VSI GLOBAL // ENTERPRISE ARCHITECTURE

OSINT-007-pre-employment-screening-collection

13 min read

[CANDIDATE] - Collection Map

OSINT-007 Pre-Employment Screening - collection workspace. Central topic = the candidate under evaluation. Branches = data-point categories for pre-hire vetting. Drop each collected value as a child node; expand it with where it was found and how it was verified. Paste raw tool output or confirmation records into the node’s Notes. → feeds deliverable OSINT-007.

00 · Collection Plan - PIRs & EEIs

The screening requirements (SRs) this collection must answer, translated to essential elements of information (EEIs). Tick as satisfied. → drives §4 Screening Requirements, §15 Verified Findings Summary, §16 Red Flag & Notable Indicators Summary, §17 Collection Gaps & Outstanding Requirements.

SR-1 - Identity & Right to Work: Is the candidate who they claim, and legally eligible to work?

  • EEI: full legal name + all prior/maiden names confirmed against government-issued identity document
  • EEI: date of birth verified (authoritative source; not candidate-supplied only)
  • EEI: national ID / SSN trace completed and last-4 / status recorded (redacted)
  • EEI: address history (lookback per scope) tied to the resolved identity
  • EEI: right-to-work / work-authorization status established (I-9 basis, visa type, or equivalent)
  • EEI: same-name candidates identified and excluded with distinguishing identifiers documented
  • EEI: identity verification confidence level assigned (Confirmed / Probable / Possible / Unresolved)

SR-2 - Stated History: Do employment and education representations match the record?

  • EEI: each claimed employer verified (dates, title, eligibility-for-rehire) via direct HR contact or payroll-verification service
  • EEI: unexplained employment gaps (>30 days) flagged and documented
  • EEI: highest credential verified with issuing institution or clearinghouse (NSC/DegreeVerify)
  • EEI: all claimed professional licenses confirmed active/in-good-standing with issuing authority
  • EEI: diploma-mill / accreditation check completed on each institution
  • EEI: résumé/application vs. verified record - discrepancies typed (match / minor variance / material omission / falsification) and materiality assessed

SR-3 - Disqualifying Record: Is there a criminal, regulatory, sanctions, or adverse record with nexus to this role?

  • EEI: criminal records searched in all jurisdictions of residence / employment within lookback window
  • EEI: each record classified (felony / misdemeanor), dispositioned (convicted / dismissed / pending), and reportability assessed (FCRA § 1681c + state caps)
  • EEI: OFAC SDN / Consolidated, EU / UK / UN sanctions screened - result dated
  • EEI: debarment / exclusion lists screened (SAM.gov or equivalent)
  • EEI: sector-specific checks completed per role trigger (MVR / OIG-LEIE / FINRA / sex-offender / child-care clearance)
  • EEI: adverse media screened - protected-class-blind; job-relevant conduct only

SR-4 - Integrity & Disclosure: Did the candidate disclose accurately and cooperate fully?

  • EEI: consent / written authorization confirmed on file before any collection (FCRA § 1681b(b)(2))
  • EEI: standalone disclosure provided; investigative consumer report notice provided where interviews used
  • EEI: pattern-level discrepancy assessment complete (isolated error vs. systematic misrepresentation)
  • EEI: candidate cooperation with verification noted (timely provision of release forms, contact details)
  • EEI: concealment indicators assessed (omitted employers, identity changes not disclosed, gaps not explained)

SR-5 - Financial Fitness (role-justified only)

  • EEI: role-nexus justification for financial/credit review documented
  • EEI: public financial-stress indicators (bankruptcy, liens, judgments) collected within lawful scope

Collection gaps / RFIs (running)

01 · Identity & Biographic

Establish that every downstream record belongs to THIS candidate. Wrong-person screening is the catastrophic failure mode. Verify each identifier against authoritative/government sources - not just candidate-supplied. → feeds §5 Candidate Identification & Identity Verification, §2 Executive Summary (Identity & Consent Statement).

