Industry Insights · Personnel security · 9 min read
Australian Security Clearances: Baseline, NV1, NV2 and PV Explained
Australian security clearances explained: what Baseline, NV1, NV2 and PV allow, who sponsors them, eligibility, background checks and revalidation periods.
People who need ongoing access to classified Australian Government information must hold a security clearance, whether they work for an agency or a supplier. Each level permits access to a different classification and brings its own checks, revalidation cycle and obligations.
This guide follows the Protective Security Policy Framework (PSPF) Release 2026, issued on 1 July 2026, and guidance from the Australian Government Security Vetting Agency (AGSVA).
What are the Australian security clearance levels?
The Australian Government has four security clearance levels: Baseline, Negative Vetting 1 (NV1), Negative Vetting 2 (NV2) and Positive Vetting (PV). Under the Protective Security Policy Framework, Baseline permits ongoing access up to PROTECTED, NV1 up to SECRET, NV2 up to TOP SECRET, and PV up to TOP SECRET including caveated information where authorized.
NV1 and NV2 are also written as Negative Vetting Level 1 and Level 2. A newer clearance, TOP SECRET-Privileged Access (TS-PA), was introduced in November 2021 and is progressively replacing PV. AGSVA says TS-PA will be managed by the Australian Security Intelligence Organisation (ASIO).
No clearance is needed for OFFICIAL or OFFICIAL: Sensitive information. Agency staff need employment screening, plus a need-to-know for OFFICIAL: Sensitive. Temporary access up to SECRET can be given without a clearance after a risk assessment and for a limited time, but temporary access to TOP SECRET requires an existing NV1.
Who sponsors a security clearance?
You can't apply for a clearance yourself. AGSVA states that every clearance must be sponsored by a government or business entity. Contractors to a government agency are sponsored by that agency, and members of the Defence Industry Security Program (DISP) may be able to sponsor clearances up to NV2.
The sponsoring entity identifies the positions that need a clearance and documents the level (PSPF Requirement 0145). The level depends on the access a position needs, not on a person's rank, seniority or status. AGSVA, part of the Department of Defence, conducts the vetting unless an entity is authorized to vet its own personnel.
A clearance depends on sponsorship. When holders change jobs, they must make sure the new employer registers sponsorship, because AGSVA makes clearances without a sponsor inactive and may cancel them.
Eligibility: citizenship and a checkable background
To be eligible, you must be an Australian citizen with a checkable background. The sponsor confirms citizenship and completes pre-employment screening before requesting the clearance. A checkable background means the vetting agency can complete the minimum checks for the required period and validate your history from independent, reliable sources.
How eligibility waivers work
A sponsoring entity can waive the citizenship or checkable background requirement only for an exceptional business need. Under PSPF Release 2026, the entity first conducts a risk assessment under the Australian Government Personnel Security Adjudicative Standard. The Accountable Authority (or Chief Security Officer, if delegated) then approves the waiver after accepting the residual risk. A citizenship waiver applies to a non-citizen with a valid visa and work rights.
Waivers are tied to a specific position and entity, and both requirements can't be waived for the same person except through a limited exemption process. A waiver does not guarantee that a clearance will be granted.
Baseline vs NV1 vs NV2 vs PV
| Baseline | NV1 | NV2 | PV | |
|---|---|---|---|---|
| Highest classification (ongoing access) | PROTECTED | SECRET, with temporary TOP SECRET access in certain circumstances | TOP SECRET | TOP SECRET, including caveated information where authorized |
| Typical roles | Positions with ongoing access to PROTECTED information | Positions with ongoing access to SECRET information; ASD requires IRAP assessors to hold at least NV1 | Positions with ongoing access to TOP SECRET information | Positions that need caveated or codeword information |
| Background period checked | 5 years | 10 years | 10 years | 10 years or since age 16, whichever is greater |
| Revalidation | Every 15 years | Every 10 years | Every 5 to 7 years | Every 5 to 7 years, plus an annual security appraisal |
Under PSPF Release 2026, a clearance that isn't revalidated in time expires: after 15 years for Baseline, 10 years for NV1 and 7 years for NV2 or PV. A new sponsor can't take over an expired clearance, so vetting starts again.
Ongoing obligations for clearance holders
A clearance is a point-in-time assessment, so holders must keep meeting its conditions:
- Report changes in circumstances to AGSVA through myClearance, including changes to name, citizenship, relationships, address, employer, finances, health or criminal history, and overseas travel. See AGSVA's list of reportable changes.
- Complete an annual security check with the sponsoring entity. PV holders also complete an annual security appraisal.
- Complete revalidation when it's due. AGSVA cancels a clearance if the holder doesn't complete it.
- Don't post it online. Under PSPF Release 2026 Requirement 0050, personnel do not publicize their security clearance information on online platforms.
- Report suspicious, unusual or persistent contacts to your entity's security unit.
AGSVA can also start a review for cause at any time if concerns arise.
Do you need a security clearance?
You need one if your position requires ongoing access to PROTECTED, SECRET or TOP SECRET information, resources or activities. An entity may also require one for a position of trust that needs additional assurance. For suppliers to the Department of Defence, its capability managers and contract managers set the level based on the need to access Australian Government resources.
What a clearance does not give you
A clearance makes you eligible for access; it doesn't grant it. Under the PSPF need-to-know principle, personnel are not entitled to information because of their status, position, rank or level of authorized access, and entities give access to security classified information only to people who need it for their duties. Caveated information needs separate authorization, and temporary access is not granted to systems holding caveated information.
Where DekkoCORE fits
A clearance decides who may see classified information, and access controls enforce that decision. In DekkoCORE, files can be marked OFFICIAL, OFFICIAL: Sensitive or PROTECTED, and each person you share with gets the permission level you choose, such as View only or Download. Every view and download is recorded in the audit log, and DekkoCORE is IRAP assessed for Australian government information up to PROTECTED. See how this works for security clearance vetting documents.
Common questions
Frequently Asked Questions
What can you access with an NV1 clearance?
An NV1 clearance permits ongoing access to security classified information up to and including SECRET. Under PSPF Release 2026, NV1 also allows temporary access to TOP SECRET in certain circumstances. An NV1 holder still needs a need-to-know for each piece of information.
How long does an NV1 clearance last?
An NV1 clearance is revalidated every 10 years, and an NV1 clearance that goes more than 10 years without revalidation expires. NV1 holders also complete an annual security check with their sponsoring entity.
What is a Baseline clearance?
A Baseline clearance is the lowest of the four Australian Government security clearance levels and permits ongoing access up to and including PROTECTED. Baseline vetting checks a 5-year background period, and Baseline clearances are revalidated every 15 years.
Can a non-citizen get an Australian security clearance?
A non-citizen can only get an Australian Government security clearance through a citizenship eligibility waiver. The sponsoring entity must show an exceptional business need, assess the risk and have the waiver approved by its Accountable Authority (or delegated Chief Security Officer), and the person must hold a valid visa with work rights. A waiver does not guarantee a clearance.
How long does it take to get a security clearance in Australia?
AGSVA's applicant guide sets timeframes for completing the vetting assessment after it receives a completed application: 20 business days for Baseline, 70 for NV1, 100 for NV2 and 180 for PV. Applicants first have up to 20 business days to complete their application.
Can I put my security clearance on LinkedIn?
PSPF Release 2026 says personnel do not publicize their security clearance information on online platforms, and the Release 2026 summary of changes names employment-focused platforms such as LinkedIn. Personnel can generally still publicize their employer, their state and city, and publicly available information about their area of work.