Yes, exactly.
In my GCMS notes, security was still marked as Not Started, while criminality and information sharing were in progress at that time.
However, two days after the GCMS snapshot, my IRCC online account changed to “We are processing your background check.”
This suggests that internal background-related activities moved forward after the GCMS notes were generated. Since GCMS notes are only a point-in-time snapshot, they can lag behind real-time updates.
As you know, the IRCC account doesn’t show security separately, it only shows the overall background check, which includes criminality, info sharing, and security.