UNCLASSIFIED 6.4 National Security Vetting A security clearance is a status granted to individuals that allows them to access certain information. Security clearance is important for critical positions because occupants of such positions who successfully commit acts such as illegal site access, data espionage, illegal interception, data and system interference cause more significant damage to national security and interests that those in less sensitive positions. Therefore, national security vetting seeks to stop individuals wishing to subvert or damage the stability of Uganda from occupying sensitive positions dealing with critical infrastructure. The national security vetting process involves tougher checks than BS vetting using two clearance levels as follows: 6.4.1 SECRET Clearance This security clearance level is for individuals who require frequent and uncontrolled access to information up to and including SECRET. 6.4.2 TOP SECRET Clearance This clearance level is for individuals in privileged and sensitive managerial, technical and information security roles who require frequent and uncontrolled access to information marked or labelled up to and including TOP SECRET. Organisations must keep such roles to a minimum number of staff. It is important to emphasise that, in common with all forms of security, national security vetting provides no guarantees about the future reliability of vetting subjects. However, effective national security vetting can help achieve the outcomes below. PS3 – Individuals requiring access to computers necessary for Uganda’s security, defence, diplomacy, public safety, public utilities and economic stability must undergo national security vetting. As a minimum requirement, organisations must: (a) submit for security vetting all applicants for roles on the list of GoU security vetted positions; (b) not initiate the national security vetting process before completing recruitment checks; and, (c) seek Security Controller advice on the required clearance levels before making job offers. To achieve the security outcomes mandated above, organisations must:  Create a process to comply with the national security vetting requirements of appropriate vetting organisations;  Ensure that the Security Controller has the current list of GoU security vetted positions and that all candidates for positions on the list undergo national security vetting before starting work;  Ensure that the holding of a valid security clearance is not a routine condition for applying for posts or contracts on the list GoU security vetted positions. 41