Do you perform background checks on employees?
A people and suppliers question from almost every security questionnaire. Here is a model answer, the evidence a reviewer may ask for, and what to say if you don't do this yet.
A model answer
Yes. Staff and contractors with access to customer data are background-checked through [provider] before access is granted, where the law allows. Checks cover [identity, right to work and references].
Replace the parts in square brackets with what's true for you, and only answer yes to what you do.
Evidence a reviewer may ask for
- Your screening policy
- Confirmation of which roles are checked
If you don't do this yet
Say what you do check, such as identity and references, and what you don't. Background checks vary by country, so a precise answer is more useful than a general yes.
Related questions
Do employees receive security awareness training?A model answer, the evidence behind it, and what to say if you don't do it yet.How do you assess the security of your vendors?A model answer, the evidence behind it, and what to say if you don't do it yet.Security questionnaires without SOC 2How to answer a customer's questionnaire honestly before you have an audit.
Answer it once, on your trust center, for every reviewer.
From £39 a month. No sales call.