When organisations discuss employee screening, one of the most common questions is whether every employee should undergo the same checks.

The short answer is no.

Every employee should be screened appropriately, but this does not mean that everyone requires the same type or level of screening. A blanket approach may result in unnecessary costs, delays and the collection of information that is not relevant to the role.

A more effective approach is risk-based screening.

What Is Risk-Based Screening?

Risk-based screening matches the checks conducted to the responsibilities, access and potential risks associated with a position.

A financial manager, delivery driver, IT administrator and receptionist perform very different functions. Each role therefore presents a different risk profile.

An employee managing company finances may require identity, qualification, employment history, credit and criminal record checks. A driver may need a valid driver’s licence, professional driving permit and driving history verification. Someone with access to sensitive customer data may require screening focused on identity, employment history, criminal records and information-security risks.

The purpose is not to screen one person more harshly than another. It is to ensure that every screening decision is reasonable, relevant and connected to the role.

Start With the Position, Not the Person

Screening should begin before a candidate is selected. Organisations should assess the position and consider what could go wrong if an unsuitable person were appointed.

Important questions include:

• Will the employee handle money or access financial systems?
• Will the person work with vulnerable groups?
• Will the employee drive a company vehicle?
• Will the role provide access to confidential information or customer data?
• Does the position require specific qualifications, licences or professional registration?
• Will the employee work with limited supervision?
• Could dishonesty or poor judgement cause financial, legal or reputational damage?

The answers help determine which checks are necessary and allow the organisation to explain why they form part of the recruitment process.

Screening Should Be Proportionate

More screening is not always better screening.

Collecting information that has no bearing on a person’s suitability for the job may create unnecessary privacy and compliance concerns. Screening should be specific, proportionate and conducted with the candidate’s knowledge and consent, in line with applicable legislation.

A credit check may be relevant for a role involving significant financial responsibility, but inappropriate for certain other positions. Similarly, a driver’s licence check is essential for someone driving on behalf of the company but irrelevant for a position requiring no driving.

The value lies in selecting the right checks, not simply the greatest number of checks.

Consider the Full Risk Picture

Many employers focus only on criminal record checks. While important, these provide just one part of the overall picture.

Depending on the role, screening may include:

• Identity verification
• Criminal record checks
• Qualification verification
• Employment and reference checks
• Driver’s licence verification
• Credit checks, where relevant and legally permissible
• Professional membership or registration checks
• Social media risk assessments
• Integrity assessments
• Skills testing
• Politically exposed person and sanctions screening

No single check can establish whether a candidate is suitable. Results should be considered together, taking into account the position and the organisation’s risk tolerance.

An integrity assessment can provide insight into attitudes towards honesty, reliability, rules and workplace conduct. It should not be used in isolation but can add valuable context when combined with verified background information.

Skills testing adds another important layer by assessing whether candidates can demonstrate the practical abilities required for the position. A CV may list particular skills and experience, but a job-specific assessment can help confirm the candidate’s actual level of competence. Testing should be relevant to the role and applied consistently to candidates being considered for comparable positions.

Screening Should Not End at Appointment

Risk can change during employment.

An employee may be promoted, gain access to financial systems, begin driving a company vehicle or take responsibility for sensitive information. Screening completed when the person first joined may no longer reflect the requirements of the role.

Re-screening should therefore form part of a broader risk-management strategy. Organisations may consider it when:

• An employee is promoted or transferred
• Responsibilities change significantly
• New financial or system access is granted
• Regulatory or client requirements change
• A specific workplace concern arises
• A defined rescreening period is reached

Rescreening should also be risk-based and supported by a clear company policy. Employees should understand when it may take place, why it is required, and how their information will be handled.

Consistency Remains Essential

A risk-based approach should not result in inconsistent or unfair treatment.

Candidates and employees in comparable roles should be subject to the same screening requirements. Decisions should be guided by documented job-risk profiles rather than assumptions about an individual.

Organisations should clearly define which checks apply to each role, why they are relevant, who may review the results, how adverse information will be assessed, how long information will be retained and when rescreening will occur.

A screening result should never automatically determine an employment decision. The organisation should consider the information’s relevance, seriousness, accuracy and timing, as well as the responsibilities of the role.

The Right Screening for the Right Risk

So, should companies screen every employee?

Companies should ensure that every employee is appropriately screened, but not necessarily in the same way.

The objective is not to find reasons to exclude people. It is to verify important information, assess whether candidates can meet the demands of the position, identify relevant risks, and support fair, informed employment decisions.

At iFacts, we believe effective screening is not about checking everything. It is about understanding the position, identifying the real risks and applying the checks and assessments that matter.

When screening is relevant, consistent and proportionate, it protects the organisation while respecting the rights and dignity of the individual.