Guidance: UK Personnel Security Clearances for access to International Classified Information

Transcription

1 Guidance: UK Personnel Security Clearances for access to International Classified Information Version 2.0 July The information in this guide has been designated as need to know and its distribution is limited to government security officials.

2 Version History Document Date Summary Of Changes Version Published 1.0 April 2014 First version published on GOV.UK 1.1 July 2014 Version History added and minor editorials throughout. 2.0 July 2015 Most of content redrafted and reorganised. Main change is the removal of a hardcopy option for submitting PSC applications and the introduction of FCO e-form for those not using Cerberus. 2

3 Contents INTRODUCTION... 4 SECTION 1: PERSONNEL SECURITY CLEARANCE REQUESTS... 5 UK PERSONNEL SECURITY CLEARANCES... 5 CONFIRMING THE NEED FOR A PSC... 5 TRANSFERRING AN EXISTING PSC... 5 NEW PSC REQUESTS AND RENEWALS... 6 VETTING DECISIONS... 7 EMPLOYER SECURITY RESPONSIBILITIES AFTER A PSC IS ISSUED... 7 SECTION 2: SUBMITTING PSC REQUESTS FOR INTERNATIONAL ORGANISATIONS OFFICIALS... 9 SECTION 3: SUBMITTING PSC REQUESTS FOR NATO ORGANISATIONS WITHIN THE CIVILIAN STRUCTURE, THE EU AND ESA OFFICIALS...10 SECTION 4: SUBMITTING PSC REQUESTS FOR INTERNATIONAL DEFENCE CLASSIFIED CONTRACTS UK COMPANIES...11 SECTION 5: SUBMITTING PSC REQUESTS FOR INTERNATIONAL DEFENCE CONTRACTS NON-UK COMPANIES...12 SECTION 6: SUBMITTING PSC REQUESTS FOR INTERNATIONAL NON-DEFENCE CONTRACTS UK COMPANIES...13 SECTION 7: SUBMITTING PSC REQUESTS FOR INTERNATIONAL NON-DEFENCE CONTRACTS NON-UK COMPANIES...14 ANNEX A: SAMPLE LETTER CONFIRMING PSC REQUIREMENT FOR CONTRACTOR PERSONNEL..15 ANNEX B: UK PSC APPLICATIONS USING CERBERUS...16 ELIGIBILITY FOR HOLDING A CERBERUS SPONSOR ACCOUNT REGISTERING FOR A CERBERUS SPONSOR ACCOUNT USE OF A CERBERUS SPONSOR ACCOUNT KEEPING SPONSOR ACCOUNTS LIVE SUBMITTING VETTING APPLICATION REQUESTS CREATING A USER ACCOUNT FOR THE VETTING SUBJECT COMPLETING THE SPONSOR S SECTION OF THE E-FORM TIME LIMITS FOR VETTING APPLICATIONS HELPFUL HINTS DBS NSV HELPDESK CONTACT DETAILS

4 Introduction 1. In 2014 the UK National Security Authority (UK NSA) issued guidance concerning the procedures to follow when making Personnel Security Clearance (PSC) applications for UK nationals who require access to international classified information. This document replaces that guidance and provides updated procedures. 2. This guidance is applicable only for: i. UK nationals working for NATO, EU or ESA that require access to international classified information at the CONFIDENTIAL level or higher; and ii. UK nationals that are contractors and require access to international classified information at the CONFIDENTIAL level or higher to fulfil a classified contract. 3. UK companies that employ non-uk nationals and require them to be security cleared to access NATO, EU, ESA or foreign government classified information at the CONFIDENTIAL level or higher should contact the UK NSA for advice on how they can apply for a PSC. 4. This document is not applicable to HMG officials or UK contractors awarded HMG contracts requiring access to HMG classified assets. 5. Any enquires about this guidance should be addressed to: UK National Security Authority Cabinet Office Room Whitehall London SW1A 2AS United Kingdom UK-NSA@cabinet-office.x.gsi.gov.uk 4

