Why BS7858 screening is essential

Why BS7858 Screening Is Essential to Workforce Assurance

Holding an SIA licence and completing employment screening are not the same thing.

An SIA licence confirms that an individual has met the Security Industry Authority’s licensing criteria for the relevant licensable activity. BS7858 screening serves a different purpose: it gives an organisation a structured process for examining an individual’s background before placing them in a secure environment or position of trust.

That distinction matters.

Security companies routinely deploy people into environments where they may have access to buildings, systems, information, assets or vulnerable locations. The quality of the screening process therefore affects much more than recruitment administration.

It can influence whether a worker is ready to deploy, whether a customer’s contractual requirements have been met and whether the organisation can explain how its decision was reached.

BS7858 screening cannot prove that a person is trustworthy. No pre-employment process can predict somebody’s future conduct with certainty.

What it can do is replace assumption with a structured, consistent and documented assessment of the information available.

Security systems still depend on people

Security is often discussed in terms of physical controls, surveillance systems, access technology, policies and procedures.

All of these are important. But each ultimately depends on the people operating within them.

A sophisticated access-control system still relies on people following the correct procedures. A secure site still relies on those given access using it appropriately. A detailed security policy still relies on individuals exercising sound judgement.

This is why personnel assurance is an important part of organisational security.

Screening does not remove human risk. Nor should it be treated as a guarantee of an individual’s honesty, reliability or future behaviour.

Its role is more measured: to help organisations examine relevant information, identify gaps or discrepancies and make more informed decisions about who they recruit and deploy.

For organisations operating in secure or sensitive environments, that process needs to be consistent enough to withstand operational, customer and audit scrutiny.

What is BS7858 screening?

BS7858 is the British Standard for screening individuals working in a secure environment.

Its official title is BS7858:2019, Screening of individuals working in a secure environment – Code of practice. BSI describes secure environments broadly as environments in which an insider could threaten people’s safety or the integrity of physical, intellectual, data or information assets.

The standard provides a structured framework for carrying out pre-employment screening.

In practical terms, BS7858 screening helps an organisation:

• establish and verify an individual’s identity;
• examine their employment and activity history;
• investigate relevant gaps and discrepancies;
• collect appropriate supporting evidence;
• document how the screening process was completed;
• provide a documented basis for an informed employment or deployment decision.

It is a code of practice, not a security clearance and not a universal legal requirement for every employee or every security role.

Its application will depend on factors including the role, operating environment, customer contract, organisational policy and relevant industry requirements.

Who is BS7858 intended for?

BS7858 is strongly associated with the private security sector, but its application is not necessarily limited to traditional security guarding.

It may be relevant where people are deployed into environments involving:

• access to secure premises
• sensitive customer or commercial information
• critical infrastructure
• valuable physical or intellectual assets
• surveillance or security systems
• positions carrying a high degree of responsibility or trust.

BSI also identifies organisations outside the security sector that employ people in sensitive environments as potential users of the standard.

Whether an individual should be screened to BS7858 should therefore be determined by the role, the environment and any applicable customer or contractual requirements, rather than job title alone.

BS7858 screening and SIA licensing are not the same

This is one of the most important distinctions for security employers to understand.

An SIA licence relates to whether a person meets the licensing criteria for specified private-security activities.

Depending on the licence and the applicant’s circumstances, the SIA carries out checks relating to matters such as:

• identity
• age
• relevant qualifications
• criminal history
• right to work in the UK
• overseas criminality where applicable
• other information relevant to whether the individual is suitable to hold a licence.

The precise requirements depend on the licence type and the individual’s circumstances.

BS7858 employment screening is conducted for a different purpose.

It examines an individual’s wider background and employment or activity history on behalf of the employer or deploying organisation. Relevant gaps and discrepancies should be investigated, assessed and documented in accordance with the applicable screening process.

The two processes may overlap in some of the information considered, but one does not replace the other.

An individual may hold the appropriate SIA licence and still require BS7858 screening before deployment under an employer’s policy, customer contract or operational requirements.

Equally, completing BS7858 screening does not remove any requirement for an SIA licence where the activity is licensable.

What does the BS7858 screening process examine?

The precise checks and evidence required should always be confirmed against the current standard, the individual’s circumstances and any applicable contractual requirements.

A BS7858 screening process will commonly involve the following areas.

Identity and address history

An organisation must first establish that it is screening the correct person.

That means collecting and verifying appropriate identity information and examining the individual’s address history. Identity verification is not simply a document-collection exercise. Documents must be assessed through the correct process; inconsistencies must be addressed and the records retained must demonstrate how the identity was established.

Address information may also support other checks and help explain an individual’s history, particularly where they have moved frequently or spent time overseas.

Employment and activity history

A central element of BS7858 screening is examining an individual’s employment and other relevant activity across the period required by the standard.

That history may include:

• employment
• self-employment
• education
• unemployment
• career breaks
• periods spent overseas
• other explainable activity.

The objective is not simply to collect a list of dates.

The organisation needs to establish a coherent history supported by evidence that is appropriate and sufficiently reliable.

