Do you perform background screenings or multi-state background checks on all employees prior to their first day of work?

This question is asking whether your organization conducts background checks on employees before they start working. Background screenings typically include verification of criminal records, employment history, education credentials, and sometimes credit history. 'Multi-state' refers to checking records across multiple states, not just the employee's current state of residence. This question is included in security assessments because employees with access to sensitive systems or data represent a significant insider threat risk. Background checks help identify potential red flags in a candidate's history that might indicate higher security risks. For example, a history of fraud could be concerning for someone who will handle financial data, or a history of data theft could be problematic for someone with database access. When answering this question, you should be specific about: 1. Whether you conduct background checks at all 2. The timing (before employment begins) 3. Whether checks are performed on all employees or only certain roles 4. The scope of the checks (criminal, employment verification, education, etc.) 5. Whether the checks cover multiple states 6. If you use a third-party service for conducting these checks If you don't perform background checks on all employees, be honest but explain any compensating controls you have in place.