5 Section 1: Personnel Security Clearance Requests UK Personnel Security Clearances 6. Access to international classified information at the level CONFIDENTIAL or above requires an individual to hold a valid Personnel Security Clearance (PSC). The UK has two levels of National Security Vetting (NSV) which permit access to international classified information. These are: Security Check (SC) Permits access to international classified information up to and including the level of international SECRET. Developed Vetting (DV) Permits access to international classified information up to and including the level of international TOP SECRET. 7. A Counter Terrorist Check (CTC) is a NSV clearance that permits access to sensitive sites within the UK. A CTC does not permit access to international classified information at the level of CONFIDENTIAL or above. 8. The Baseline Personnel Security Standard (BPSS) is a UK pre-employment recruitment check, not a NSV clearance. The BPSS does not permit access to international classified information at the level of CONFIDENTIAL or above. Confirming the need for a PSC 9. It is HMG policy that NSV can only be carried out in respect of individuals who have a genuine and confirmed requirement to access either NATO, EU, ESA or other third party classified information at the level of CONFIDENTIAL or above in order to fulfil his/her duties, and where there is a specific obligation for the HMG under international treaties or arrangements. This includes contractor personnel where HMG will only process vetting applications for individuals who are successful in obtaining a classified contract requiring access to international classified information at the level of CONFIDENTIAL or above. 10. Any request for a PSC must be accompanied by independent confirmation from the relevant International Organisation (e.g. NATO) or Government Security Authority (i.e. NSA, Designated Security Authority (DSA), Competent Security Authority (CSA)) that a clearance is required. Speculative vetting requests, requests made directly by the subject of the proposed vetting, or requests from organisations/companies without the necessary confirmation that a PSC is required will not be accepted by HMG. Transferring an existing PSC 11. International Organisations or companies may employ personnel who have held a PSC in the past. PSCs are role specific, time limited, and will lapse after 12 months of the subject leaving a position requiring access to classified assets. Therefore it must not be assumed that a previously issued PSC will still remain valid for a new position. Employers should contact the UK issuing authority if they wish to check whether a PSC is still valid. If the UK issuing authority is not known the UK NSA may be contacted. 12. A transfer of an existing UK issued PSC to the new employer can be requested but this requires confirmation of when the subject left their previous employment, confirmation 5

6 of the current requirement to hold a clearance, and confirmation of when the subject joined the new employer requiring the clearance. After reviewing a case a decision will be taken by the relevant UK issuing authority as to whether a PSC can remain valid for the current employment and can be transferred. Employers should approach the UK NSA for further advice should they wish to request the transfer of a PSC. New PSC requests and renewals 13. The UK currently does not have a single system for processing NSV applications. Whilst not exhaustive, the following table sets out how vetting applications are to be submitted in particular circumstances: Security vetting scenarios A. UK national directly employed by a NATO organisation that sits within the Military structure (e.g. International Military Staff, ACO, ACT). B. UK national directly employed by a NATO Agency. C. UK national directly employed by the European Defence Agency (EDA). D. UK national directly employed by a NATO organisation that sits within the Civilian structure (e.g. the International Staff). E. UK national directly employed by an EU institution, agency or body. F. UK national directly employed by the European Space Agency (ESA). G. UK national employed by UK company working on a NATO classified contract. H. UK national employed by UK company working on a EDA classified contract. I. UK national directly employed by a UK company who will access another nation s defence classified information. J. UK national employed by non-uk company working on a NATO classified contract. K. UK national employed by non-uk company working on a EDA classified contract. L. UK national directly employed by a non-uk company who will access another nation s defence classified information. Section and page Section 2 Page 9 Section 3 Page 10 Section 4 Page 11 Section 5 Page 12 6

7 Security vetting scenarios M. UK national employed by a UK company working on an EU classified contract (excluding the EDA). N. UK national employed by a UK company working on the European Galileo programme. O. UK national employed by a UK company working on a ESA classified contract. P. UK national employed by a UK company who will access another nation s non-defence classified information. Q. UK national employed by a non-uk company working on an EU classified contract (excluding the EDA). R. UK national employed by a non-uk company working on the European Galileo programme. S. UK national employed by a non-uk company working on a ESA classified contract. T. UK national employed by a non-uk company who will access another nation s non-defence classified information. Section and page Section 6 Page 13 Section 7 Page 14 Vetting Decisions 14. After a vetting application has been processed by either Defence Business Services National Security Vetting (DBS NSV) or FCO Services National Security Vetting the relevant UK authority will make a vetting decision. Applicants should note that the UK NSA does not make vetting decisions. Any questions regarding a vetting decision should be addressed to the relevant UK authority. 15. Once clearance has been granted the relevant UK issuing authority will send a letter to the sponsor of the PSC and enclose a NATO, EU or ESA PSC certificate (if requested and if applicable). 16. If the vetting subject is refused a PSC the UK issuing authority will send a letter to the sponsor. Please note that the UK issuing authority will not give the reasons for the refusal of a PSC. 17. An individual whose PSC application is refused may be eligible to appeal against that decision. More information about appeals can be found in HMG Personnel Security Controls on GOV.UK 1. Employer security responsibilities after a PSC is issued 18. Any PSC issued by HMG provides a level of assurance at the time of the vetting decision, and must be subject to review to ensure that the necessary level of assurance is maintained whilst the individual continues to have access to international classified assets