Gaps, discrepancies and supporting evidence

A gap does not automatically mean that a candidate is unsuitable.

People may have legitimate periods outside formal employment for many reasons, including caring responsibilities, travel, illness, education, unemployment or personal circumstances.

The issue is whether the period has been identified, explained and supported appropriately.

For example, a candidate may state that they were travelling for several months. The screening process should determine what evidence is reasonably available and whether it supports the explanation.

Similarly, a discrepancy between a candidate’s declared dates and an employer’s reference should not automatically lead to rejection. It should be investigated, assessed and documented.

The value of the screening process lies partly in how these exceptions are handled.

Criminal-record and other proportionate checks

A criminal-record check may form part of the wider screening process where it is lawful, appropriate and relevant to the role.

Employers must request the correct level of DBS check.

A Basic DBS check may be requested for any position or purpose and shows relevant unspent convictions and conditional cautions. Where an employer applies on an individual’s behalf, the individual’s consent is required. Standard and Enhanced checks are only available for roles or activities that are legally eligible for those levels of check.

A DBS certificate should not be treated as a complete employment-screening process.

DBS guidance itself states that a criminal-record check is only one part of safer recruitment practice. It also notes that DBS cannot access overseas criminal records, meaning additional evidence may be needed where a person has lived outside the UK.

Other checks may be relevant depending on the role, the standard and the customer’s requirements. These should always be lawful, proportionate and clearly connected to the position.

Overseas history

International histories can make screening more complex.

Different countries have different record systems, employment practices and evidence routes. Some employers may no longer exist, and official information may not be available in English.

This does not mean that the process should be abandoned or that unsupported assumptions should be made.

It means the organisation needs a defined approach for:

• identifying overseas periods
• obtaining suitable evidence
• translating or validating documents where necessary
• recording unavailable evidence
• escalating exceptions
• deciding whether the information obtained is sufficient.

Overseas criminal-record evidence may also be required under separate SIA licensing criteria. Current SIA guidance requires this evidence where an applicant lives outside the UK or has spent a continuous period of six months or more outside the UK during the previous ten years.

This licensing requirement should not be confused with the employer’s own BS7858 screening responsibilities.

Why consistency matters in security personnel screening

A screening policy may look comprehensive on paper and still produce inconsistent outcomes.

This happens when:

• different teams accept different forms of evidence
• unexplained gaps are handled informally
• exceptions are approved without a recorded rationale
• references are accepted without adequate review
• customer-specific requirements are not built into the process
• responsibility for the final decision is unclear.

Inconsistency weakens the value of screening.

Two candidates with similar histories should not receive materially different treatment simply because their files were reviewed by different people.

A consistent process supports three important outcomes.

Evidence quality

A screening file should demonstrate more than the fact that documents were uploaded or a reference was received.

It should show that the information was reviewed, relevant inconsistencies were considered and the evidence met the organisation’s requirements.

Where standard evidence is unavailable, the alternative evidence accepted and the reason for accepting it should be clear.

Escalation and decision ownership

Not every screening case will be straightforward.

The process should define:

• what constitutes an exception
• when further evidence is required
• who may approve an alternative
• when a case must be escalated
• who owns the final employment or deployment decision.

A screening provider can collect evidence, investigate discrepancies and present findings. The employer should retain clear ownership of its risk, suitability and deployment decisions unless a different lawful arrangement has been expressly agreed.

Auditability and record keeping

A screening file may later be reviewed by

• a customer
• an auditor
• an accreditation body
• a compliance team
• a procurement function
• an internal investigator

The organisation should be able to explain what was checked, what evidence was obtained, what issues arose and why the final decision was made.

An audit trail is therefore not an administrative by-product. It is part of the value of the process.

Why a “completed” screening file may still be weak

A case can be marked as complete while still leaving important questions unanswered.

Examples include:

• an unexplained break in the employment history
• a reference that confirms only a job title but not the relevant dates
• conflicting dates that have not been reconciled
• evidence accepted through an undocumented exception
• a decision recorded without the supporting rationale
• an overseas period supported only by the candidate’s own declaration
• no clear record of who approved the case.

None of these automatically means that the individual is unsuitable.

They do, however, raise questions about the quality and defensibility of the screening process.

A stronger test is not simply:

Has every field been completed?

It is:

Does the available evidence support a coherent history, and can we explain how the decision was reached?

The operational consequences of poor screening

Screening is often managed by HR or compliance, but the impact of a weak process rarely stays within those functions.

Delayed mobilisation

A worker may be recruited and scheduled for deployment before all necessary evidence has been obtained.

As the mobilisation date approaches, operations teams may then face a difficult choice: find alternative cover, delay deployment or consider an exception under pressure.

A visible and well-managed process allows delays to be identified earlier.

Contractual exposure

Customers may specify particular screening requirements within a contract or procurement framework.

Where those requirements have not been translated into the operational screening process, an organisation may struggle to demonstrate that the workforce meets the agreed standard.

Increased administration

Fragmented screening frequently creates repeated work.

