Organisations should choose the channel that balances assurance, accessibility, and user completion rates. Online checks can reduce friction and support scale, while in person checks may still suit edge cases or candidates who need extra help. The best approach is usually a flexible screening model that offers both options, backed by clear governance, auditability, and consistent identity standards.
How to choose the right channel for the risk profile
For right to work and DBS screening, the channel decision should start with the assurance you need, then test whether the candidate population can complete it reliably. online identity checks usually work best when the organisation wants speed, scale, and a consistent audit trail, while in-person checks remain useful where the case is unusual, the documents are harder to verify, or the candidate needs additional support to complete the process.
The real decision point is not whether one channel is always stronger. It is whether the organisation can prove that the chosen route produces a trustworthy identity decision, without creating unnecessary drop-off or excluding legitimate candidates. That is why many teams adopt a flexible model rather than forcing every applicant through the same path.
Online screening is often more efficient for repeatable journeys, but it depends on strong controls around document validation, identity proofing, and exception handling. In-person screening can add human judgement where documents, names, or circumstances do not fit a standard workflow, but it can also slow onboarding and create location-dependent friction.
Governance, consistency, and auditability
Whatever mix you choose, the governance challenge is to keep the decision criteria consistent across channels. If one route is accepted for a particular risk profile, the other route should not be allowed to reach a weaker standard just because it is more convenient. The organisation should be able to show why a channel was selected, what checks were completed, and what evidence was retained.
That becomes especially important where the screening outcome is used to satisfy employment eligibility or safeguarding obligations. A robust process should define when to route a case online, when to switch to in person, how exceptions are approved, and which supporting artefacts are retained for audit or dispute resolution. In practice, the control objective is consistency of assurance, not uniformity of method.
One useful way to think about this is to treat the screening channel as a governed control choice, not a user-experience preference. The organisation should be able to compare completion rates, manual intervention rates, exception volume, and rework volume, then refine the policy when one route is clearly underperforming for a given population.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
NIST CSF 2.0, NIST SP 800-63 and CIS Controls v8 set the governance and control requirements practitioners need to meet.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST CSF 2.0 | GV.OV-01 — Organisational Context and Risk Oversight | Screening channel choice is a governance decision balancing assurance, access, and auditability. |
| Recommendation — Define channel-selection criteria and review completion, exception, and assurance outcomes under governance oversight. | ||
| NIST SP 800-63 | IAL-2 — Identity Assurance Level 2 | Right to work and DBS checks depend on verified identity evidence and assurance strength. |
| IAL-3 — Identity Assurance Level 3 | Higher-risk or harder-to-verify cases need stronger identity proofing and tighter evidence handling. | |
| Recommendation — Match the screening channel to the required identity assurance level and evidence quality. Escalate cases needing stronger identity proofing to the more stringent verification path. | ||
| CIS Controls v8 | 6.1 — Access Control Management | The process governs who may be accepted or rejected based on verified identity evidence. |
| Recommendation — Apply a documented access-control decision process for screening approval and exception handling. | ||
Practitioner Guidance
What to verify: Confirm that both channels feed the same policy decision, the same evidence standard, and the same recordkeeping requirements. If the online route has more automation but weaker escalation controls, or the in-person route relies on undocumented judgement, the programme is not really equivalent.
Decision rule: Use online checks for standard cases where the applicant can complete the process reliably and the evidence can be validated consistently. Route to in person when the case falls outside the standard flow, when extra support is needed, or when the risk of an incorrect decision is higher than the operational cost of manual handling.
What good looks like: The organisation can explain why each case was screened in the selected channel, demonstrate that the same assurance threshold applied, and show that exceptions were handled deliberately rather than by convenience. The best programmes preserve accessibility without diluting the quality of the identity decision.
Practitioner takeaway: Choose the channel that best preserves assurance at scale, then manage the exceptions explicitly. The strongest model is usually the one that lets candidates complete screening in the least burdensome way while still giving you defensible, auditable identity checks.
Related resources from NHI Mgmt Group
- How should organisations decide when identity document checks are necessary for age-restricted online sales?
- How should employers and verification teams design digital right to work and DBS checks so more people can complete them online without weakening assurance?
- Why do online identity verification workflows create more governance pressure than in-person checks?
- How should organisations reduce oversharing in online identity checks?