8 Therefore International Organisations and companies that employ personnel with valid UK PSCs are responsible for this ongoing personnel security function (i.e. aftercare). 19. Security Officers must inform the relevant UK issuing authority immediately should they become aware of any adverse information that may affect the status of a PSC issued for an employee. 20. Employees granted a PSC also have a personal responsibility to report any changes in their circumstances that may affect the status of their PSC. If the subject has recently got married, entered into a civil partnership or started living with a partner as a couple then that individual should complete the form NSV004 - Change of Personal Circumstances Questionnaire 2 and submit this to the UK issuing authority. If an individual granted a PSC has any other change in their circumstances which might affect their clearance they should contact the relevant UK issuing authority. 21. Accurate PSC records must be maintained by HMG in order for PSCs to remain valid. Should an individual holding a PSC leave the employment of an organisation/company then the Security Officer or sponsor of this former employee must inform the relevant UK issuing authority. 22. Concerning paragraphs 19, 20 and 21, if the UK issuing authority of the PSC is not known then the UK NSA can be contacted for advice

9 Section 2: Submitting PSC requests for International Organisations Officials Vetting process Version 2.0 Jul Vetting applications for UK nationals directly employed by a NATO organisation that sits within the Military structure (e.g. International Military Staff, ACO, ACT), a NATO Agency, or the European Defence Agency (EDA) are processed using an online system known as Cerberus (Note: NATO organisations that sit within the Civilian structure should refer to section 3). Requesting new PSCs Existing sponsors 24. International Organisations are likely to hold Cerberus sponsor accounts already. New PSC requests or renewals can be submitted using this existing account. Requesting new PSCs New sponsors 25. For International Organisations without a Cerberus sponsor account the UK NSA requires the following: A short cover letter from the International Organisation that explains and confirms the need to have a sponsor account; and A completed International Cerberus Sponsor Account Application 3 completed by the sponsor (see below). Cerberus sponsors 26. The sponsor will be the person who will register on the Cerberus system, submit a new vetting application for the subject that needs a PSC, and will need to answer specific identification and security questions about the subject. Therefore it is important that that the most appropriate individual within the International Organisation assumes this role (e.g. Security Officer, Recruitment Manager, Head of Human Resources, etc). Submitting the vetting application 27. Once registered and logged onto Cerberus the sponsor will be able to submit a new vetting application for the subject. 28. Guidance on using Cerberus for both the sponsor and subject can be found at Annex B

10 Section 3: Submitting PSC requests for NATO organisations within the civilian structure, the EU and ESA Officials Vetting process 29. Vetting applications for UK nationals directly employed by a NATO organisation that sits within the Civilian structure (e.g. International Staff), a EU institution, agency or body 4 or the European Space Agency (ESA) are undertaken using an electronic process facilitated by FCO Services. Requesting new PSCs 30. The UK NSA requires from the requesting International Organisation: A short cover letter that explains and confirms the need for the individual to hold a PSC; and A completed International E-form request 5 form. When both documents are received the UK NSA will submit these to the UK department responsible for undertaking the vetting. If accepted an will be sent to the proposed vetting subject explaining the next steps. Checks required by requesting International Organisation 31. As part of the UK s vetting process certain checks need to be made by the employer requiring the PSC. These involve a check of identity, employment/academic history for the past 12 months, and confirmation of the subject s nationality. Requests submitted without these checks having been completed may be subject to significant delay. Further information 32. Information on completing the e-form and general Q&A regarding the vetting process can be found online at GOV.UK 6. 4 Excluding EDA and Europol. For EDA follow section 2. For Europol vetting requests are to be made directly to the NCA

