Good Day Kako,
I got your personal message you sent to me today, however I usually don't respond to private messages unless I instruct someone to do so. When I instruct you to sent me your personal message I will make sure I got to search for your message in my inbox because there are over hundred messages which I could not respond to.
Here is what I see, your file is almost completed. These are some of the reasons your security results are not sent yet to the Embassy:
1. Could have been your security clearance is still pending due to a lot of files CSIS is handling for the past months
2. Could have been your security clearance is completed by CSIS but they have not sent it yet to the Embassy
3. Your full name could have matched a most wanted person by the WEST and CSIS wants to check all the leads
4. CSIS might have been waiting for feedback from some of the agencies around the world
5. You might a long wrap sheet of travel history which will extend your Security ASSESSMENT
To answer your private message I would say yes, SECURITY ASSESSMENT is not done by CIC rather by CSIS. The same way Medical Assessment is not done by CIC but RMO. CIC is only responsible to check your ELIGIBILITY based on the program you apply under then other 3 assessments are being done by other government bodies. Once Security is completed by CSIS they will grade your results then send those grading to CIC in order to finalised your file.