One weak link in your vetting process can undo years of security investment. That is exactly the gap BS7858 screening was built to close. If your organisation places staff in roles where they can access sensitive sites, data, or vulnerable people, understanding the staff vetting process is not optional background reading, it is the foundation of a defensible, compliant hiring procedure.

This guide walks through what the BS7858 standard means in practice, the checks it requires, realistic timelines, and how to build staff vetting around it that satisfies clients, auditors, and the Security Industry Authority alike.

What Is the BS7858 Screening Process?

BS7858 is a British Standard, published by the British Standards Institution, that sets out best practice recommendations for the security screening of individuals working in environments where the security or safety of people, property, data, or goods matters.

It is not itself a piece of law, but it functions as the recognised benchmark across the UK security industry and is a regulatory requirement for any organisation seeking Security Industry Authority Approved Contractor Scheme accreditation.

Unlike a basic reference check, BS7858 security screening focuses specifically on risk reduction and trustworthiness. It looks beyond whether a candidate held the jobs they claim and asks whether their financial history, employment gaps, and overall background present a risk to the organisation they are about to join.

Who Needs BS7858 Screening in the UK?

Organisations most commonly use staff vetting for roles in the security sector itself, security guarding, door supervision, CCTV monitoring, keyholding, and close protection, where SIA licensing is involved. But the standard extends well beyond security companies. It is widely applied to:

The common thread is not job title but risk. Any role where a security failure could cause harm to people, damage to property, or reputational loss is a candidate for BS7858 screening, whether or not it sits inside a formally security focused job.

The standard applies regardless of employment type. Full time staff, part time workers, and contractors placed into a sensitive role should all be screened to the same level if the role itself carries the risk.

This matters particularly for organisations that rely heavily on subcontracted labour, since a client Approved Contractor Scheme accreditation can be put at risk by an unscreened subcontractor working under their name.

BS7858 Requirements: The Core Checks

The full list of BS7858 requirements covers several distinct verification categories. The table below summarises what a compliant screening file must contain.

The 2019 revision of the standard placed particular emphasis on risk assessment, requiring organisations to formally identify which roles within their business actually need BS7858 level screening rather than applying it uniformly. It also strengthened GDPR alignment around how screening data is handled, stored, and retained.

Character references, once a standard part of the process, were removed in the 2019 update in favour of more rigorous, verifiable checks. This shift reflects a broader move away from subjective testimonials towards evidence that can be independently confirmed, such as employer-verified dates and third-party credit or sanctions data, which is harder to fabricate and easier to audit.

For the full requirement breakdown by role type, see our BS7858 screening requirements checklist.

The BS7858 Vetting Process: Step by Step

While providers vary slightly in exact sequencing, the BS7858 vetting process generally follows these stages.

Step 1: Application and Consent

The candidate completes an application providing personal details, full employment and address history, and explicit written consent for the screening to proceed. Without documented consent, no further checks can lawfully begin.

Step 2: Document Verification

Identity documents, typically a passport or driving licence, are verified for authenticity. This step also confirms the candidate right to work in the UK against the Home Office list of acceptable documents.

Step 3: Employment and Address History Verification

Previous employers are contacted directly to confirm dates, job titles, and reasons for leaving, covering a minimum of five years. Any unexplained gap of 31 days or more must be investigated and evidenced, whether it was unemployment, education, travel, or another reason.

Step 4: Financial and Criminal Record Checks

A credit search is run to identify red flags such as bankruptcy or County Court Judgments, alongside a Basic DBS check to identify unspent criminal convictions relevant to the role.

Step 5: Sanctions, PEP, and Directorship Checks

The candidate details are checked against global sanctions and politically exposed persons lists, along with any current or historical company directorships, to confirm nothing in their profile presents an undisclosed risk.

Step 6: Compliance Review and Sign-Off

A compliance reviewer checks the full file against the requirements of the standard, resolves any outstanding queries with the candidate, and either signs the screening off as complete or flags it for further investigation.

Step 7: Certificate Issued and File Retained

Once every check is complete and signed off, a screening certificate is issued. The completed file must then be securely retained, commonly for seven years after the individual leaves the organisation, to support future audits.

BS7858 Checks: Documents You Will Need

Candidates going through BS7858 checks should expect to provide a consistent set of documentation. Having these ready in advance significantly speeds up the process:

• A valid passport or photographic driving licence
• Proof of current address, such as a recent utility bill or council tax statement
• Proof of right to work in the UK
• Full details of employers for the required history period, including contact information for referees
• Written explanations for any gaps in employment or address history
• Signed consent forms for the DBS, credit, and sanctions checks

Missing or inconsistent documentation is the single most common cause of delay in an otherwise straightforward screening file. Candidates who have moved house frequently, worked abroad, or taken career breaks should be encouraged to gather supporting evidence, such as old tenancy agreements or education certificates, before the process starts, since chasing this information mid screening is what most often pushes a file past its expected turnaround.

How Long Does BS7858 Screening Take?

Timelines vary depending on how quickly former employers and third parties respond, but there are useful benchmarks to plan around. The standard technically allows up to 84 days (12 weeks) for full completion, though most well run screening providers complete the process considerably faster, typically within two to three weeks. Some streamlined, technology driven providers report completing straightforward cases in under a week.

To avoid leaving roles unfilled during this window, BS7858:2019 permits Limited Screening, sometimes still referred to as conditional screening, which allows a candidate to start work once minimum baseline checks are complete, provided the full screening is finished within 12 weeks of their start date.

This is a legitimate, standard compliant route, not a shortcut, but it does require the outstanding checks to be tracked and closed out on schedule.