11 Section 4: Submitting PSC requests for international defence classified contracts UK companies Vetting process 33. Vetting applications for UK nationals working on international defence classified contracts are undertaken using an online system known as Cerberus. Requesting new PSCs List X companies 34. List X companies will likely already hold a Cerberus account. New PSCs requests or renewals are to be submitted using this existing account. If no account is currently held then the Security Controller for the List X company should contact the Security Advice Centre to request one. Requesting new PSCs Non-List X companies 35. The UK NSA requires from the relevant foreign NSA, DSA or CSA or International Organisation: A short cover letter that explains and confirms that a classified contract (at the level CONFIDENTIAL or above) is held by the contractor and that contractor personnel require a PSC to fulfil that contract. A sample letter can be found at Annex A; and A completed Contractor PSC confirmation form 7. From the UK company requiring the PSC the UK NSA needs: A completed International Cerberus Sponsor Account Application 7 completed by the sponsor (see below). Cerberus sponsors 36. The sponsor will be the person who will register on the Cerberus system, submit a new vetting application for the subject who needs a PSC, and will need to answer specific identification and security questions about the subject. Therefore it is important that that the most appropriate individual within the company assumes this role (e.g. Security Officer, Managing Director, Head of Human Resources, etc). Submitting the vetting application 37. Once registered and logged onto Cerberus the sponsor will be able to submit a new vetting application for the subject. 38. Guidance on using Cerberus for both the sponsor and subject can be found at Annex B

12 Section 5: Submitting PSC requests for international defence contracts non-uk companies Vetting process 39. Vetting applications for UK nationals working on international defence classified contracts are undertaken using an online system known as Cerberus. Requesting new PSCs 40. For new PSC requests the UK NSA requires from the relevant foreign NSA, DSA or CSA or International Organisation: A short cover letter that explains and confirms that a classified contract at the level CONFIDENTIAL or above is held by the contractor, and that contractor personnel require a PSC to fulfil that contract. A sample letter can be found at Annex A; and A completed Contractor PSC confirmation form 8. From the non-uk company requiring the PSC the UK NSA needs: A completed International Cerberus Sponsor Account Application 8 completed by the sponsor (see below). The role of the Sponsor 41. The sponsor will be the person who will register on the Cerberus system, submit a new vetting application for the subject, and will need to answer identification and security questions about the subject. Therefore it is important that that the most appropriate individual within the company assumes this role (e.g. Security Officer, Managing Director, Head of Human Resources, etc). Submitting the vetting application 42. Once registered and logged onto Cerberus the sponsor will be able to submit a new vetting application for the subject. 43. Guidance on using Cerberus for both the sponsor and subject can be found at Annex B

13 Section 6: Submitting PSC requests for international nondefence contracts UK companies Vetting process 44. Vetting applications for contractors working on international non-defence classified contracts are undertaken using an electronic process facilitated by FCO Services. Requesting new PSCs List X companies 45. Existing List X companies should consult the UK NSA before proceeding further. Requesting new PSCs UK companies undertaking a Galileo classified contract 46. These companies should consult the UK DSA for Galileo directly for information on how to submit PSC requests and renewals. Requesting new PSCs Non-list X companies 47. The UK NSA requires from the relevant foreign NSA, DSA or CSA or International Organisation: A short cover letter confirming that a classified contract at the level CONFIDENTIAL or above is held by the contractor, and that contractor personnel require a PSC to fulfil that contract. A sample letter can be found at Annex A; and A completed Contractor PSC confirmation form 9. From the UK company requiring the PSC the UK NSA needs: A completed International E-form request form When all three documents are received the UK NSA will submit these to the relevant UK department responsible for undertaking the vetting. If accepted an will be sent to the proposed vetting subject explaining the next steps. Checks required by the requesting UK company 49. As part of the UK s vetting process certain checks need to be made by the employer requiring the PSC. These involve a check of identity, employment/academic history for the past 12 months, and confirmation of the subjects nationality. Requests submitted without these checks having been completed may be subject to significant delay. Further information 50. Information on completing the e-form and general Q&A regarding the vetting process can be found online at GOV.UK

