Choose a section
Section 03 / Supplier completes
Issued form · page 3Security contact and clearances
Nominate the person responsible for security. Clearance details are requested separately only when the work needs them.
When this applies
Every supplier identifies a security contact, which may be the registration contact. The general form deliberately does not ask you to disclose FSC status or personnel clearance inventories.
Help with this section
Open a question for help. The numbers match the printed questions and agreement clauses.
3.1Security contact
What to enter
Select Same as 2.6, or provide the different contact’s name, role, business email and telephone. Use the person who actually owns the responsibility; a dedicated security controller title is not required for every supplier.
Where to find it / what to do next
- If the contact in 2.6 handles security matters, select Same as 2.6. Otherwise give the appropriate business contact.
- You do not need to create a specialist job title to answer this question. Use someone who can coordinate access, information handling and incident queries.
Useful external help
Opens in a new tab so you can keep this question open.
- Practical cyber security for small organisations (opens in a new tab)NCSC
Plain-English steps for email, accounts, devices, backups and spotting attacks. Useful even if you have not started certification.
If more detail is needed
For the relevant work only. These are not extra questions in the initial registration.
If security assurance is needed later
RCDEN will identify the actual access and premises requirements in the addendum or supplied security schedule. Facility Security Clearance (FSC) is the successor name for List X and is specific to the facility.
FSC is normally relevant to premises holding UK SECRET or partner CONFIDENTIAL material or above; OFFICIAL-SENSITIVE work does not ordinarily require it. Holding FSC is itself OFFICIAL-SENSITIVE and disclosure is restricted. Record only an authorised verification reference in the ordinary file.
Where required, personnel assurance is verified through authorised processes. BPSS is baseline employment screening, not national security vetting. A clearance does not itself give someone project access.
This is addendum guidance, not an additional initial-registration question. Resolve required assurance before access or disclosure, including during a tender. Never send named vetting records through ordinary registration channels.
How to use the addendum →This guide explains form v2.0. It does not amend the issued requirements or approve work, exceptions or information release. Use the external help to find records and understand the rules. For questions about RCDEN's requirements or the proposed work, use the contact in Section 1.2 and quote the question number.