Background screening policy
What is verified about a person before they are given access, proportionate to the role, and how the checks are recorded.
How the register reads it
| Also called | vetting policy, background checks |
|---|---|
| Family | People |
| Document type | Policy. The regimes ask for the content, not the label; a line pasted as a standard, procedure, plan or schedule is placed here with the label noted. |
| Folds into | The regimes accept it folded into the hr security policy (joiners, movers, leavers); when neither is listed, the gap is counted once, under the parent. |
| Expected owner | The head of HR. |
| Review cadence | Annual (the register's default: the clauses say planned intervals and on significant change, and do not fix a period). |
| On the gap list when | never on its own: the register recognises it and names the clauses, but no ticked regime lists it as a separate document (its parent, hr security policy (joiners, movers, leavers), is). |
| Template | Background screening policy. |
Which standards require it, and what each expects it to contain
1 requiring clauses, 1 regimesShown on a register for the regimes you tick; with none ticked, ISO 27001 is applied. Requirement text drawn from a human-verified compliance corpus under licence: the corpus statement of each clause, not the instrument verbatim.
ISO/IEC 27001:2022
ISO 27001 6.1 ScreeningBackground-check candidates and personnel proportional to risk and classification, within the law.
What the ISO 27002 guidance expects the document to say: Requires background verification checks on all candidates for personnel before they join and on an ongoing basis afterwards, within the bounds of applicable laws, regulations and ethics, and proportionate to business requirements, the classification of information to be accessed and the perceived risk.
Common gap: One‑size‑fits‑all screening regardless of risk
Source: ISO/IEC 27001:2022; guidance ISO/IEC 27002:2022
Do this for every document on your list
Paste the list and get this reading for every document at once, with the owner and cadence against each, the clauses quoted, and the documents the regimes expect that the list does not carry. Eight documents free, no account.
Build a register