RevocationA licensee must revoke a person’s facility-access security clearance ifthe licensee concludes, based on an investigation, that the person poses or could pose an unreasonable risk to the health or safety of persons or the security of the nuclear facility;the person is no longer employed by or otherwise under contract to the licensee;the person’s duties have been completed, suspended or otherwise terminated;the person no longer requires the clearance to carry out their duties; orthe person provided false or misleading information to obtain the clearance.Commission to be notifiedThe licensee must notify the Commission in writing of any revocation made under paragraph (1)(a) or (e) within five business days after the day on which the revocation is made.
Access ControlAccess to Nuclear Facility
Entering or remaining in nuclear facilityA person must not enter or remain in a nuclear facility at which a licensee carries out licensed activities unless theyhave a facility-access security clearance that is granted in respect of that facility by the licensee;are escorted at all times by a person who has such a clearance; orare an inspector who is designated to carry out inspections at nuclear facilities or a person who is chosen by the inspector to accompany them under section 33 of the Act.Escort not requiredDespite paragraph (1)(b), a member of the off-site response force, a peace officer or a member of an emergency service is not required to be escorted if there is an emergency at the facility and they require access to it for the purpose of carrying out their duties.
Licensee’s obligationA licensee must ensure that every person who enters or remains in a nuclear facility at which it carries on licensed activities is permitted to do so under subsection 88(1).Identity verificationThe licensee must establish and implement a process that controls access to the nuclear facility and that ensures that the identity of each person who enters the facility, other than one referred to in paragraph 88(1)(c), is verified by,in the case of a person who has a facility-access security clearance for that facility, presentation of proof of their clearance and use of a device that is capable of verifying their identity;in the case of any other person who is 18 years of age or over, presentation of two pieces of valid government-issued identification, one of which must be photo identification; andin the case of a person who is under the age of 18, presentation of documentary proof of their name and address.
Weapons, explosive substances and threat itemsA licensee must ensure thatweapons are not taken into a nuclear facility unless they are under the control of a peace officer or member of the off-site response force who requires access to the nuclear facility for the purpose of carrying out their duties;explosive substances are not taken into a nuclear facility unlessthey are under the control of a peace officer or member of the off-site response force who requires access to the nuclear facility for the purpose of carrying out their duties; orthey are necessary for an operational requirement and they are under the control of a person who is authorized by the licensee and kept under the direct visual surveillance of a person authorized by the licensee; andthreat items are not taken into a nuclear facility unless they are necessary for an operational requirement.
Prohibited activitiesA person must nottake any weapon into a nuclear facility unless they are a peace officer or a member of the off-site response force who requires access to the nuclear facility for the purpose of carrying out their duties;take any explosive substance into a nuclear facility unlessthey are a peace officer or a member of the off-site response force who requires access to the nuclear facility for the purpose of carrying out their duties, orthey are authorized to do so by the licensee and placed under the direct visual surveillance of a person authorized by the licensee and the explosive substance is necessary for an operational requirement;take any threat item into a nuclear facility unless it is necessary for an operational requirement; orremove any nuclear substance from a nuclear facility without the authorization of the licensee.
Entry of land vehiclesA licensee must not permit a land vehicle to enter a nuclear facility at which the licensee carries on a licensed activity unlessthe land vehicle is searched for explosive substances, weapons, threat items and unauthorized persons; andthere is an operational requirement for the vehicle to be there or it is used by a member of the off-site response force, a peace officer or a member of an emergency service for the purpose of carrying out their duties.ExceptionDespite paragraph (1)(a), a vehicle that is used by a security guard, a member of the off-site response force, a peace officer or a member of an emergency service is not required to be searched if there is an emergency at the nuclear facility and the use of the vehicle is necessary to carry out their duties.
Searches and Screening
SignageA licensee must post, in close proximity to the location at which the search and screening of persons is conducted, signage that is visible to any person who is about to enter the nuclear facility that states, in English and French, thatpersons entering and exiting the facility may be subject to search or screening for explosive substances, weapons, threat items or nuclear substances; andthe licensee must not allow any person who has been selected for search or screening to enter the facility unless that person and everything in their possession, including any land vehicle, is searched or screened.
