Report a Security Incident

Destruction company should immediately contact the government agency when a security incident has occurred or is occurring. A government agency should determine the next best course of action to secure their classified material. Such a decision must be put in writing with the destruction company as this may be used as evidence in an investigation.

The government agency must report any security incidents to SCEC within five days of the incident. Government agencies are responsible for conducting their own security investigation into the security incident—SCEC will assess a destruction company’s non-compliance with the PSPF endorsement criteria.

Examples of a security incident include:

• transportation vehicle left unattended for more than 15 minutes;
• classified material stored overnight at the facility;
• inappropriate destruction equipment used (ie wrong screen size) for level of classification;
• theft, loss or compromise of classified material;
• the handling of information by personnel who have not met the security checking requirements; and
• any other issue relating to a breach of security

Please submit any security incidents using the SCEC Destruction Security Incident Report form or email us at scec@scec.gov.au