Prison officer vetting 2026: what is checked and how it works

In shortVetting is the security check HMPPS runs on everyone who works in or for its prisons; it tests security, integrity and reputational risk, not whether you are a good person.

The governing document is the Security Vetting Policy Framework, reference PSI 07/2014, AI 05/2014 and PI 03/2014, revised on 20 February 2025 with updated links, and in its current form carrying changes from 26 June 2021.

It applies to directly employed staff and to contractors, agency workers, volunteers and others working for service providers, in public and private prisons, headquarters and the community.

It also says checks provide no guarantee of reliability, which is why vetting is repeated and why staff must report changes after they are cleared.

The stated purposes

To confirm that an applicant is who they say they are and has a lawful entitlement to work in the UK, to avoid security breaches, to make sure staff do not pose a threat to security or discredit the Service, and to protect the integrity of the organisation and the safety of staff, supervised individuals and visitors.

The question vetting answers

Is there a security, integrity or reputational risk in giving this person keys, access to prisoners and access to sensitive information? Things that feel personal, such as an old conviction or a family connection, matter only in so far as they bear on that question.

In shortRoutine checks run through the prison's Vetting Contact Point and Shared Services; judgement calls go to the Approvals and Compliance team.

Your contact is the recruitment team and the VCP, not the people making the decision, so write things down clearly and completely in your questionnaire.

Because experienced Governors weigh up cases, context matters: a clear, honest explanation of an old offence is treated very differently from a gap or inconsistency that looks like concealment.

Vetting Contact Point (VCP)

At each prison or business unit. Receives your completed vetting questionnaire, checks it for completeness, verifies your identity, address, nationality and right to work face to face, and chases missing documents.

Shared Services Connected Limited (SSCL)

Receives the paperwork, carries out the checks and confirms whether a candidate has passed or been declined. For national security vetting, the electronic system is run through United Kingdom Security Vetting, which SSCL co-ordinates for HMPPS and the Ministry of Justice.

Approvals and Compliance team

Where judgement is needed, the case goes here. The policy describes a group of experienced Governors and non-operational prison and probation staff who assess the evidence and risks, make balanced judgements on whether it is credible and whether the person is suitable, ensure consistency of treatment, act as custodians of the Exclusion List and deal with representations against vetting being refused.

In shortPrison officers need Enhanced Level 2 at minimum; high security prisons add the Counter-Terrorist Check.

The policy sets out a ladder of checks. The Baseline Personnel Security Standard (identity, right to work, employment references and a check of unspent convictions) applies only to some Probation administration roles.

Above it sits the HMPPS Enhanced Check, split into Level 1 for non-directly employed workers and Level 2 for all directly employed staff and those workers who also hold national security vetting. Above that are three levels of national security vetting: the Counter-Terrorist Check, the Security Check and Developed Vetting.

• The policy's mandatory table lists 'Non High Security Prison Officers' against Enhanced Level 2.
• It lists 'Employees in High Security Prisons (including Prison Officers)' against Enhanced Level 2 plus the Counter-Terrorist Check.
• The careers site says the same: for Category A prisons you need Enhanced Level 2 vetting plus a Counter-Terrorism check, and you must have been resident in the UK for the three years immediately before applying.
• Staff who work with under 18s, such as in the young people's estate, have Enhanced Level 2 plus a Disclosure and Barring Service check, and healthcare staff are also subject to DBS checks.
• Developed Vetting is described as rare in HMPPS, so you will almost certainly never meet it as an officer.

In shortParagraph 4.8 gives the clearest published list of what is looked at, covering both spent and unspent records.

Paragraph 4.8 of the policy lists the contents of Enhanced Level 2, and it is worth reading item by item. It is a longer list than the Cabinet Office baseline standard, and the policy says it checks both spent and unspent criminal records in line with criminal record filtering rules.

• An identity check and proof of address, plus verification of current address and address history (paragraph 2.6).
• Confirmation of nationality and entitlement to work in the UK.
• A criminal records check including spent and unspent convictions, subject to DBS filtering.
• Employment references and a personal reference from a counter-signatory.
• A check against the HMPPS Exclusion List, described as the corporate memory of those excluded from HMPPS for a specified period.
• Checks against the Individual Insolvency Register and of any previous HMPPS engagement (paragraph 2.6).
• An online healthcare assessment where appropriate, and a professional registration check where required.
• A signed declaration of not belonging to racist groups or organisations.

In shortThe CTC is required for all staff in the High Security Estate and always sits on top of an Enhanced Check.

Its stated purpose is to prevent people who may have connections with terrorist organisations, or who may be vulnerable to pressure from them, from gaining access to posts or premises where they could exploit that position. It never stands alone.

If there are unresolved security concerns, or if the Security Service recommends it, the individual may be interviewed. A credit and financial history check is listed for the Security Check and higher levels, not for the CTC.

In shortDeclare every offence, caution, reprimand and fixed penalty unless DBS filtering protects it; failing to declare is likely to mean refusal with no leave to reapply for 12 months.

• Non-disclosure12 monthsLikely refusal, no leave to reapply (PSI 2.11)
• Adult convictions11 yearsGenerally disclosed (DBS filtering guide, updated 11 September 2026)
• Adult cautions6 yearsShorter periods for offences committed under 18

Paragraph 2.11 is the most important single paragraph for applicants. All individuals subject to vetting must declare all criminal offences, cautions, reprimands and fixed penalties, in line with the exceptions under the Rehabilitation of Offenders Act 1974 (Exceptions) Order 1975 and criminal record filtering arrangements.

