What a vetting assessor actually checks, versus what gets assumed
There is a gap between screening as it is designed and screening as it is often actually carried out under time pressure, and it usually shows up in how a reference or an identity document is treated — accepted at face value because it looks right, rather than actively checked in the way the standard intends.
References: written versus spoken to
A written reference supplied by the applicant is not the same as a reference obtained directly by whoever is carrying out the screening. The safer route is contacting the referee independently, using contact details verified separately from the reference document itself, rather than a phone number written on the letter the applicant handed over.
Identity documents: checked, not just seen
- Confirming a document is on the current list of acceptable evidence, not just that it looks like a valid document
- Checking that the name, date of birth and photograph are internally consistent, not skimmed for a general impression
- Verifying a document has not expired, including documents that are easy to mistake as still valid
- Recording which specific documents were seen and when, rather than a general note that identity was confirmed
Under time pressure, all four of these compress into "identity checked" as a single tick, which loses exactly the detail an assessor would ask for if the file were reviewed later.
Addresses and continuity
Address history is often treated as a formality, but it is one of the ways a screening process cross-checks the rest of the file — an address that does not line up with an employer's records, or with the timeline given for a gap, is worth noticing rather than smoothing over. See explaining gaps in employment history for how that kind of inconsistency is normally handled.
Why this matters more than it looks
None of these shortcuts are dishonest. They happen because a genuine assessment takes longer than accepting what is in front of you, and there is usually pressure to get a candidate through screening and onto a roster. The cost only shows up later, when a file is requested and the detail that would have shown proper checking simply is not there.
Consistency across the file set
Assessors generally sample rather than read everything, and what they are testing is whether the process is consistent. Three files handled three different ways — different reference formats, different levels of documentation, different thresholds for what was explored — suggests that the outcome depends on who did the screening rather than on a defined process.
That is a more serious finding than an individual omission, because it implies the rest of the files cannot be relied on either. A consistent process with one documented exception tends to be received far better than five files each complete in a different way.
Common mistakes
- Inconsistent practice between recruiters or branches
- No defined process, so the standard depends on who did the work
- Different thresholds for what is explored or documented
- No internal sampling of files before a client audits them
- Exceptions handled without a record of who approved them
- Assembling or tidying files once an audit is announced
What separates a consistent operation
A defined process that does not depend on who carried out the screening. Same reference approach, same documentation standard, same threshold for what gets explored, same handling of exceptions — with any departure recorded and approved rather than improvised.
Assessors sample. A consistent set of files with one documented exception reads very differently from five files each complete in its own way, because the second suggests nothing can be inferred about the files they did not look at.
One practical test: compare two branches
Take two files screened by different branches or recruiters and lay them side by side. Look at reference format, documentation depth, and what was explored versus accepted.
Where they differ materially, the standard depends on who did the work — which is the finding an assessor is actually looking for, because it means the sample they took tells them nothing about the rest. A defined process with one documented exception reads far better.
- Define the process so the outcome does not depend on the person
- Compare files across branches periodically
- Record exceptions and who approved them
- Sample internally before an external assessment
- Keep the same standard for agency and subcontracted officers
- Contact referees independently, using details verified separately from the reference document itself
- Check identity documents against the current acceptable list, not just for a general resemblance to a valid document
- Record which documents were seen and when, not just that identity was confirmed
- Treat address inconsistencies as worth investigating, not smoothing over
- The gap between designed and actual screening usually shows up under time pressure — build in enough time to close it
About this article
The SecureOptix team
Written by people who work daily with security contractors on SIA licensing, screening and the records that hold up under an inspection.
- Published
- 2 July 2026
- Last revised
- 27 September 2026
- Topic
- Screening & Vetting
How this is researched, dated and corrected is set out in our editorial standards. If something here is wrong or out of date, email hello@secureoptix.co.uk — corrections to a regulated detail are made as soon as we can confirm them, and the revision date above moves when they are.