https://www.shafiq.in/tags/vetting/ Recent content in Vetting on Shafiq Alibhai Hugo en-GB 2009-2026 All rights reserved. Tue, 11 Jul 2023 01:50:03 +0000 https://www.shafiq.in/blog/security-clearance-vetting-for-access-to-cloud-production-environments/ Tue, 11 Jul 2023 01:50:03 +0000 https://www.shafiq.in/blog/security-clearance-vetting-for-access-to-cloud-production-environments/ <p>Access to cloud production environments should require security clearance vetting. Production systems hold live data and applications, and the consequences of compromise are direct.</p> <h2 id="uk-clearance-levels">UK clearance levels</h2> <table> <thead> <tr> <th>Level</th> <th>What it covers</th> <th>Checks included</th> </tr> </thead> <tbody> <tr> <td>BPSS</td> <td>Pre-employment screening for government asset access</td> <td>Identity, employment history, immigration status, unspent criminal record</td> </tr> <tr> <td>AC</td> <td>Unescorted access to UK airport security areas</td> <td>Identity, employment history, criminal record, government agency records</td> </tr> <tr> <td>CTC / Level 1B</td> <td>UK OFFICIAL assets, occasional SECRET access</td> <td>Identity, employment, criminal record, financial situation, personal circumstances</td> </tr> <tr> <td>SC</td> <td>Substantial unsupervised SECRET access</td> <td>Everything in CTC plus credit reference and MI5 record checks</td> </tr> <tr> <td>DV</td> <td>Substantial unsupervised TOP SECRET access</td> <td>Everything in SC plus detailed interview and referee enquiries</td> </tr> </tbody> </table> <h2 id="the-process">The process</h2> <p>You need a sponsor — usually HR or a company security controller. They confirm your role requires vetting and that BPSS checks are complete (unless you&rsquo;re doing AC). You then fill out a security questionnaire online covering personal details, employment history, finances, criminal record, foreign travel, and contacts.</p>