CGP Registration + Visitor Log

When this applies

Controlled Goods Program (CGP) applies to any Canadian facility handling controlled goods or technology under the Defence Production Act. If a customer ships you drawings marked controlled, if you handle ITAR-adjacent parts, if you're on Canadian defence supply chains — you're in CGP.

Menu: Plating → CGP.

Employee registration

Every employee with access to controlled goods must be individually registered.

Plating → CGP → Registration:

For each employee:

• Full legal name
• Date of birth
• Citizenship
• Security assessment expiry (typically 5 years)
• Background check reference
• Assigned facilities/areas
• Role (Authorized Individual / Designated Official / Visitor Escort)

Expiry-date tracking — 90 / 60 / 30 days before expiry triggers renewal email. Past expiry → access revoked automatically.

Authorized Individuals + Designated Officials

• Authorized Individual (AI): any registered employee with access
• Designated Official (DO): specifically named to PSPC as the CGP program lead — responsible for registration, visitor control, audit prep

Only DOs can register new AIs. System enforces: only a user in the CGP Designated Official group can create a Registration record.

Visitor log

Every non-AI who enters a controlled area must be logged.

Plating → CGP → Visitor Log:

On arrival:

• Visitor name + company
• Purpose of visit
• Escort (must be a registered AI)
• Areas visited (ticked from a facility diagram)
• Arrival + departure timestamps

On departure: close the visitor record. System flags long-duration visits (> 4 hrs) for review.

Goods + shipments

Plating → CGP → Controlled Goods — inventory of controlled items on site. Every one:

• Identifier (customer PO, drawing number)
• Classification (per the Controlled Goods Regulation schedule)
• Storage location
• Access list (which AIs can access)

Plating → CGP → Shipments — every controlled goods movement:

• Origin / destination
• Carrier
• Chain of custody (AIs who touched it)
• Customer acknowledgement of receipt

Security & access log

Plating → CGP → Access Log — auto-populated by badge-reader integration (where available). Every door swipe on a controlled-goods area door is logged with employee + timestamp.

Unusual access patterns flag for DO review:

• After-hours entry by non-approved AIs
• Multiple door failures
• Tailgating flags from camera AI (if integrated)

Audit prep

PSPC audits every 3 years. They review:

• Current AI list vs. payroll (for consistency)
• Visitor logs (for any unescorted non-AIs)
• Shipment chain-of-custody
• Training records (CGP awareness)
• Incident reports

Click Generate CGP Audit Package to assemble the evidence bundle.

What can go wrong

Employee leaves, still registered

DO must immediately deregister. Automate by linking to HR offboarding — termination event fires a deregistration.

Visitor arrived without escort

Flag immediately, escort to check-in, do not let them into controlled areas. Document as a security incident. Retrain reception.

Controlled goods found in uncontrolled area

Incident. Document, remediate (move to controlled storage), CAPA root-cause, report to PSPC if the exposure risk is material.