In financial services, trust isn’t confirmed once at the point of hire and then filed away. It must be maintained for as long as a person works for your organisation.

Roles change, access privileges grow and regulatory expectations tighten. Over time, even a well-designed screening program can develop gaps. A structured screening review and refresher-check program helps financial institutions find those gaps, reassess workforce risk and show regulators that their controls are still working.

Why One-Off Screening Is No Longer Enough

A pre-employment background check is a snapshot of a candidate at a single point in time. It can’t capture:

• Changes in an employee’s circumstances after they were hired
• New regulatory obligations introduced since the original check
• Inconsistent standards left behind by mergers, acquisitions or legacy hiring practices
• Internal moves into more sensitive roles without a fresh assessment

For organisations managing customer funds, confidential data and financial crime obligations, these gaps create real operational, regulatory and reputational exposure.

Australian regulators expect ongoing suitability, not just suitability at hire. AUSTRAC’s personnel due diligence guidance requires relevant personnel to be assessed before and during their employment, tailored to the role’s money laundering and terrorism financing risks. APRA’s fit and proper framework requires responsible persons to be assessed before appointment and generally reassessed annually.

What’s the Difference Between Screening Reviews and Refresher Background Checks in Financial Services

A screening review is a targeted exercise to bring existing staff up to a consistent, current standard. It’s typically needed when original checks were incomplete, records can’t be located, business units applied different standards, or an acquired workforce was screened under another framework.

A refresher check is a periodic or event-driven reassessment confirming that an employee’s risk profile still matches their current responsibilities.

Put simply, a screening review addresses what may have been missed, while refresher checks test what may have changed. Together, they create a complete and defensible personnel risk framework.

Build Your Program Around Risk, Not Job Titles

Screening everyone the same way is costly, intrusive and hard to justify. A stronger approach segments staff by decision-making authority, access to funds or sensitive systems, AML/CTF responsibilities, data privileges and the potential impact of misconduct.

• Higher-risk roles: senior executives, responsible or accountable persons, AML/CTF personnel, traders, payment authorisation staff and privileged technology administrators. These roles typically warrant comprehensive screening, which may include National Police Checks, credit checks and qualification verification.
• Moderate-risk roles: employees with material access to customer data, financial authority or control responsibilities.
• Lower-risk roles: positions with limited access to funds, systems or sensitive information, subject to baseline identity and eligibility checks

A Practical Screening Review Roadmap

1. Define governance and scope. Assign accountable owners across compliance, risk, legal, privacy, HR and security, and document the purpose, population and escalation process.
2. Map roles to screening requirements. Build a role-based matrix linking each check to a specific risk or regulatory obligation.
3. Assess your existing population. Identify checks that are missing, outdated or unverifiable.
4. Prioritise the backlog. Start with the highest-risk roles and most material gaps, with clear target dates.
5. Engage employees transparently. Explain why checks are happening, what’s collected, how it’s used and how long it’s kept. Obtain consent where required.
6. Review results consistently. Use predefined, job-relevant criteria and give individuals a fair chance to clarify any inaccurate information.
7. Move to business as usual. Set periodic cycles and event-based triggers so gaps don’t build up again.

Common Triggers for Running Refresher Background Checks

Refresher screening shouldn’t rely on the calendar alone. Useful triggers include:

• Promotion into a higher-risk role or a material increase in financial or system authority
• Transfer into an AML/CTF function
• Return from an extended absence
• A merger or acquisition
• Expiry of a required licence
• Credible information suggesting suitability should be reassessed

Document your triggers, apply them consistently and review them against workplace and privacy requirements.

Balancing Risk Management With Privacy and Fairness

Effective screening protects your organisation without treating your people unfairly. Collect only what’s necessary and proportionate, use reliable sources, protect results with strict access controls and retain records only for an appropriate period. Adverse information should never lead to an automatic outcome without considering accuracy, relevance, recency, the requirements of the role and any mitigating context.

How to Measure the Success of Your Financial Services Screening Program

Boards need more than a completion percentage. Useful measures include the proportion of in-scope staff with current evidence, overdue high-risk cases, turnaround times and substantiated discrepancies. Reporting should show whether controls are reducing risk, not just whether checks have been ordered.

From Screening Review to Ongoing Employee Screening in Financial Services

A screening review shouldn’t end the moment the backlog reaches zero. Its real value lies in what it reveals about role design, data quality, ownership and monitoring. Institutions that turn those lessons into a risk-based refresher model strengthen regulatory readiness, reduce insider risk and reinforce the trust placed in their people.

Precise Background Services helps Australian organisations deliver screening that is accurate, compliant and scalable. Whether you’re reviewing existing staff after an acquisition or setting up annual fit and proper reassessments, explore our background checks for financial services or contact our team to discuss a program tailored to your institution.

Frequently Asked Questions

How often should financial services staff be rescreened?

It depends on the role’s risk level. APRA’s fit and proper framework generally expects responsible persons to be reassessed annually, while other roles can follow a risk-based cycle supported by event triggers such as promotions or increased system access.

Do employees need to consent to refresher background checks?

Often, yes. Checks such as police and credit checks require the individual’s consent. Even where consent isn’t strictly required, clear communication about why checks are being done and how information is handled is best practice.

Can adverse findings automatically disqualify an existing employee?

They shouldn’t. Any adverse information should be assessed for accuracy, relevance, recency and its connection to the role, and the employee should have a fair opportunity to respond.

Disclaimer: This article provides general information only and is not legal or regulatory advice. Financial institutions should obtain advice on the requirements that apply to their organisation, workforce and jurisdictions.