Security Guard Vetting Process UK: BS 7858 Guide 2026

Last updated: 17 October 2026

The security guard vetting process UK employers rely on combines three separate layers: an SIA licence to work legally, BS 7858 screening to verify five years of history, and often an enhanced DBS check for higher-risk sites. Most BS 7858 screenings complete within 7–14 working days, per UK Employee Checks (2026).

Key Takeaways

• The security guard vetting process UK employers use has three distinct layers: SIA licensing, BS 7858 screening, and (where required) enhanced DBS checks.
• There are a record 458,705 total individuals holding an SIA licence, a rise of about 17,000 in the previous 12 months, according to Professional Security Magazine (2026).
• Most BS 7858 screenings complete within 7–14 working days, per UK Employee Checks (2026).
• Enhanced DBS check turnaround averaged 14.3 days in a recent six-month update, up 18% from 12.1 days in July 2026, according to EBC Global.
• Only 772 of an estimated 4,000 UK security companies hold the SIA's voluntary Approved Contractor Scheme accreditation, per KeyPlus Security (2026).
• A screening policy is not proof of screening — what matters in a tender or an audit is a record that shows BS 7858 was actually done, per person.

What is the security guard vetting process UK employers must follow?

The security guard vetting process UK employers must follow is the combination of statutory licensing and voluntary screening standards that together confirm a guard is legally entitled to work and safe to deploy on a client site. It is not one process but three that overlap: an SIA licence issued by the Security Industry Authority under the Private Security Industry Act 2001, a BS 7858 background screening carried out to the British Standards Institution's published standard, and, for some roles, an enhanced Disclosure and Barring Service (DBS) check.

Get any one of these wrong and the consequences are different. An unlicensed guard on site is a criminal offence for the employer. Skipped BS 7858 screening is a contractual and reputational failure that surfaces the moment a client asks for records. A missing DBS check on a role that requires one is a safeguarding gap.

SIA licensing: the legal minimum to work as a security guard

An SIA licence is the mandatory authorisation issued by the Security Industry Authority that permits an individual to work in a licensable role such as door supervision, security guarding, or close protection under the Private Security Industry Act 2001. Working unlicensed in a licensable sector is a criminal offence, and employing someone who is unlicensed exposes the contractor, not just the individual.

To get one, an applicant needs the relevant SIA-approved training qualification, proof of identity, proof of the right to work in the UK, and a criminal record check carried out as part of the SIA's own vetting. GOV.UK's guidance on applying for an SIA licence sets out the exact document routes accepted, including passport, biometric residence permit, and in some cases a combination of other identity documents.

The scale of the licensed workforce gives a sense of how central this check is to the industry. There are a record 458,705 total individuals holding an SIA licence, a rise of about 17,000 in the previous 12 months, according to Professional Security Magazine, citing SIA monthly statistics (2026). A separate dataset puts active licence holders at around 451,000 in 2026, compared with just under 235,000 in 2008, according to Statista, citing GOV.UK data (2026) — a near-doubling in under two decades that tracks the private security sector's growth across retail, construction, events and residential estates. Of those active licence holders, 402,273 were men and 49,200 were women in 2026, per Statista, citing GOV.UK data (2026).

An SIA licence, though, only confirms the individual passed the regulator's own criminal record and identity checks at the point of application. It says nothing about their employment history, their conduct in previous roles, or gaps that a client's insurer or a tender evaluator will want explained. That is what BS 7858 is for.

What is BS 7858 and how does the screening process work?

BS 7858 is a British Standard published by the British Standards Institution that sets out the recruitment and vetting process for individuals working in security roles with access to premises, cash, or sensitive information. It goes considerably further than an SIA licence, covering employment history verification, identity confirmation, financial checks where relevant, and references, typically over a five-year look-back period.

A BS 7858 screening file usually includes:

• Identity verification against original documents, not copies
• A minimum five-year employment history check, with any gaps requiring written explanation
• Verification of the most recent employer or a documented reason for its absence
• Criminal record disclosure where legally permissible
• Financial probity checks for roles handling cash or high-value assets
• Right-to-work confirmation
• Character references, usually at least one covering the most recent employment

Most BS 7858 screenings are completed within 7–14 working days, according to UK Employee Checks (2026). That timeline assumes clean records and cooperative referees; gaps in employment history, overseas history, or unresponsive former employers routinely extend it.

Crucially, BS 7858 is not a legal requirement in the way an SIA licence is. It is a contractual one. Most serious clients — shopping centres, construction principal contractors, residential management companies, corporate landlords — will specify BS 7858 screening in the contract because their insurer or their own compliance policy requires it. That means the burden of proof sits with the security provider, not the regulator.

This is precisely where Pulse's guide to winning security tenders makes a point worth repeating: screening should be to BS 7858, with records that show it per person, not a policy that asserts it. A folder that says "we screen to BS 7858" answers nothing when an evaluator or an auditor asks to see the file for officer number 14 on a specific site.