14 Section 7: Submitting PSC requests for international nondefence contracts non-uk companies Vetting process 51. Vetting applications for contractors working on international non-defence classified contracts are undertaken using an electronic process facilitated by FCO Services. Requesting new PSCs 52. The UK NSA requires from the relevant foreign NSA, DSA or CSA or International Organisation: A short cover letter confirming that a classified contract at the level CONFIDENTIAL or above is held by the contractor, and that contractor personnel require a PSC to fulfil that contract. A sample letter can be found at Annex A; and A completed Contractor PSC confirmation form 11. From the non-uk company requiring the PSC the UK NSA needs: A completed International E-form request form When all three documents are received the UK NSA will submit these to the relevant UK department responsible for undertaking the vetting. If accepted an will be sent to the proposed vetting subject explaining the next steps. Checks required by the requesting UK company 54. As part of the UK s vetting process certain checks need to be made by the employer requiring the PSC. These involve a check of identity, employment/academic history for the past 12 months, and confirmation of the subjects nationality. Requests submitted without these checks having been completed may be subject to significant delay. Further information 55. Information on completing the e-form and general Q&A regarding the vetting process can be found online at GOV.UK

15 Annex A: Sample letter confirming PSC requirement for contractor personnel Version 2.0 Jul 2015 This is a template letter that can be used by International Organisations and foreign governments to confirm a PSC requirement. If used it should be amended and modified depending on the circumstances and nature of the request. UK National Security Authority Cabinet Office Room Whitehall SW1A 2AS United Kingdom Dear [Name] Subject: APPLICATION FOR PERSONNEL SECURITY CLEARANCES FOR ACCESS TO [NATO / EU / ESA / foreign government] CLASSIFIED INFORMATION 1. [Company name (full company address)] is conducting work for [NATO / EU / ESA / foreign government] on [Insert name of contract, subject, brief details of the tender/contract, any reference number(s), etc]. 2. This [tender/contract] requires this contractor s personnel to have access to classified information at the level of [NATO / EU / ESA / foreign government] [CLASSIFICATION LEVEL] [and/or] access to [If applicable - Insert details of establishments where access is needed to fulfil the classified contract]. 3. It is requested that the personnel listed in the attached Contractor PSC Confirmation form be vetted in accordance with [NATO / EU / ESA] policy in order to obtain a Personnel Security Clearance (PSC) and be permitted access to classified information marked up to and including [State the maximum classification level required for the individual to fulfil the tender/contract]: [Signed and dated by an appropriate authorised employee of the requesting International Organisation / Government Authority] 15

16 Annex B: UK PSC applications using Cerberus Eligibility for holding a Cerberus Sponsor account 1. National Security Vetting (NSV) can only be carried out in respect of individuals who have a requirement to access international classified information at the level of CONFIDENTIAL or above in order to fulfil their duties. Cerberus Sponsor accounts can therefore only be requested by an organisation in respect of an individual who has a genuine and confirmed requirement to be vetted. Registering for a Cerberus sponsor account 2. After following the instructions described in Sections 2, 4 and 5 of this guidance the UK NSA will submit the completed International Customer Sponsor Account Application form to Defence Business Services National Security Vetting (DBS NSV). DBS NSV manages the Cerberus system and processes vetting applications submitted using the system. 3. When DBS NSV has created a sponsor account an will be sent to the sponsor prompting them to activate the account through the DBS NSV portal 13. The from DBS NSV will contain a unique Sponsor Identification (ID) Number and two hyperlinks. This will look similar to Figure 1 below: Dear [Sponsor s Name], An account has been created for you on the Defence Business Services National Security Vetting (DBS NSV) portal to allow you to submit and track online applications for security vetting. Please click on the link below or copy it to your browser to use this service. populated here) details After you have successfully registered, please use the following URL to access the DBS NSV Portal. Figure 1 The first hyperlink will take the sponsor applicant to the e-form portal and the Confirm user details screen, which must be completed to activate the account. The second hyperlink should be used to access the sponsor account after it has been activated. 4. On the Confirm user details screen of the portal, the sponsor applicant will see the fields as illustrated in Figure

17 Enter first name only Figure 2 5. The details that the sponsor enters on this screen will be compared against the details that have previously been entered in the International Customer Sponsor Account Application form. If the details are input incorrectly more than 5 times, the account will be locked and the sponsor must contact the DBS NSV Helpdesk for assistance. 6. After the sponsor has successfully completed the Confirm user details screen, they will be prompted to create a username and password (Figure 3). The password has to be in accordance with the rules specified on the screen. Figure 3 7. When the sponsor has successfully created an acceptable username and password, the Application completed screen (Figure 4) will appear. The sponsor will now be able to use the account. Figure 4 17

