HR & Awareness

Background Screening Policy

A background screening policy template defining pre-employment verification proportionate to role risk, and re-screening triggers, aligned to ISO 27001, NIST SP 800-53, SOC 2.

14-20 pages|Updated 2026-09-12|3 frameworks

What's Included

1. Purpose & Scope

Objective and roles covered.

Policy ObjectiveRoles in ScopeRoles and Responsibilities

2. Proportionality

Screening matched to access and risk.

Role Risk TiersChecks by TierJustificationLegal Limits

3. Checks Performed

What is actually verified.

IdentityRight to WorkEmployment HistoryQualificationsCriminal Records where lawfulFinancial where justified

4. Conduct & Fairness

Lawful and non-discriminatory screening.

Candidate ConsentData MinimisationAdverse Findings ProcessRight of Reply

5. Contractors & Third Parties

Extending screening beyond employees.

Contractor RequirementsEvidence from SuppliersEquivalence Assessment

6. Re-Screening

Triggers after hire.

Role ChangePeriodic Re-ScreeningCause-Based Screening

7. Records & Review

Evidence and retention.

Screening RecordsRetention PeriodAnnual Policy Review

Frequently Asked Questions

What should a background screening policy include?

A comprehensive background screening policy should include purpose & scope, proportionality, checks performed, conduct & fairness, and more. This template covers 7 key sections aligned to ISO 27001, NIST SP 800-53, SOC 2 requirements.

Which frameworks require a hr & awareness policy?

Major frameworks requiring hr & awareness policies include ISO 27001, NIST SP 800-53, SOC 2. This template maps directly to their control requirements, making it easier to demonstrate compliance across multiple standards.

How often should a background screening policy be reviewed?

Best practice is to review your background screening policy at least annually, or whenever significant changes occur in your organisation, technology environment, or regulatory landscape. Most frameworks including ISO 27001 and NIST CSF require documented policy review cycles.

Build Your Compliance Programme

Pair this policy template with our compliance platform to map controls across 686+ frameworks, run self-assessments, and get AI-powered compliance advisory.

Get Started Free →

Free forever — no credit card required