GV.RR-04.047
Does your organization conduct background checks for personnel in sensitive roles both during initial onboarding and periodically throughout their employment?
Explanation
Background checks help identify potential security risks by verifying an individual's identity, criminal history, education, employment history, and other relevant information before granting access to sensitive systems or data. Periodic re-screening is important as people's circumstances change over time, potentially introducing new risks that weren't present during initial hiring. Evidence of compliance could include a documented background check policy specifying which roles require screening, the scope and frequency of checks, and a sample of redacted background check reports or a summary report from your HR department showing completion dates for initial and periodic checks (with personal information removed).
Implementation Example
Conduct background checks prior to onboarding new personnel for sensitive roles, and periodically repeat background checks for personnel with such roles
ID: GV.RR-04.047
Context
- Function
- GV: GOVERN
- Category
- GV.RR: Roles, Responsibilities, and Authorities
- Sub-Category
- Cybersecurity is included in human resources practices