18 Use of a Cerberus sponsor account 8. Sponsor accounts are to be used solely by the individual that has requested and registered the account. The access and use of a sponsor account by any other individual is considered a serious security incident and may result in the sponsor account being suspended and/or access to Cerberus being revoked for the organisation. 9. If an employee originally holding a Cerberus sponsor account leaves the organisation, or an organisation has a need to set up an additional Cerberus sponsor account, then a new sponsor application can be submitted as described by this guidance (see Sections 2, 4 and 5). Keeping sponsor accounts live 10. Sponsors should note that Cerberus accounts will be locked after 6 months of inactivity, and deleted after 12 months of inactivity. Submitting vetting application requests 11. The sponsor can only submit a vetting application for a subject using Cerberus after being successfully registered as a sponsor (paragraphs 2-7 above), and if there is a confirmed requirement for the subject to be vetted. Submitting vetting application requests for individuals without a confirmed requirement is a violation of the Cerberus terms and conditions and will result in sponsor accounts being terminated. 12. To submit a PSC application for an individual, the sponsor must go to the DBS NSV portal and log in (see Figure 5 below). Figure 5 Creating a user account for the vetting subject 13. The sponsor will be taken to the Home: Sponsor view. The sponsor needs click on the New Subject tab (Figure 6, red circle). The Create new user account screen will then open (Figure 7). 18

19 Figure 6 Figure On the Create new user account screen (Figure 7) the sponsor must enter the vetting subject s details: address - The subject will need to provide the sponsor with a suitable address. Date of Birth - This must be in Day/Month/Year format. 19

20 Vetting Service - The appropriate security vetting level must be selected from the dropdown menu. If the subject already holds, or has held a UK PSC until recently then the review option should be selected. Only two types of PSC are valid for accessing international classified information. These are: - Security Check (SC) Permits access to international classified information up to and including the level of international SECRET. - Developed Vetting (DV) Permits access to international classified information up to and including the level of international TOP SECRET. The CTC clearance does not permit access to international classified information so should not be selected. Sponsor s reference - This reference is decided by the sponsor themselves. 15. Before selecting the Create button it is advised that sponsors take a screen print of this page. This is because the subject will need to input these details exactly in order to access their user account. 16. After the Create button is selected a message will appear to confirm that the subject s account has been created (Figure 8). An will automatically be sent to the subject, prompting them to activate their account and start completing their own electronic vetting application form (e-form). Completing the sponsor s section of the e-form Figure The sponsor is required to complete a short section of the e-form about the vetting subject. This involves the sponsor undertaking some basic checks about the subject (e.g. confirming identity, nationality, etc) and recording these checks on the application. Some advice on the checks and how they can be undertaken can be found on GOV.UK In the Home view (Figure 5) the sponsor will see an entry for the subject. Clicking the Details hyperlink at the right of the entry will take the sponsor to the Subject s details: Sponsor view screen shown at Figure 9:

21 Figure Sponsors need to click on the Complete sponsor s part of [SC/DV] link (highlighted by the red circle in Figure 9 above) to open the section of the e-form that they need to complete. 20. Once the e-form is open, the sponsor will see the welcome screen for the questionnaire (Figure 10) which has advice on how to complete their part of the form. Figure 10 21

22 21. Please note that the sponsor can only select the Submit Form button when all the sponsor sections of the e-form have been filled in and shown as complete (indicated by a green tick). The sponsor can leave the e-form and come back to complete parts of it later, but the Save and exit button must first be selected to avoid losing the data previously inputted. Time Limits for Vetting Applications 22. From the date on which the sponsor creates the user account the subject has 30 calendar days to activate their user account. 23. Both the subject and the sponsor have 63 calendar days to fully complete their respective parts of the vetting application electronically. If this time expires the vetting application will become void, any information submitted previously will be deleted and the vetting application will need to be resubmitted by the sponsor. Helpful Hints 24. More detailed guidance on using Cerberus can be found on GOV.UK It should be noted that the UK NSA does not operate Cerberus. General assistance in using Cerberus can be obtained by contacting the DBS NSV Helpdesk. DBS NSV Helpdesk contact details Opening Times: Monday to Thursday, Friday, DBS-NSV-Customerenquiries@mod.uk Telephone: +44 (0) Address: Defence Business Services National Security Vetting Building 107, Imphal Barracks Fulford Road York YO10 4AS United Kingdom

23 Crown copyright 2015 You may re-use this information (excluding logos) free of charge in any format or medium, under the terms of the Open Government Licence. To view this licence, visit or Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned. Any enquiries regarding this publication should be sent to us at You can download this publication from 23