Candidates are asked for the same evidence more than once. Managers chase different teams for updates. Compliance staff manually reconcile spreadsheets, inboxes and document folders.

The cost is not limited to the screening team. It affects recruitment, operations, customer service and management time.

Poor candidate experience

Unclear or contradictory evidence requests can create unnecessary frustration.

Strong candidates may disengage if they do not understand what is required, receive repeated requests or cannot obtain support when evidence is difficult to source.

Weaker customer confidence

Customers deploying security personnel need confidence that the agreed process has been followed consistently.

When records are incomplete or decisions are poorly documented, the organisation may be unable to provide that assurance quickly.

Can your teams see why screening cases are delayed?

Limited visibility, inconsistent evidence requirements and unclear ownership can all affect mobilisation. Review how your current BS7858 process handles evidence, exceptions, escalation and case progress.

Rigorous screening should not create a poor candidate experience

Rigour and candidate experience are not opposing objectives.

A poorly designed process can be both burdensome and weak. A well-designed process can be thorough while remaining clear and proportionate.

Candidates should understand

• why the screening is taking place
• what history they need to provide
• which documents are acceptable
• how their information will be used
• what happens if evidence is unavailable
• where they can get help
• whether anything is currently delaying their case.

Communication is particularly important when a candidate has a complicated employment history or has lived overseas.

A candidate should not have to guess whether a document has been received or why another piece of evidence is required.

Good screening technology can improve visibility, but technology alone is not enough. Candidates may still need informed human support to resolve references, gaps, name changes, overseas records or unusual circumstances.

The objective should be a process that is clear for the candidate and controlled for the employer.

Eight questions to ask about your BS7858 process

Organisations reviewing their approach should ask:

1. Is the process applied consistently across every candidate?
Equivalent cases should be assessed using equivalent evidence standards and escalation rules.

2. Are gaps and discrepancies investigated and recorded?
Identifying an issue is not enough. The resolution and supporting evidence should be documented.

3. Can we explain why a screening decision was made?
The file should contain a clear rationale, particularly where an exception was accepted.

4. Do candidates understand what is required?
Instructions should be clear, proportionate and consistent throughout the process.

5. Can managers see where cases are delayed?
Operations and recruitment teams need sufficient visibility to plan mobilisation effectively.

6. Are exceptions escalated consistently?
The process should not depend on informal decisions made differently by individual managers.

7. Could the file withstand customer or auditor scrutiny?
Evidence, decisions and approvals should be traceable.

8. Are responsibilities clearly owned?
It should be clear who gathers evidence, who reviews it, who approves exceptions and who makes the deployment decision.

A negative answer does not necessarily mean the entire process needs replacing. It does indicate where controls, ownership or visibility may need to improve.

When should an organisation use a managed screening provider?

Some organisations can manage BS7858 screening effectively in-house.

Others find that the volume, complexity or operational importance of screening makes specialist support more efficient.

A managed screening provider may be appropriate where an organisation has:

• high or fluctuating recruitment volumes
• limited internal screening capacity
• complex candidate histories
• significant overseas employment
• tight mobilisation deadlines
• multiple customer-specific requirements
• inconsistent internal evidence standards
• limited visibility over case progress
• a high administrative burden
• difficulty obtaining or reviewing references.

The decision should not be based solely on whether a provider can collect checks.

The organisation should consider whether the provider can support the complete process, including:

• candidate communication
• evidence collection
• employment-history verification
• identification of gaps and discrepancies
• documented escalation
• status visibility
• secure record keeping
• support for customer or audit enquiries.

Is your current process becoming difficult to manage?

If screening volumes, complex histories or customer requirements are placing pressure on internal teams, it may be time to review whether a managed approach would improve consistency and visibility.

Secure Screening Services provides managed BS7858 screening supported by UK-based customer and candidate teams and its own screening platform.

The service is intended to help organisations apply their screening requirements consistently, reduce manual administration and maintain visibility over cases as they progress.

The final recruitment and deployment decision remains with the customer, informed by the evidence gathered through the screening process.

BS7858 supports informed decisions, not assumptions

Security depends on people, but confidence in those people should not be based on assumption alone.

Nor should it be based on a single licence, certificate or database result.

BS7858 screening provides a structured framework for examining an individual’s history, investigating uncertainty and documenting the basis on which a deployment decision is made.

It does not guarantee future conduct. It does not remove risk. And it does not replace SIA licensing, lawful DBS eligibility requirements or an employer’s own judgement.

Its value lies in creating a process that is consistent, evidence-led and capable of scrutiny.

For organisations deploying people into secure or sensitive environments, that is not simply a recruitment task.

It is part of workforce assurance.

Review your BS7858 screening process

If screening delays are affecting mobilisation, candidates are receiving inconsistent evidence requests or managers cannot see where cases are being held up, Secure Screening Services can help you assess your current approach. Reviewing your process can identify weaknesses in evidence standards, ownership, candidate communication, escalation and screening visibility.

Explore our BS7858 screening service

Please note: This article provides general information about BS7858 screening and should not be treated as legal advice. Requirements may vary according to the role, contract, operating environment and current edition of the relevant standard.