In plain terms, a roles exemption means that convictions that are 'spent' for most jobs still have to be declared for this one, unless the DBS filtering rules protect them. The careers site words it simply: failing to disclose will halt your application.

A conviction does not automatically disqualify you, and the careers site says decisions are made individually, but concealment is the thing that turns a manageable situation into a refusal. Our guide to applying with a criminal record works through disclosure in detail.

• Any conviction resulting in a custodial sentence and all 'specified' serious offences are always disclosed.
• Do not apply the filtering rules by yourself in a borderline case. Use a specialist service such as Unlock, and ask the vetting team.

In shortThe policy publishes no debt threshold, no rule on relatives in prison and nothing on social media; the outcome is a judgement on the evidence.

The careers pages we read also do not mention debt, associates, family backgrounds or social media screening.

We have written a separate guide on each: debt and finances, family in prison and social media. They set out the published rules, the unpublished gaps and sensible steps.

In shortMost applications pass without judgement; where it is needed, the Approvals and Compliance team decides and hears representations, but the applicant appeal route is not detailed.

Where the checks throw up something that needs judgement, the policy sends it to the Approvals and Compliance team, which decides suitability and, in the policy's words, deals with representations against vetting being refused. The policy's summary says its decisions link into the exclusions policy and the right of appeal against the initial decision.

The detailed route for an applicant refused at Enhanced Level 2 is not set out on the pages we read, so ask for it in writing if you are refused. Our guide to failed vetting goes through what to do after a refusal.

In shortVetting does not end at appointment: you must report changes, and Enhanced Level 2 expires after 10 years.

Section 9 of the policy says individuals must report changes to their personal circumstances, including partners and criminal associates, which may require them to be reassigned to other job roles, and that managers must be alert to changes in behaviour.

Reporting a change is not a confession. The policy says not all changes increase risk, and that reporting lets HMPPS assess it and, where needed, take steps to minimise it. Staff who stay quiet about something that later emerges are in a much worse position than those who report it.

In shortA separate framework, effective 1 April 2026, offers role-specific risk management plans if your record means you cannot pass Level 1 or 2, but it is not a list of what fails standard vetting.

The Risk Assessed Access for Personnel with Lived Experience of the Criminal Justice System Policy Framework was issued on 5 March 2026 and took effect on 1 April 2026. It replaced the earlier Standard Plus arrangements.

For directly employed posts, role-specific risk management plans are only available through the Going Forward into Employment scheme, run with the Cabinet Office, and for non-directly employed posts through the Lived Experience Appointment Pathway.

The framework also notes that scheme eligibility does not guarantee an appointment, and that it will not always be possible in the High Security Estate or the youth estate.

• Applications will not be accepted from a person convicted of any of these: life sentences, arson, terrorism-related offences, sexual offences, hate crimes, misconduct in public office or abuse of a position of authority.
• Also excluded: significant breach of trust or deception, stalking, firearms offences, offences against children, false imprisonment, kidnapping, supplying controlled drugs within a prison and serious violent offences causing life-changing injuries.
• Excluded factors: organised crime offences and a history of domestic violence.

In shortSeveral popular beliefs are not supported by the published policy.

The honest answer to the debt, social media and relatives claims is that the outcome is a judgement made on the facts, and that you should declare and ask.

In shortPreparation is mostly gathering documents and being honest, and the vetting checker walks through the same points privately.

Work through the steps before you submit a vetting questionnaire, and keep copies of what you submit, because the same information will be checked against your online application and may be discussed at the assessment centre.

If you spot something that worries you, ask the recruitment team in writing, using the contact details published on the careers site, before you proceed. The vetting checker does not decide your case or predict an outcome, and only HMPPS can do that.

1. Collect identity documents and proof of your current address, and write down your address history, including dates.
2. Write down your employment history, including gaps, self-employment and any dismissals or resignations, and the names of people who can give references.
3. List every conviction, caution, reprimand, warning and fixed penalty you can remember, with dates, and find out whether DBS filtering applies. Get specialist advice if unsure.
4. Check your credit file and any insolvency, such as bankruptcy, an IVA or a debt relief order, so you know what a check against the Individual Insolvency Register might show.
5. If you are applying for a high security prison, confirm you have been resident in the UK for the last three years and gather evidence of any time abroad.
6. Think through relationships and associations the questionnaire might ask about, including relatives in prison or associates with convictions, and decide how you will describe them truthfully.
7. Complete every questionnaire in full and on time, and for a Counter-Terrorist Check do not miss the 15 working day deadline.

In shortVetting is one stage in a process that averages six to seven months; these guides cover the rest.

Our recruitment process guide and the guide to how long vetting takes set out where vetting sits and what to expect.

• The legacy overview of how to become a prison officer, the requirements guide and the joining hub cover the rest of the process.
• If a record is your main worry, start with applying with a criminal record and vetting and your criminal record.
• For the medical that runs alongside the paperwork, see the medical checks guide.
• Once you are in post, the conduct rules that interact with vetting are explained in our conduct and discipline hub.