Names

  • Full legal name:
  • Middle name / initial:
  • Maiden / prior legal names:
  • AKA / aliases / nicknames:
  • Transliterations / native-script variants:
  • Name-change history (legal order ref):

Birth & nationality

  • DOB (authoritative):
  • YOB (if DOB unavailable):
  • Place of birth:
  • Nationality / citizenship(s):
  • National ID / SSN (last-4 / status - redacted):
  • Passport number (ref only - do not retain full):
  • Other government-issued ID type / issuing authority:

Physical description

  • Description:
  • Languages spoken:

Position & engagement

  • Position applied for (title / department):
  • Requisition / engagement reference:
  • Screening package / tier:
  • Client / hiring authority:

02 · Contact & Selectors

The pivot core. Each value is its own clonable block - expand it with where it appears, what it links to, and how it was verified. Clone the sub-block per value. → feeds §5 Candidate Identification & Identity Verification, §13 Adverse Media & Online / Social-Media Screening.

Phone numbers

→ feeds §5 Candidate Identification & Identity Verification, §13 Adverse Media & Online / Social-Media Screening.

  • [number - e.g. +1 555-0142]
    • Type / carrier: [mobile / landline / VoIP]
    • Linked accounts / apps:
    • Where found (source + URL):
    • Candidate-provided or independently sourced:
    • Attribution confidence: [Confirmed / Probable / Possible]
    • Notes / tool output: ← (truecaller, callerID lookup, carrier trace)
  • [number 2]

Email addresses

→ feeds §5 Candidate Identification & Identity Verification, §13 Adverse Media & Online / Social-Media Screening.

  • [email]
    • Linked accounts (account discovery):
    • Breach / paste appearances:
    • Where found (source + URL):
    • Candidate-provided or independently sourced:
    • Attribution confidence: [Confirmed / Probable / Possible]
    • Notes / tool output: ← (holehe, h8mail, hunter.io)
  • [email 2]

Usernames / handles

→ feeds §13 Adverse Media & Online / Social-Media Screening. Clone per handle.

  • [handle - e.g. jdoe_analyst]
    • Platforms / where found (URL):
    • Linked email(s):
    • Linked phone(s):
    • Other accounts reusing it:
    • Job-relevant conduct noted:
    • Protected-class content - do not record: [BLIND]
    • Attribution confidence: [Confirmed / Probable / Possible]
    • Notes / tool output: ← (idcrawl, sherlock, whatsmyname)
  • [handle 2]

03 · Addresses & Locations

Address history anchors the criminal-record jurisdiction list and disambiguates same-name candidates. Collect all jurisdictions of residence and significant employment within the lookback window. → feeds §5 Candidate Identification & Identity Verification, §9 Criminal & Court Records Check.

Current address

  • [address]
    • Dates associated:
    • Jurisdiction (county / state / country):
    • Basis / source:
    • Confidence: [H/M/L]

Previous addresses (lookback per scope)

  • [address]
    • Dates:
    • Jurisdiction:
    • Source:
    • Confidence: [H/M/L]

Other associated / employment locations

  • [location - work address / state of employment]
    • Type: [work / school / other]
    • Jurisdiction:
    • Basis:

Jurisdictions to search (criminal)

  • [jurisdiction 1 - county / state / country]
    • Basis for inclusion: [residence / employment / education]
    • Lookback window applicable:
    • Search status: [Pending / Complete / Restricted]

04 · Digital Footprint

Collect for adverse-media and online screening only. Protocol must be protected-class-blind: collect job-relevant conduct; do not record or consider protected characteristics. Social-media review requires separate authorization where applicable. → feeds §13 Adverse Media & Online / Social-Media Screening, §14 Résumé / Application Discrepancy Analysis.

Social media accounts

Clone per platform. Record job-relevant conduct only; blind to protected characteristics.