DBS checks and how they fit alongside BS 7858

A Disclosure and Barring Service (DBS) check is a separate criminal record check, run by the non-departmental public body that replaced the Criminal Records Bureau, used to confirm whether an individual has relevant convictions, cautions, or is on a barred list. For security guards this is most often an enhanced DBS check, required where the role involves regular contact with vulnerable people — hospital security, school site security, some residential and care settings.

DBS is not universal across the security sector. A retail patrol officer or a construction site guard typically won't need one; a concierge role in a residential block with vulnerable residents, or a guard posted at a school gate, likely will. Getting this distinction wrong in either direction is costly — over-screening slows down mobilisation for no compliance benefit, under-screening leaves a genuine safeguarding gap.

Turnaround has become a live operational issue. DBS commissions 52 police forces and law enforcement agencies, processing over three million checks annually, according to uCheck (2026). But the average enhanced DBS check turnaround was 14.3 days in a recent six-month update, up from 12.1 days in July 2026 — an 18% increase attributed to police force delays, according to EBC Global. For an ops director trying to mobilise a new site in a fortnight, that delay is the difference between hitting a contract start date and explaining a gap to the client on day one.

SIA licensing vs BS 7858 vs DBS: what each check actually proves

Confusion between these three checks is common, and it matters because they answer different questions. An SIA licence proves an individual is legally entitled to work in a licensable role. BS 7858 proves their employment history and character have been verified over five years. A DBS check proves whether they have a relevant criminal record for roles requiring that specific safeguard. None of the three substitutes for another.

In-house vetting vs outsourced screening: the trade-off

Security companies generally choose between running BS 7858 screening in-house or outsourcing it to a specialist screening provider. In-house vetting gives full control over the process and can be cheaper at scale for larger operators with a dedicated compliance team. Outsourcing to an accredited screening company transfers the administrative burden — chasing references, verifying documents, managing gaps — to a specialist, usually at a per-file cost, and reduces the risk of a compliance officer missing a step under time pressure.

For most small and mid-sized security contractors, outsourcing the screening itself while retaining full visibility of the result is the more common approach. The decision that actually matters operationally, though, isn't who runs the screening — it's whether the result is stored somewhere retrievable, expiry-tracked, and auditable per officer, rather than filed away and forgotten until a client or a tender panel asks to see it.

The SIA Approved Contractor Scheme and what it signals to clients

The SIA Approved Contractor Scheme (ACS) is a voluntary accreditation run by the Security Industry Authority that assesses a security company's operating standards — vetting, training, management, and financial stability — against a published set of criteria. Accreditation is not compulsory, and take-up is far from universal. Just 772 of an estimated 4,000 UK security companies hold ACS accreditation, as of July 2026, according to KeyPlus Security (2026). An earlier SIA Freedom of Information release recorded 838 approved contractors as of 8 March 2022, with 196 companies new to the scheme since 2019, according to GOV.UK (2022).

For a buyer, ACS membership is a useful proxy signal but not proof of anything on a specific site or a specific officer's file. A company can hold ACS status and still fail to keep a screening record current for the officer standing on a client's gate this week. That gap between company-level accreditation and site-level evidence is exactly what tender evaluators are increasingly probing, and it's the reason Pulse's tender guide treats BS 7858 records — not policy statements — as one of the pass/fail gates a bid must clear before quality is even scored. Public sector procurement under the Procurement Act 2023 now places explicit weight on transparency, and price/quality splits on formal tenders commonly run between 60/40 and 30/70 — meaning a bid that can't evidence its vetting cleanly loses on a gate long before price is even compared.

Why vetting records need to survive audit, not just exist

A vetting file that exists in a drawer or a shared spreadsheet is functionally different from one that can be produced on demand, per officer, with expiry dates visible before they lapse. Mo Hassan, Founder of Pulse, puts the underlying principle plainly when discussing what actually keeps a security operation running cleanly: "Officers leave chaos, not work. Pay on time from clean records, don't ring them at 4am to fill a gap you could have seen on Monday, and let them see their own record standing up for them when a client complains. The basics done properly are the retention strategy."

That same logic applies directly to vetting. A compliance system that shows every officer's SIA licence expiry, BS 7858 completion date, DBS status and right-to-work check on one runway — rather than scattered across email threads and folders — is what lets an ops director answer a client audit in minutes rather than days. Pulse's compliance runway does exactly this: SIA, BS 7858, DBS, right to work, training and statutory building compliance tracked against expiry, alongside Martyn's Law readiness assessments for publicly accessible venues under the Terrorism (Protection of Premises) Act 2026.

This is the same discipline behind Pulse's approach to proving patrols happened at all — a subject covered in detail in Pulse's guide to proving patrols actually happened. The parallel is deliberate. A paper vetting file that "asserts" screening was done is no more trustworthy than a paper patrol log that "asserts" a round was walked. Both fail the same test: can you produce the underlying evidence, per person, per date, on request?

Vetting in practice: the founding operation's own experience

Pulse was built inside Priority First, the founding team's own London security and facilities operation, before being offered to other operators — a disclosure worth making plainly rather than presenting this as an arm's-length customer story. On one of West London's best-known mixed-use developments, Priority First runs 11 officers across 152 checkpoints spanning retail, residential, plant rooms and service yards. The client wanted proof the whole footprint was actually being walked, not promised — and that same standard of "show me, don't tell me" is what a client increasingly expects of vetting records too.

