UNCLASSIFIED and abide by Security Operating Procedures (SyOps) for specified critical infrastructure or services; (e) inform staff that non-compliance with the signed security documents may lead to disciplinary action; and, (f) enforce sanctions for non-compliance including dismissal and prosecution. To achieve the security outcomes mandated above, organisations must: 6.3  Require all employees, including contractors and subcontractors to accept their security roles and responsibilities formally. The acceptance shall include an undertaking to: (i) protect assets under their control and/or supervision from unauthorised access, disclosure, modification, destruction and interference; (ii) comply with security processes and activities; and, (iii) report security events or potential events or other security risks to the organisation;  Ensure that individuals agree to abide by all GoU and organisational policies, standards, protocols and guidelines for protecting information, personnel and physical assets against security threats regardless of type and origin; and  Confirm that, as part of the HR process, all employees, including contractors and subcontractors, accessing and/or operating critical infrastructure sign declaration forms acknowledging their obligation to abide by the Official Secrets Act, 1964 and related laws during and after their employment. Baseline Security Clearance Baseline Security (BS) clearance provides reasonable assurance that individuals seeking access to critical infrastructure are reliable. Therefore, all candidates seeking employment or contracts in role requiring access to critical infrastructure must undergo and pass BS vetting checks. The level of checks undertaken would depend on business requirements, perceived risks and the value, sensitivity and criticality of the information assets. The bottom line is that BS vetting checks apply to all users of critical infrastructure. 6.3.1 Baseline Security Clearance Defined This clearance is for individuals that would have access to information up to and including RESTRICTED, and/or occasional, controlled and supervised access to information up to and including SECRET. Achieving the mandated minimumsecurity outcomes below boosts confidence in the reliability of people accessing sensitive assets. PS2 – All organisations must perform Baseline Security checks to ensure that the character and personal circumstances of individuals seeking employment are such that they can be trusted with access to critical infrastructure. As a minimum requirement, organisations must: (a) satisfactorily validate the identity of all applicants; (b) confirm academic, employment and financial 39