As per my understanding and recent response from immigration officer on my file, Security is mostly done by CIO and then file is transferred to CPP-Ottawa. In GCMS notes you will see that security is blank. That's because on the top of that page you will see s(21) or s(26) which means they can't disclose information related to international affairs. That's why in GCMS notes security is blank.