Processes for search or screeningA licensee must implement processes that, using a risk-based approach, provide for the manner of selecting the persons who are to be searched or screened, respectively,on entering a nuclear facility, for explosive substances, weapons and threat items; andon exiting a nuclear facility, for nuclear substances.Entry search or screeningThe licensee must not permit any person who is selected for search or screening to enter the nuclear facility unless the person and everything in their possession, including any land vehicle, is searched or screened.
Conduct of search or screeningA search or screening referred to in section 94 must be carried out by a person who is authorized to do so by the licensee and must bea non-intrusive search or screening that is carried out by means of a hand-held scanner, a walk-through scanner equipped with a metal detector or any similar device; ora frisk search carried out by a person of the same sex as the person being searched and extending from head to foot, down the front and rear of the body, around the legs and inside clothing folds, pockets and footwear, if a security guard or other person authorized by the licensee determines that it is necessary in order to maintain security.
Security Exercise
Security exerciseA licensee must, in cooperation with the off-site response force, at least once every five years, conduct a security exercise that teststhe ability of selected elements of the contingency plan and selected nuclear security measures to ensure that an effective intervention can be made against, taking into account the threats identified in the threat and risk assessment; andthe readiness of the off-site response force and any security guards to respond to those threats.Notice to CommissionThe licensee must notify the Commission in writing of its intent to conduct a security exercise at least four months before the day on which the exercise is to be held.Record to be keptThe licensee must, for each security exercise that it conducts, keep a record that containsan outline of the exercise scenario;an evaluation of the effectiveness of the elements of the contingency plan and the nuclear security measures that were tested and the readiness of the off-site response force and, if any, the security guards; anda description of any corrective actions that, taking the evaluation into account, are necessary.Corrective action planIf a corrective action referred to in paragraph (3)(c) is to be implemented using a phased approach, the licensee must create a corrective action plan that sets outthe reasons for the corrective action;a rationale for the phased approach; anda timetable that sets out when each phase of the plan will be completed.Corrective actionsThe licensee must implement the corrective actions and, if they are to be implemented using a phased approach, each phase must be completed in accordance with the timetable set out in the corrective action plan.Records to be providedThe licensee must, within 90 days after the day on which the security exercise is completed, provide to the Commission a copy of the record referred to in subsection (3) and, if any, a copy of the corrective action plan referred to in subsection (4).
Licence to Transport
Definition of licenseeIn this Part, licensee means a person who is licensed to transport Category I nuclear material, Category II nuclear material or Category III nuclear material.
ApplicationThis Part applies in respect of the transport of Category I nuclear material, Category II nuclear material or Category III nuclear material.
ExemptionA person may, without a licence to carry on that activity, transport Category I nuclear material, Category II nuclear material or Category III nuclear material within an area in which the material is required by sections 19 to 21 to be produced, processed, used or stored.Section 26 of ActFor greater certainty, the exemption established under subsection (1) relates only to the activity specified in that subsection and does affect the licence requirement imposed by section 26 of the Act in relation to other activities.
Transport security planAn application for a licence to transport Category I nuclear material, Category II nuclear material or Category III nuclear material must contain, in addition to the information required under section 7 of the Packaging and Transport of Nuclear Substances Regulations, 2015, a transport security plan that includesthe name, quantity, radiation level in Gy/h, chemical and physical characteristics and isotopic composition of the nuclear material;a threat and risk assessment;a description of the conveyance and, if any, the escort arrangements;the proposed security measures;a description of how the applicant will evaluate and improve the security measures, including the proposed scheduling of security exercises;the planned route and at least one alternate route;the tracking and communication arrangements made among the applicant, the operator of the land vehicle transporting the nuclear material, the recipient of the material and any off-site response force throughout the transport; andthe arrangements made between the applicant and any off-site response force throughout the transport.
Security exerciseThe licensee must conduct a security exercise in respect of the transport of Category I nuclear material, Category II nuclear material and Category III nuclear material at least once every five years.Record to be keptThe licensee must, for each security exercise that it conducts, keep a record that containsan outline of the exercise scenario;an evaluation of the effectiveness of the security measures that were tested; anda description of any corrective actions that, taking the evaluation into account, are necessary.Corrective action planIf a corrective action referred to in paragraph (2)(c) is to be implemented using a phased approach, the licensee must create a corrective action plan that sets outthe reasons for the corrective action;a rationale for the phased approach; anda timetable that sets out when each phase of the plan will be completed.Corrective actionsThe licensee must implement the corrective actions and, if they are to be implemented using a phased approach, each phase must be completed in accordance with the timetable set out in the corrective action plan.Records to be providedThe licensee must, within 90 days after the day on which the security exercise is completed, provide to the Commission a copy of the record referred to in subsection (2) and, if any, a copy of the corrective action plan referred to in subsection (3).