  • [platform - LinkedIn / Facebook / X / Instagram / TikTok / other]
    • Handle / URL:
    • Attribution confidence: [Confirmed / Probable / Possible]
    • Status: [Active / Dormant]
    • Job-relevant conduct notes (blind to protected class):
    • Social-media review authorized: [Y/N]

Professional / public profiles

  • [platform - LinkedIn / GitHub / ResearchGate / other]
    • Handle / URL:
    • Claimed credentials / history cross-referenced:
    • Discrepancy with application:

Forums / communities / specialist sites

  • [site + handle]:

Breach / paste / data-broker exposure

Tool hints: HaveIBeenPwned, dehashed, intelx.io, SpyCloud (commercial)

  • [indicator]
    • Source:
    • Date observed:
    • Data types exposed:
    • Significance to screening:

05 · Network & Associations

Limited scope for standard pre-employment - flag associations material to the role (conflicts of interest, undisclosed employer relationships). Do not pursue beyond what is role-nexus justified. → feeds §14 Résumé / Application Discrepancy Analysis, §16 Red Flag & Notable Indicators Summary.

Professional references (provided by candidate)

  • [name]
    • Relationship / capacity:
    • Contact confirmed:
    • Verification outcome:
    • Confidence: [H/M/L]

Business / professional associates (independently identified)

  • [name]
    • Relationship:
    • Basis / source:
    • Role nexus / relevance:

Conflict-of-interest flags

  • [indicator - e.g. undisclosed current employer relationship, competitor tie]
    • Basis:
    • Materiality to role:

06 · Employment History Verification

Core verification branch. Verify every claimed employer against authoritative sources (direct HR / payroll-verification service / documentary evidence). Distinguish verified from claimed throughout. Note employers that confirm dates/title only - eligibility-for-rehire responses vary by policy. → feeds §7 Employment History Verification, §14 Résumé / Application Discrepancy Analysis, §15 Verified Findings Summary.

Employment records

Clone per employer.

  • [employer - e.g. Acme Corp]
    • Position claimed (title):
    • Dates claimed (start – end):
    • Verification method: [Direct HR contact / The Work Number / Payroll service / Document]
    • Verified title:
    • Verified dates:
    • Eligibility for rehire (if provided):
    • Reason for leaving (claimed vs. verified):
    • Discrepancy type: [Match / Minor variance / Material omission / Falsification]
    • Discrepancy materiality: [Material / Minor / N/A]
    • Source grade (A–F / 1–6):
    • Notes / contact record:
  • [employer 2]

Employment gaps

  • [gap period - e.g. 2021-03 to 2021-11]
    • Candidate explanation:
    • Verified / unverified:
    • Flag raised: [Y/N]

Unverifiable employers

  • [employer name]
    • Reason unverifiable: [Defunct / Foreign / Unresponsive / No record found]
    • Impact on SR-2:

07 · Education, Credential & License Verification

Verify against issuing institution or authoritative clearinghouse - not the candidate’s self-report or copies of documents. Screen for diploma mills and unaccredited institutions. → feeds §8 Education, Credential & Professional-License Verification, §14 Résumé / Application Discrepancy Analysis.

Education records

Clone per institution.

  • [institution - e.g. State University]
    • Credential claimed (degree / major / dates):
    • Verification source: [NSC DegreeVerify / direct registrar / clearinghouse]
    • Degree conferred: [Y/N]
    • Verified dates:
    • Discrepancy type: [Match / Minor variance / Material omission / Falsification]
    • Accreditation status: [Regional / National / Unaccredited / Diploma mill indicator]
    • Source grade (A–F / 1–6):
    • Notes:
  • [institution 2]

Professional licenses & certifications

Clone per license. Check for disciplinary history with issuing board.

