Personnel security is a system of policies and procedures which seek to manage the risk of staff (permanent, temporary or contract staff) exploiting, or intending to exploit, their legitimate access to an organisation's assets or premises for unauthorized purposes.
Although many organisations regard personnel security as an issue resolved during the recruitment process, it is a discipline that needs to be maintained throughout a member of staff’s time in employment. This includes robust pre-employment screening, effective line management, employee welfare, clear lines of communication, and a strong security culture. It should also include a formal process for managing staff leaving the business.
Personnel security risk assessment focuses on individuals (be they permanent employees, contractors, agency staff, etc.), their access to an organisation's assets, the risks they could pose to the organisation and the sufficiency of countermeasures.
It should be the basis of any personnel security management process. It is also crucial in helping security and human resources managers communicate to senior managers the risks to which the organisation is exposed.