Guidance

Personnel Security Policy

Published 27 October 2026

Policy Statement

Personnel security is focused on supporting our most valuable resource - our staff – in conducting their jobs effectively while ensuring that they do so securely. It consists of a system of policies and procedures and is underpinned by security culture; the combination of which seeks to mitigate the risk of any exploitation of legitimate access (insider threat), to Nuclear Waste Services digital and physical environment for unauthorised purposes.  

The purpose of this policy is to describe the Nuclear Waste Services (NWS) commitments to the delivery and maintenance of personnel security controls, how and where they should be applied, to mitigate the risk of insider threats to our staff, data, electronic systems, information, nuclear material, other radiological material, physical assets, premises and reputation (NWS assets). 

This policy applies to all NWS employees, contractors, and other stakeholders (referred to in this document as ‘individuals’) with access to NWS assets.

NWS commits to	We achieve this by
Ensuring we have effective governance and leadership for personnel security.	Having an Executive Committee Member that holds lead responsibility for personnel security. Clear lines of responsibility setting out the roles and responsibilities of all individuals for managing personnel security. Leaders within NWS modelling expected security behaviours
Delivering a proportionate and risk-based approach to personnel security, minimising the potential for harm, loss, or compromise of NWS physical or digital assets by the application of personnel security risk assessment before and during employment.	Developing, implementing, and maintaining a consistent and transparent approach to personnel security risk assessment. Developing, implementing, and maintaining an approach to the consideration of un-spent convictions at the pre-employment stage and their security or business implications and related actions. Fostering an environment where potential or actual insider activity is identified quickly and acted upon.
Ensuring that there is a comprehensive suite of controls that cover pre-employment screening, national security vetting, ongoing personnel security (aftercare), career movement within the organisation and eventual offboarding.	Implementing and maintaining integrated arrangements covering the entire employment lifecycle that are aligned to overarching His Majesty’s Government (HMG) and Office for Nuclear Regulation (ONR) personnel security requirements and principles, whilst also addressing additional business specific risks. Completing Baseline Personnel Security Standard (BPSS) checks for all individuals recruited to NWS. Delivering pre-employment and National Security Vetting (NSV) checks such as Developed Vetting (DV), Security Check (SC) and Counter Terrorist Check (CTC) that comply with HMG and ONR requirements that are appropriate to the level of risk posed by an individual role. Delivering effective ongoing personnel security risk management, through the secure sharing of information that may be of a security concern across functions and stakeholders. Providing the personnel security team with updated information when there are any changes to job role, line management, access, or clearance requirements; for any individuals working for or on behalf of NWS.
Ensuring that NWS has the capability in terms of resources, processes, and systems to deliver the requirements of this policy, in an integrated fashion where necessary, ensuring that dependencies are mapped and understood.	Maintaining Suitably Qualified and Experienced Personnel (SQEP) to deliver personnel security outcomes. Maintaining effective and up to date management system arrangements that support the delivery of business enabling and regulatory compliant personnel security activities covering the following topics as a minimum: pre-employment screening,  national security vetting,  aftercare,  caveat management, pass management, leavers. Using secure systems for the processing of personal information and ensuring duplication of data is minimised.
Developing and maintaining a security culture in that effectively reduces organisational security risks.	Delivering a security awareness programme that seeks to build culture and maintain understanding of personnel and wider security risks, issues, and responsibilities of individuals, including where poor behaviours could result in disciplinary action, potentially including suspension.  Provision of clear guidance on the personnel security management of all individuals working for, or on behalf of NWS throughout the entire employee lifecycle. Ensuring that all individuals are aware of personnel and other security risks and their individual responsibilities.

Roles and Reponsibilities

The NWS Board and Executive, Line Managers and individuals have a specific role in the application of the Personnel Security Policy, supported by Human Resources and the Security Team. It is important that everyone fully understands their role and responsibilities to aid transparency, consistency, and reduce insider risks.

Board and Executive Responsibilities

Provision of positive and visible support for, and engagement with, personnel security to demonstrate to individuals the value placed on security and the risks posed by insider threat.

Line Manager Responsibilities

Ensuring you are familiar with the security threats to NWS and know these well enough to explain them clearly to your staff. You also should be absolutely clear on what security conscious behaviour means and what you expect.  

Attend security briefings and complete mandatory learning to make sure you are clear on the latest policy and procedures and why these matter. 

Getting to know all your direct reports and recognise changes in behaviour which could potentially impact on the security of NWS. 

Where appropriate, dealing with any security concerns by talking with the individual concerned, your Line Manager, the Personnel Security Team, or HR as appropriate. 

Ensuring you and your direct reports complete routine security appraisal or assessment processes as required within NWS security arrangements. 

Demonstrating appropriate behaviour with regards to personnel security, creating and contributing to a positive environment, in which security is given an appropriate priority and individuals are encouraged to discuss issues before they become security concerns. 

Ensuring security is a regular part of performance appraisal and team discussions. 

Ensuring an appropriate debrief of security considerations when any staff leave your team through an internal transfer or leave the organisation. 

Ensuring that you are aware of relevant caveats, after care measures or other security guidance relating to your staff.

Individual Responsibilities

Ensuring you are aware of, understand and comply with security requirements when working at home, at site, in the office or remotely.  

Complying with requests to review your clearance, completing required documentation in a timely manner and fully co-operating with the review process. If you hold an NSV at the level of DV you must complete an Annual Security Appraisal Form. 

Reporting any changes in circumstances through the appropriate route, such as to HR or Personnel Security and the completion of a Change of Personal Circumstances (CoPC) form to notify UKSV as required. A change in circumstance may include living with someone new, a divorce, your financial situation, or conflict of interests (e.g. loyalties or personal relationships potentially at odds with your project/work). Any information you believe could potentially affect your security clearance should be reported, and you must ensure you take any required action to ensure your clearance remains valid. 

Creating and contributing to a positive environment in which security is given appropriate priority. 

Raising any concerns about individual or organisational practices that are in breach of security procedures in the most appropriate way, such as via your line manager, directly to the personnel security team or by using Safecall, for reporting concerns confidentially. 

Ensuring that you report any security incidents or breaches to your line manager and also through the normal NWS reporting processes of OSHENS or the information security reporting process using the service now platform.

HR Responsibilities

Maintaining regular positive engagement the NWS Personnel Security Team to ensure effective management of insider risks through the appropriate sharing of information related to concerns about those persons who hold NSV clearance. 

Ensuring that recruitment processes include the level of clearance required for all roles being recruited to and to ensure that any residency requirements for a particular role are also included within the recruitment process. 

Maintain effective disciplinary policy and procedure to address issues that may result from failure to comply with security policies. 

Ensuring that Line managers are provided with the necessary tools and support to identify individuals who may require additional attention, support, and assistance to prevent their behaviour becoming a more serious concern.

Personnel Security Team Responsibilities

Maintaining close and productive working relationships with HR and other relevant functions to ensure effective management of insider risks. 

Providing expertise, advice and guidance on personnel security control and insider threat mitigation. 

Ensuring that all information is processed in accordance with NWS Data Protection Policy and related “Need to Know” requirements. 

Reporting any potential areas of concern and or potential risks to the ONR/UKSV. 

Ensuring that employment screening controls and NSV requirements are applied consistently to third party suppliers as required. 

Ensuring the appropriate management of aftercare and caveats. 

Managing the appeals process for any BPSS applications that have been denied. 

Ensuring that employment screening controls and NSV requirements in accordance with HMG and ONR expectations are applied across the entirety of NWS. 

Ensuring that all personnel security team members are trained and competent to deliver their role.