  • [license / certification - e.g. CPA / PE / FINRA / Medical]
    • Issuing authority:
    • License number:
    • Status: [Active / Lapsed / Revoked / Not found]
    • Expiry date:
    • Disciplinary history:
    • Verification source / URL:
    • Source grade (A–F / 1–6):
    • Notes / tool output: ← (state licensing board lookup, FINRA BrokerCheck, OIG-LEIE, etc.)
  • [license 2]

08 · Legal & Derogatory

Distinguish arrest vs. charge vs. conviction vs. dismissal. Assess reportability per FCRA § 1681c and applicable state caps before recording. Adjudication of relevance is in §18 - this branch is the raw record. → feeds §9 Criminal & Court Records Check, §10 Financial & Civil Records, §11 Sanctions Watchlist PEP & Global Screening, §12 Regulatory & Sector-Specific Screening, §16 Red Flag & Notable Indicators Summary.

Criminal records

Clone per matter. Confirm reportability before including in deliverable.

  • [matter - e.g. State v. Doe, 2019-CR-00142]
    • Jurisdiction / county / state:
    • Offense type: [Felony / Misdemeanor / Other]
    • Charge(s):
    • Disposition: [Convicted / Dismissed / Pending / Acquitted / Expunged]
    • Date of offense / disposition:
    • Reportable under FCRA § 1681c / state law: [Y/N - basis]
    • Fair-chance sequencing observed: [Y/N]
    • Source grade (A–F / 1–6):
    • Notes:
  • [matter 2]

Civil litigation

  • [case]
    • Jurisdiction / case #:
    • Role (plaintiff / defendant):
    • Status / summary:
    • Relevance to position:
    • Source grade:

Sanctions, watchlist & PEP

→ feeds §11 Sanctions, Watchlist, PEP & Global Screening.

  • [list screened - e.g. OFAC SDN]
    • Date screened:
    • Result: [Clear / Hit / Near-match]
    • Near-match disposition (if any):
    • Notes:
  • OFAC SDN / Consolidated: [Clear / Hit / Near-match]
  • EU Consolidated Sanctions:
  • UK HMT Sanctions:
  • UN Sanctions:
  • Interpol public notices:
  • SAM.gov / debarment:
  • PEP database (role-dependent):

Sector-specific / regulatory checks

→ feeds §12 Regulatory & Sector-Specific Screening.

  • [check - e.g. MVR / OIG-LEIE / FINRA BrokerCheck / sex-offender registry / child-care clearance]
    • Trigger (role basis):
    • Date checked:
    • Result:
    • Source / URL:
    • Source grade (A–F / 1–6):

Adverse media

Protected-class-blind. Grade each source.

  • [outlet + headline + date]
    • Substance (job-relevant only):
    • Reliability (A–F):
    • Credibility (1–6):
    • Substantiated vs. alleged / opinion:

09 · Consent, Authorization & Compliance Gate

FCRA compliance is a pre-condition, not an afterthought. Collection does not begin until valid disclosure and authorization are confirmed. This branch is the auditable record. → feeds §6 Consent, Authorization & Permissible Purpose, Appendix A.

Authorization checklist

  • Standalone written disclosure provided (FCRA § 1681b(b)(2)): [Y/N]
    • Date:
    • Evidence ref (Appendix A):
  • Candidate written authorization obtained: [Y/N]
    • Date:
    • Evidence ref:
  • Investigative consumer report notice (if interviews used, § 1681d): [Y/N / N/A]
    • Date:
  • State/jurisdiction-specific notices (CA, NY, MN, OK, etc.): [Y/N / N/A - list]
    • States requiring notice:
  • Scope of authorization (components / lookback window consented to):

Pre-engagement gate

  • Collection authorized to begin: [Y / HOLD - specify gap]
    • Hold reason (if any):
    • Resolved:

10 · Financial & Lifestyle Indicators (role-justified)

Include ONLY where role legally justifies financial/credit review AND jurisdiction permits. State the nexus explicitly; if not justified mark “Not performed - no role nexus.” Several states restrict employment credit checks. → feeds §10 Financial & Civil Records (role-justified), §16 Red Flag & Notable Indicators Summary.