Live since February 2026, every one of those 152 checkpoints was made photo-mandatory in the app, with more than 540 patrols logged in the first five months (production data, July 2026, pulse-operations.co.uk/benchmark). The mechanism that made it work is the same one that makes vetting records trustworthy: a missing check shows as a gap in the record immediately, not as a dispute raised six weeks later when nobody can remember what happened. Applied to vetting, that means an expired BS 7858 file or a lapsed SIA licence shows up as a flag on the compliance runway before an officer is rostered onto a site, not as a discovery during a client audit.

Your security guard vetting process UK checklist

• Confirm every officer's SIA licence is current and matches the licensable role they're deployed in
• Commission BS 7858 screening covering a full five-year employment history, not a partial check
• Identify which sites or roles genuinely require an enhanced DBS check — don't over- or under-screen by default
• Store screening completion dates and expiry dates against each named officer, not in a general policy document
• Check whether your client's contract or tender specifies SIA Approved Contractor Scheme membership as a requirement
• Track right-to-work documents alongside vetting records, not in a separate system
• Assess Martyn's Law readiness if any site is a publicly accessible venue under the Terrorism (Protection of Premises) Act 2026
• Build a single compliance view that flags expiries before they lapse, not after a client notices

FAQ

What is the BS 7858 vetting process for security guards in the UK?

BS 7858 is a British Standard covering identity verification, a minimum five-year employment history check, references, and financial and criminal record checks where relevant. Most screenings complete within 7–14 working days, according to UK Employee Checks (2026), though gaps in history or unresponsive referees can extend this.

Is BS 7858 screening a legal requirement for security guards?

No, BS 7858 is not a statutory legal requirement — the SIA licence is the legal minimum. BS 7858 is a contractual requirement that most serious clients, insurers, and tender specifications demand, making it effectively mandatory for any contractor bidding on quality-assessed work.

What checks are included in security guard vetting in the UK?

Security guard vetting typically layers three checks: an SIA licence confirming legal eligibility to work, BS 7858 screening covering five years of employment history and references, and, for roles involving vulnerable people, an enhanced DBS check. Some contracts also require SIA Approved Contractor Scheme membership at company level.

How long does BS 7858 screening take to complete?

Most BS 7858 screenings are completed within 7–14 working days, per UK Employee Checks (2026). Overseas employment history, unresponsive former employers, or unexplained gaps typically push this timeline out further.

What is the difference between an SIA licence and BS 7858 screening?

An SIA licence is the statutory authorisation to work in a licensable security role, issued under the Private Security Industry Act 2001. BS 7858 screening is a separate, voluntary-but-contractual standard verifying five years of employment history, identity, and character — it goes considerably deeper than the licence itself.

Do security guards need a DBS check in the UK?

Not universally. An enhanced DBS check is generally required only where a role involves regular contact with vulnerable people or children — such as hospital, school, or some residential settings — not for standard retail or construction site guarding.

What is the SIA Approved Contractor Scheme (ACS)?

The SIA Approved Contractor Scheme is a voluntary accreditation assessing a security company's standards across vetting, training and management. Only 772 of an estimated 4,000 UK security companies held ACS accreditation as of July 2026, according to KeyPlus Security (2026), making it a genuine differentiator rather than an industry norm.

Can a security company outsource BS 7858 screening?

Yes. Many security companies outsource BS 7858 screening to specialist providers who handle document verification, reference chasing and gap investigation, while the employer retains the final record and tracks its expiry. What matters is not who runs the screening but whether the resulting record is retrievable and audit-ready per officer.

Vetting records that stand up to a client audit, with Pulse Operations

Every issue this article covers — an SIA licence nobody checked was still valid, a BS 7858 file that exists as a policy statement rather than a completed record, a DBS check that lapsed unnoticed — comes down to the same root cause: vetting data scattered across email, spreadsheets and filing cabinets instead of tracked against expiry in one place. Pulse's compliance runway puts SIA licensing, BS 7858 screening, DBS status, right to work, training records and Martyn's Law readiness on one expiries view, so a lapsing record shows as a flag weeks before a client asks the question.

This is the same evidentiary standard Pulse applies to patrols themselves — a mandatory watermarked photo at every checkpoint, with officer, site, GPS and time stamped on, rather than a tag scan that only proves a phone was nearby. Pulse's own operational data shows 96.2% of checkpoints across live operations carry a watermarked photo (trailing 90 days, as of July 2026 — see pulse-operations.co.uk/benchmark for the current figure and methodology). If your vetting records currently live in a drawer rather than a system, get in touch with Pulse Operations for a walkthrough of the compliance runway, or book a look at pulse-operations.co.uk/tour to see how it fits alongside patrols, rostering and client reporting on one platform.

Related Reading

• Security Guard Handover Template UK | Free Guide 2026
• Security Guard Equipment List UK (2026 Guide)
• Security Guard Timesheet Template UK (2026 Guide)

★ Add pulse-operations.co.uk as a preferred source on Google