BS 7858:2019 pdf free.Screening of individuals working in a secure environment- Code of practice.
Top management should: a) be committed to satisfying the recommendations of this British Standard;  b) ensure that the resources and infrastructure needed for the screening process are available; c) direct and support persons to contribute to the effectiveness of the screening process; and d) ensure that the responsibilities and authorities for relevant roles are assigned and communicated within the organization.The organization should only employ individuals whose career or history indicates that they would be suitable for the role, given that such employment might allow opportunities for ilicit personal gain, or the possibilities of being compromised, or opportunities for creating any other breaches of confidentiality, trust and safety. NOTE 1 Attention is drawn to UK employment law, commercial insurance cover and the applicable terms and conditions of employment. NOTE 2 In some cases, where the verification procedures cannot be completed satisfactorily, employment might be prevented, terminated or an employment offer withdrawn. It is emphasized that this is not necessarily an indication of unsuitability; it might simply not have been possible to obtain the required positive evidence.People engaged in screening should be trained for the duties envisaged. Training should fully cover the recommendations given in this British Standard, the essential elements of all data protection legislation and awareness of relevant regulatory requirements. NOTE 1 The organization might wish to consider sending the screening controller and the screening administrator(s) involved in such activities on appropriate external courses organized for this purpose. Training should also cover the implications of not complying with this British Standard. NOTE 2 These implications can include breach of contract, legal action, insurance cover, reputational damage and regulatory enforcement. Training should be reviewed at least annually to ensure that competency is maintained. Training records should be accurately maintained. All training provided online should be recorded electronically. All other training should be signed by the trainee, countersigned by the trainer and retained. Where a certificate of training is provided by a recognized and relative sector-competent training organization, a copy should be retained.BS 7858 pdf download.