Some people here think that if s.15(1) is mentioned and there is '1' next to security, it means it's done. But I don't agree to this theory. To my understanding, presence of s.15(1) or any other clause simply means some part of the requested information is hidden/prevented from disclosure. 1 and/or any other number next to security means the presence of an entry (like if there are multiple entries, i.e., for a spouse and/or a dependent, it could include numbers 2, 3 and so on...).
Anyways, I know my security part from the CSIS is done because I received a letter directly from the CSIS stating so. Here's what they wrote:
"... The Canadian Security Intelligence Service (CSIS) received a screening request from Immigration, Refugees and Citizenship Canada (IRCC) on (date), concerning Mr. (my name)'s permanent residence application. CSIS completed its review and sent its advice to the appropriate department on (date).
.... As CSIS has now concluded its involvement in this case, IRCC would be in a better position to respond to your queries regarding Mr. (my name)'s application."