Question Period Note: National Microbiology Laboratory

• Concerns have been raised regarding security at the National Microbiology Lab (NML) in Winnipeg following the tabling of documents related to the investigation of activities on February 28, 2024 and employment termination of two NML scientists.

• The Public Health Agency of Canada (PHAC) continues to invest significant time and attention to ensure research and science are conducted across the organization with a firm security mindset.
• PHAC continues to place a strong emphasis on respecting and enforcing all policies and procedures, both new and existing, that secure the National Microbiology Laboratory’s (NML) work and safeguard against a continually evolving threat environment, including threats to IT security. This is consistent with efforts across the Government of Canada to support innovation and research while also protecting national security.
• As a federally regulated institution, PHAC’s NML complies with biosecurity regulations, the Human Pathogens and Toxins Act, and the Transportation of Dangerous Goods Program, and works closely with regulatory bodies to ensure ongoing compliance.
• The processes and procedures that are in place will continue to be evaluated and enhanced with a view to continuously protect the confidence and trust of Canadians.
IF PRESSED ON RESEARCH SECURITY
• PHAC has established clear governance in regard to collaborations and regular training and communication on employee accountabilities. This includes putting in place the mandatory use of Materials Transfer Agreements and appropriate agreements to structure collaborations, such as Collaborative Research Agreements.
• Existing international collaborations were reviewed from a security perspective and new collaborations are reviewed by a Science Security Committee.
• The Government has also recently introduced a series of measures to safeguard Canadian Research, including implementing the new Policy on Sensitive Technology Research and Affiliations of Concern, launching Canada’s new Research Security Centre, as announced in Budget 2022, and supporting post-secondary institutions with a total investment of close to $50 million through the Research Support Fund.
This means any new collaborations with any country or organization would be assessed on a case-by-case basis, and vetted for scientific value and security considerations prior to approval.
• The NML is not currently engaged in any bilateral research collaboration with the People’s Republic of China (PRC). Any new research collaborations would be assessed on a case-by-case basis and vetted for both scientific value and security considerations prior to approval.
IF PRESSED ON SECURITY CHANGES

• PHAC has invested significant time and attention to ensure research and science are conducted with strict security compliance. Specific physical, personnel, and operational security measures have been employed and a strong emphasis has been placed on respecting and enforcing policies and procedures that secure the current work and safeguard against a continually evolving threat environment.
• These processes and procedures are regularly re-evaluated to ensure the security of the NML.
• Examples of some the security changes include, but are not limited to:
o Implementing new X-ray protocols at the entry to the facility;
o Enhancing vetting of visitors to the lab by PHAC Security;
o Strengthening protocols for deliveries/shipping and receiving biological materials, including controls to ensure all documentation is in place and verified;
o Instituting additional controls around IT access; and,
o Modernizing IT security infrastructure in collaboration with the Communications Security Establishment.

Ad Hoc Committee process
In May 2023, the Government announced the membership of an Ad hoc Committee of Parliamentarians and a Panel of Arbiters to set out a process for the review and tabling in Parliament of classified documents related to the investigation into activities and ultimate termination of employment of two National Microbiology Laboratory (NML) scientists.
The Public Health Agency of Canada (PHAC) worked closely with the independent Panel of Arbiters, through the Ad-Hoc Committee process, to support the Panel in its recommendations to the Committee on what information should be released in the public interest. The information was vetted for release by the independent Panel of Arbiters, which was entrusted to determine which information could be released in the public interest and which information had to remain protected. The Panel determined that the documents could be disclosed with fewer redactions, in favour of more transparency.
PHAC has consistently sought to protect information disclosure of which it considered would be injurious to national security and has consistently applied the requirements of the Privacy Act to protect private employee information and to respect ongoing labour relations proceedings.
PHAC disclosed personal information to the Ad Hoc Committee of Parliamentarians and the Panel of Arbiters on public interest grounds as described in the Privacy Act.

Improvements to lab security
The National Microbiology Laboratory (NML) has always operated as a secured facility, though the administrative investigation initiated in 2019 highlighted that policies and procedures in place at the time needed to be updated to mitigate the risks posed by the current threat environment. In response, the Agency has invested significant time and attention to ensure research and science policies have a renewed focus on security. Specific physical, personnel, and operational security measures have been updated, while also galvanizing an institutional culture that recognizes the ever shifting threat landscape and the need of public servants to stay abreast of the policies and procedures that secure the important work and assets at the NML.

These improvements include:
• Enhanced overall physical and security screening measures for all staff and external visitors. The requirement to escort visitors at all times is mandatory and additional monitoring has been put in place to ensure compliance;
• Strengthened access management and monitoring with a new access control system.
• Enhanced physical security including additional, and continual training and review of guard services;
• Strengthened protocols for deliveries/shipping and receiving, including controls to ensure all documentation is in place and verified for infectious materials;
• Improved management of intellectual property (IP) and materials through specific requirements for Materials Transfer Agreements and Collaborative Research Agreements and enforcement of their use;
• Implemented mandatory training to raise awareness and provide guidance on security responsibilities and accountabilities for all staff and security guards;
• Updated training for new staff so they have a full understanding of their accountabilities and management expectations with respect to security are clear;
• Established clear and consistent communication to emphasize employee responsibilities in regards to security and conflict of interest;
• Comprehensive threat-risk assessments for physical and IT environments to ensure security measures are complete and up to date;
• Reinforced information management and document classification requirements, including the use of corporate document repositories, messaging and training on acceptable use of devices, and compliance with Treasury Board Secretariat requirements related to information categorization, transmittal and destruction;
• Updated policy on affiliations and collaboration with academic, research and health care organizations. All collaborations both in Canada or abroad must be documented and reviewed by a Science Security Committee; and
• Implementation of additional controls on student hiring.

In recognition of the ever evolving threat environment, processes and procedures will be regularly re-evaluated to ensure the security of the NML as threats are identified or anticipated.

• The Canadian Science Centre for Human and Animal Health, the only facility in Canada operating Containment Level 4 laboratories, is home to both the Public Health Agency of Canada’s (PHAC) National Microbiology Laboratory (NML) as well as the Canadian Food Inspection Agency’s National Centre for Foreign Animal Disease. The facility incorporates stringent security protocols and procedures for its operations.
• Due to the nature of the facility, we have implemented – and continue to review and modify as required – rigorous security protocols to ensure the protection of employees and assets.
• Corporate policies and procedures to vet access to the facility have been reviewed to strengthen the security posture. Furthermore, the facility physical security assessment has been renewed, and proposed changes will further enhance various aspects of the facility’s security.