Source: Deutsche Nachrichten
Most companies screen candidates before hiring, but far fewer repeat that assessment once the person has joined the organisation. Yet an employee’s personal, financial or legal circumstances can change significantly over time, particularly in roles with access to critical systems, financial information or customer data.
Validato sees this temporal blind spot as one of the less visible sources of insider risk. “A background check at the time of hiring is a snapshot, not a movie. A person with privileged access who presents no particular concern today may, two or three years later, face circumstances that make them more vulnerable to coercion or temptation,” says André Naef, CEO of Validato.
Validato recommends that organisations with sensitive roles assess whether periodic or event-driven re-screening can be justified by the risk of the position. In Spain, this must not become indiscriminate monitoring: it requires a defined purpose, a valid legal basis, necessity, proportionality, transparency and data minimisation. Consent alone is not a general solution in the employment relationship. Criminal-record data may only be processed where a specific legal basis permits it.