Consequential Amendments, Transitional Provisions, Repeal and Coming into ForceConsequential AmendmentsClass I Nuclear Facilities Regulations
[Amendments]
Nuclear Substances and Radiation Devices Regulations
[Amendments]
Administrative Monetary Penalties Regulations (Canadian Nuclear Safety Commission)
[Amendments]
Packaging and Transport of Nuclear Substances Regulations, 2015
[Amendments]
[Amendments]
Transitional Provisions
Definition of former RegulationsFor the purposes of this section, former Regulations means the Nuclear Security Regulations as they read immediately before the day on which these Regulations come into force.Words and expressionsUnless the context otherwise requires, words and expressions used in this section have the same meaning as in section 1.Nuclear facilityThe former Regulations and Part 9 of the schedule to Administrative Monetary Penalties Regulations (Canadian Nuclear Safety Commission), as they read immediately before the day on which these Regulations come into force, continue to apply for two years after that day to a nuclear facility for which, on the day on which these Regulations come into force, a licence issued under the Act is in force.Existing authorization or clearanceIf a person has been granted a clearance or issued an authorization under the former Regulations, that clearance or authorization remains valid until the expiry of the term for which it was granted or issued, and during that term the person may continue to access any area or information and carry out any duties and responsibilities that the clearance or authorization permitted them to access or carry out under the former Regulations.Site access security clearanceIf a person has been granted a site access security clearance under the former Regulations that is valid on the day on which these Regulations come into force and that, to maintain the person’s access to the nuclear facility, must be replaced by a facility-access security clearance granted under section 85, the licensee that granted the clearance may, before the term of the clearance expires, extend the term of the clearance to any term not exceeding 10 years.
Repeal
The Nuclear Security Regulations5 are repealed.SOR/2000-209
Coming into Force
RegistrationThese Regulations come into force on the day on which they are registered.
(Section 1)Category I, II and III Nuclear MaterialColumn 1Column 2Column 3Column 4Column 5ItemNuclear SubstanceFormQuantity(Category I Nuclear Material)1Quantity(Category II Nuclear Material)1Quantity(Category III Nuclear Material)1,51Plutonium2Unirradiated32 kg or moreLess than 2 kg, but more than 500 g500 g or less, but more than 15 g2Uranium 235Unirradiated3 — uranium enriched to 20% 235U or more5 kg or moreLess than 5 kg, but more than 1 kg1 kg or less, but more than 15 g3Uranium 235Unirradiated3 — uranium enriched to 10% 235U or more, but less than 20% 235UN/A10 kg or moreLess than 10 kg, but more than 1 kg4Uranium 235Unirradiated3 — uranium enriched above natural, but less than 10% 235UN/AN/A10 kg or more5Uranium 233Unirradiated32 kg or moreLess than 2 kg, but more than 500 g500 g or less, but more than 15 g6Fuel consisting of depleted or natural uranium, thorium or low-enriched fuel (less than 10% fissile content)4IrradiatedN/AMore than 500 g of plutonium500 g or less, but more than 15 g of plutonium
The quantities listed refer to the aggregate of each kind of nuclear substance located at a facility, excluding the following (which are considered separate quantities):any quantity of the nuclear substance that is not within 1 000 m of another quantity of the nuclear substance; andany quantity of the nuclear substance that is located in a locked building or a similarly resistant structure.All plutonium except that with isotopic concentration exceeding 80% in plutonium 238.Material not irradiated in a reactor or material irradiated in a reactor but with a radiation level equal to or less than 1 Gy/h at 1 m unshielded.Other fuel that by virtue of its original fissile content is classified as Category I nuclear material or Category II nuclear material before irradiation may be reduced one category level while the radiation level from the fuel exceeds 1 Gy/h at 1 m unshielded if the Commission is provided with written confirmation of the radiation level.Quantities less than the quantities set out in column 5 for Category III nuclear material and any quantities of natural uranium, depleted uranium or thorium should be protected at least in accordance with the requirements of paragraphs 12(1)(c), (g), (h) and (j) of the General Nuclear Safety and Control Regulations.