BS7858 Screening vs DBS Checks: What Is the Difference?

A common point of confusion is whether the BS7858 security screening process and a DBS check are the same thing. They are not. Here is how the two compare:

What Happens If a Candidate Fails BS7858 Screening?

Not every discrepancy found during screening automatically disqualifies a candidate. A failed or flagged check typically triggers a structured review:

• The specific issue is identified, an unexplained employment gap, an adverse credit finding, or an undisclosed conviction, for example.
• The candidate is given the opportunity to explain or provide further evidence.
• The employer assesses the finding against the risk profile of the specific role, since not every adverse finding is relevant to every position.
• A documented decision is made, either to proceed, request additional information, or withdraw the offer, with the reasoning recorded in the screening file.

This structured, evidence based approach protects both the organisation and the candidate from decisions made on incomplete or unverified information. It also creates an audit trail that stands up to scrutiny if a client, insurer, or regulator later asks how a particular hiring decision was reached, which matters as much for defending a decision to proceed as one to decline.

Building a Reliable Staff Screening Process Around BS7858

A strong staff screening process does more than tick the boxes required by the standard. To make BS7858 compliance sustainable rather than a recurring administrative headache:

• Run a role-based risk assessment first, so you apply full BS7858 screening only where the standard actually requires it, rather than uniformly across every hire.
• Digitise document collection, since candidates submitting scans or app-based uploads reduces the back-and-forth that causes most delays.
• Track outstanding actions centrally, particularly for any candidates started under Limited Screening, so the 12-week completion deadline is never missed.
• Retain files securely for the required period, commonly seven years post employment, with access limited to those who need it.
• Re-screen periodically. BS7858 certification has no fixed legal expiry, but re-screening every one to two years is widely recommended, since financial circumstances, sanctions status, and criminal history can all change after initial clearance.
• Communicate timelines clearly to candidates. A candidate who understands why the process takes two to three weeks and what limited screening means for their start date is far less likely to drop out mid process than one left guessing.
• Choose an accredited provider. Screening companies audited by the National Security Inspectorate offer an independent layer of assurance that the process itself, not just the paperwork, meets the standard consistently. Our comparison of the best BS7858 vetting software is a good starting point when evaluating providers, and if budget is a factor, our breakdown of BS7858 security vetting cost covers typical pricing and hidden fees.

Final Thoughts

The BS7858 screening process is thorough by design, and that thoroughness is exactly what makes it valuable. A well-run staff vetting process built around the standard protects your organisation, your clients, and the people you place in sensitive roles, while giving you a defensible, auditable record if anything is ever questioned.

Build the risk assessment first, digitise document collection where you can, and treat re-screening as a routine part of ongoing staff management rather than a one-off hurdle at hiring.

Ready to streamline your BS7858 vetting?

Smart Workforce provides automated BS7858 staff vetting, from identity verification and employment gap analysis to financial probity and DBS checks, all in one UK-compliant platform. Get audit-ready results in 3 to 4 weeks, with real-time tracking and automated renewal reminders.

Simplify BS7858 Compliance: Schedule Your Smart Workforce Demo

Frequently Asked Questions

What is the BS7858 screening process? 

It is a British Standard process for security-screening staff, verifying identity, employment history, address history, financial integrity, and criminal record, used to assess trustworthiness for roles involving access to sensitive sites, data, or people. 

Who needs BS7858 screening in the UK? 

Primarily security industry staff, guards, door supervisors, and CCTV operators, but also employees in finance, healthcare, critical infrastructure, and technology roles where security failure could cause harm to people, property, or data. 

What checks are included in BS7858 screening? 

Identity verification, right to work, 5 to 10 years of employment and address history with gap analysis, a Basic DBS check, financial and credit checks, and global sanctions, PEP, and directorship screening. 

What documents are required for BS7858 screening? 

A valid passport or driving licence, proof of address, right-to-work evidence, employer contact details covering the required history period, written explanations for any gaps, and signed consent forms for background checks. 

How long does BS7858 screening take? 

The standard allows up to 84 days, but most providers complete full screening within two to three weeks. Limited Screening lets candidates start work sooner, provided full checks finish within 12 weeks. 

What is checked during BS7858 vetting? 

Vetting checks identity, employment and address history, financial stability (credit, bankruptcy, CCJs), criminal record via DBS, and sanctions or politically exposed persons status, alongside any employment gaps of 31 days or more. 

Is BS7858 screening the same as a DBS check? 

No. A DBS check covers only criminal record history and is one component within BS7858. BS7858 additionally verifies identity, employment and address history, financial integrity, and sanctions status as part of a wider process. 

Does BS7858 screening include a criminal record check? 

Yes. A Basic DBS check, or equivalent, identifying unspent convictions is a standard requirement within the BS7858 screening process, alongside self-declaration of relevant criminal history by the candidate. 

Can a candidate work before BS7858 screening is completed? 

Yes, under BS7858:2019’s Limited Screening provision, candidates can start work once minimum baseline checks are complete, provided full screening is finished within 12 weeks of their start date. 

What happens if a candidate fails BS7858 screening? 

The specific issue is reviewed, the candidate can respond or provide evidence, and the employer assesses relevance to the role before making and recording a documented decision to proceed, request more information, or withdraw the offer. 

How often must BS7858 screening be completed? 

BS7858 certification has no fixed legal expiry, but re-screening every one to two years is widely recommended, since financial, criminal, and sanctions status can change after the initial screening was completed. 

Can BS7858 screening be completed online? 

Yes. Most modern providers use app-based or online portals for document upload, consent capture, and progress tracking, which typically speeds up completion compared with paper-based application and reference-chasing methods.