STEP 1 — Define your screening policy
Written screening policy exists and is approved by HR leadership or legal.
Policy covers: which roles require screening, what checks are included per role family, and who is authorized to review and adjudicate results.
Policy reviewed and updated at least annually.
STEP 2 — Map checks to role risk
All roles in the organization categorized by risk level: standard, elevated, and high.
Screening package defined for each risk level.
Rationale for each check documented (why this check for this role).
STEP 3 — Build a compliant consent process
Dedicated background screening consent form in use, separate from general employment application.
Consent form specifies: types of checks, third-party provider name, data handling practices, retention period, and candidate rights.
Consent obtained and documented before any check begins.
Consent forms stored securely and retrievable within 5 minutes of an audit request.
STEP 4 — Standardize your intake process
Candidate requirements list defined per screening package.
Candidates provided with clear written instructions on what to submit and why.
Intake process documented with named responsible parties and handoff points.
STEP 5 — Set and communicate turnaround expectations
Turnaround time defined per check type and per screening package.
Hiring managers notified of expected completion date at order placement.
Process in place for escalating delays before they affect start dates.
STEP 6 — Document every decision
Every adjudication decision recorded with date, reviewer, findings reviewed, and rationale.
Consistent adjudication standards applied to all candidates for the same role.
Records of all material discrepancies and candidate explanations retained.
STEP 7 — Test your retrievability
Conduct a quarterly test: select a random recent hire and attempt to retrieve their complete screening file within 5 minutes.
File should contain: consent form, screening report with source citations, adjudication record, and any candidate correspondence related to discrepancies.
If the file cannot be retrieved in 5 minutes, your documentation workflow needs redesign.
