Skip to content
SecureKnots

Records & Secure Handling · BS 7858:2019 Screening of Individuals Working in a Secure Environment

The British Standard code of practice for security screening and vetting of people who work where the security of people, goods, data or property matters.

Issued by

BSI (British Standards Institution)

Typical timeline

4-8 weeks

Assessed by

Certification body

Validity

Ongoing, reviewed at audit

Overview

  • 01Security services and guarding companies
  • 02Facilities management, data center and cash-handling operators
  • 03Contractors with access to sensitive sites or confidential material

Requirements

  1. 01Identity & right to workVerified identity and right to work before screening begins.
  2. 02History verificationEmployment, education and activity history checked across the screening period, with gaps accounted for.
  3. 03Financial & criminal checksFinancial and criminal record checks carried out within the law.
  4. 04Records & conditional employmentControlled screening files, data protection and limits on provisional employment.

Our approach

Week 1

01

Scope

We learn your product, your buyers and your deadlines, then fix the exact frameworks, boundaries and systems in scope.

Weeks 2-3

02

Assess

Control-by-control gap assessment against every target framework at once, with a single prioritized findings register.

Weeks 3-10

03

Remediate

Policies written, controls implemented, evidence automated. We work inside your tools, Jira, GitHub, AWS, Google Workspace.

Weeks 10-14

04

Audit

Mock audit, auditor selection and fieldwork coordination. Your independent auditor issues the report; we sit beside you until they do.

Year-round

05

Sustain

Continuous monitoring, quarterly testing and a renewal calendar that never surprises you.

Customer story

FAQ

Typical timeline: 4-8 weeks, depending on scope, maturity and team availability. We'll give you a firm plan after a two-week scoping and gap assessment.

Yes, that's our specialty. BS 7858 shares substantial control overlap with BS EN 15713 and ISO 28000, so we build one control set and map evidence across all of them.

Next framework

SOC 2

Security & AssuranceAICPA

End of the thread

A 30-minute call with a senior practitioner. You leave with a plan either way.

We handle audit readiness and auditor coordination. Your SOC reports and ISO certificates are always issued by independent, accredited auditors.

Cookies, tied neatly

We use essential cookies to run this site and, with your permission, analytics to improve it. Privacy policy