When this applies

Controlled Goods Program (CGP) applies to any Canadian facility handling controlled goods or technology under the Defence Production Act. If a customer ships you drawings marked controlled, if you handle ITAR-adjacent parts, if you're on Canadian defence supply chains — you're in CGP.

Menu: Plating → CGP.

Employee registration

Every employee with access to controlled goods must be individually registered.

Plating → CGP → Registration:

For each employee:

Full legal name
Date of birth
Citizenship
Security assessment expiry (typically 5 years)
Background check reference
Assigned facilities/areas
Role (Authorized Individual / Designated Official / Visitor Escort)

Expiry-date tracking — 90 / 60 / 30 days before expiry triggers renewal email. Past expiry → access revoked automatically.

Authorized Individuals + Designated Officials

Authorized Individual (AI): any registered employee with access
Designated Official (DO): specifically named to PSPC as the CGP program lead — responsible for registration, visitor control, audit prep

Only DOs can register new AIs. System enforces: only a user in the CGP Designated Official group can create a Registration record.

Visitor log

Every non-AI who enters a controlled area must be logged.

Plating → CGP → Visitor Log:

On arrival:

Visitor name + company
Purpose of visit
Escort (must be a registered AI)
Areas visited (ticked from a facility diagram)
Arrival + departure timestamps

On departure: close the visitor record. System flags long-duration visits (> 4 hrs) for review.

Goods + shipments

Plating → CGP → Controlled Goods — inventory of controlled items on site. Every one:

Identifier (customer PO, drawing number)
Classification (per the Controlled Goods Regulation schedule)
Storage location
Access list (which AIs can access)

Plating → CGP → Shipments — every controlled goods movement:

Origin / destination
Carrier
Chain of custody (AIs who touched it)
Customer acknowledgement of receipt

Security & access log

Plating → CGP → Access Log — auto-populated by badge-reader integration (where available). Every door swipe on a controlled-goods area door is logged with employee + timestamp.

Unusual access patterns flag for DO review:

After-hours entry by non-approved AIs
Multiple door failures
Tailgating flags from camera AI (if integrated)

Audit prep

PSPC audits every 3 years. They review:

Current AI list vs. payroll (for consistency)
Visitor logs (for any unescorted non-AIs)
Shipment chain-of-custody
Training records (CGP awareness)
Incident reports

Click Generate CGP Audit Package to assemble the evidence bundle.

What can go wrong

Employee leaves, still registered

DO must immediately deregister. Automate by linking to HR offboarding — termination event fires a deregistration.

Visitor arrived without escort

Flag immediately, escort to check-in, do not let them into controlled areas. Document as a security incident. Retrain reception.

Controlled goods found in uncontrolled area

Incident. Document, remediate (move to controlled storage), CAPA root-cause, report to PSPC if the exposure risk is material.