Actually, the criminality assessment is already passed.
It is the security that is being stalled and processed by the CSIS.
I heard in PR applications people may get comprehensive security screening which is quite lengthy in time. I am afraid it is my case as well although I have not heard a case of citizenship application gets CSS...
I did an ATIP to the CSIS and was told by them that they do not hold any information about me.
I have changed my name once while being a PR so I was a bit worried that they might have only searched using my new name but not my old name. But more likely it's just being held in the queue.