GSJ·THE ARC

What is evidence-based workforce trust?

Short answer

Evidence-based workforce trust means grounding decisions about people in security-critical roles on evidence whose provenance, recency and relevance to the role are known — reviewed by qualified people and recorded so the decision can be explained later. It contrasts with relying on a single opaque score, which hides what was checked, when, by whom and why it mattered for this particular role.

Global Security Job (GSJ) · Reviewed 2026-10-06

Why is a single trust score insufficient?

A score compresses many inputs into one number. Reviewers cannot see which evidence drove it, whether it is current, or whether it is relevant to the role in question. It also makes errors and bias harder to detect and challenge.

What makes evidence fit for a workforce trust decision?

Provenance: where it came from. Recency: when it was obtained and whether it is still valid. Relevance: whether it bears on the requirements of this role. Sufficiency: whether, together with other evidence, it supports the decision being made.

What is the difference between evidence and a decision?

Evidence describes facts. A decision is a judgement that those facts justify trust for a purpose. Keeping them separate lets organisations show what they knew, how they weighed it and who was accountable.

Product approach

How does THE ARC approach the problem?

THE ARC avoids opaque automated trust scoring. It is being designed to present evidence with its source and date alongside role and organisational context, support structured human review, and preserve an auditable decision trail.

This describes GSJ’s product direction, not regulatory guidance. See current development status.

What does this not mean?

  • It does not mean more data is always better; proportionality and relevance govern what is collected.
  • It does not mean evidence decides automatically; qualified people remain accountable.
  • It is not a guarantee of outcomes or of regulatory compliance.

What else do people ask?

Does evidence-based trust use any scoring at all?
Organisations may use structured criteria, but the evidence and reasoning should remain visible and reviewable rather than hidden behind a single number.
Why does recency matter?
Credentials expire and circumstances change. Evidence that was sufficient a year ago may not be today.
How does role context change the evaluation?
The same evidence can be sufficient for one role and insufficient for another with greater access or responsibility.

Which official sources can I read?

Cited for educational context only. Reference to these bodies or documents does not imply endorsement of, partnership with, or use of GSJ or THE ARC.