Role-nexus justification

  • Financial review inclusion basis: [Role nexus (describe) / “Not performed - no role nexus”]
  • Jurisdictional permission confirmed: [Y/N - jurisdiction]

Public financial records

  • [indicator - e.g. bankruptcy filing]
    • Case / reference:
    • Date:
    • Jurisdiction:
    • Reportable: [Y/N - basis]
    • Relevance to role:
    • Source grade (A–F / 1–6):
  • Bankruptcy (public):
  • Liens / judgments:
  • Employment credit summary (where lawful):

Observable lifestyle indicators (OSINT-visible only)

  • [indicator]:

11 · Résumé & Application Integrity

Cross-reference all claimed representations against verified findings. Pattern-level assessment (isolated error vs. systematic misrepresentation) is the integrity-screening core. → feeds §14 Résumé / Application Discrepancy Analysis, §4 SR-4 Integrity & Disclosure, §16 Red Flag & Notable Indicators Summary.

Discrepancy log

Clone per discrepancy item.

  • [aspect - e.g. Job title at Employer X]
    • Application / résumé claim:
    • Verified reality:
    • Discrepancy type: [Match / Minor variance / Material omission / Falsification]
    • Materiality: [Material / Minor]
    • Explanation sought from candidate: [Y/N / N/A]
    • Candidate response:
    • Assessment:

Pattern assessment

  • Discrepancy count (total):
  • Material discrepancies:
  • Pattern: [Isolated error / Consistent embellishment / Systematic misrepresentation]
  • Integrity flag raised: [Y/N]

12 · Adjudication Inputs

Collection-side inputs that feed the adjudication in §18. Do not adjudicate here - record the raw inputs. Apply individualized assessment (EEOC Green factors) in the deliverable, not in collection. → feeds §18 Adjudication & Suitability Assessment, §19 Key Assumptions Check.

Per-finding adjudication inputs

Clone per material adverse finding.

  • [finding ref - e.g. F-3 / Criminal matter / Discrepancy]
    • Nature and gravity of conduct:
    • Time elapsed since conduct / completion of sentence:
    • Nexus to specific role (direct / indirect / none):
    • Mitigating factors (candidate explanation, rehabilitation, age at time):
    • Preliminary disposition for adjudicator: [No bearing / Note / Potential disqualifier]

Key assumptions (feed §19)

  • [assumption - e.g. records belong to the resolved candidate]
    • Basis:
    • Confidence: [H/M/L]
    • Impact if wrong:

FCRA adverse-action readiness (feed §21)

  • Pre-adverse notice materials prepared: [Y/N / Pending]
  • Report copy ready to provide candidate: [Y/N]
  • CFPB Summary of Rights on file: [Y/N]
  • State-equivalent rights notices identified:

99 · Collection Admin

Working register - not a deliverable section, but the audit trail behind the report.

Source register

Every material datum traceable to a graded source. Admiralty scale A–F / 1–6.

  • [S-1 - source]
    • Type: [Primary / Secondary / Database / Direct verification]
    • Reliability (A–F):
    • Credibility (1–6):
    • Date accessed:
    • Method:

Evidence archive

  • [screenshot / capture ref + hash + URL + timestamp]:
  • [employer verification record ref]:
  • [education verification record ref]:
  • [consent & authorization ref → Appendix A]:

Open gaps / verification pending

  • [item submitted, not yet returned - e.g. employer HR callback pending]
  • [item requiring candidate clarification]
  • [item restricted by jurisdiction - note limitation]

Scope-boundary flags (route to other products)

Collection log

  • Tasked date:
  • As-of / cut-off date:
  • Analyst:
  • Reviewer:
  • Approving officer:

Graph View