What is workforce trust infrastructure?
Workforce trust infrastructure is the layer that connects a person, the organisation they work for, the role they hold, the verified evidence behind them, structured human review and an auditable decision record. Rather than producing a single check result, it helps an organisation decide — and later justify — whether trust can responsibly be placed in someone for a specific role in a specific environment.
Global Security Job (GSJ) · Reviewed 2026-10-06
How is workforce trust infrastructure different from identity verification?
Identity verification establishes that a person is who they claim to be. Frameworks such as NIST SP 800-63A describe how identity proofing and enrolment can be performed to defined assurance levels.
A workforce trust decision asks a further question: given a verified identity, is the available evidence relevant, current and sufficient for this role, in this organisation, at this moment? Identity is a necessary input — it is not the decision.
Why do security-critical environments need more than a background check?
A background check typically reports facts at a point in time. In security, defence-adjacent, emergency-service and critical-infrastructure work, roles differ, access changes, credentials expire and evidence comes from different providers and jurisdictions.
Without a structure that connects those elements, the reasoning behind a decision often lives in email, spreadsheets or individual memory — which makes it hard to review or defend later.
What are the components of workforce trust infrastructure?
Person: a verified identity. Organisation: the context and obligations of the employer or client. Role: the specific requirements and access the position carries. Evidence: credentials, licences and checks with known provenance and dates. Review: structured assessment by qualified people. Accountability: a traceable record of how and why a decision was reached.
How does THE ARC approach the problem?
Global Security Job (GSJ) is building THE ARC as trust infrastructure for security-critical workforce decisions. It is designed to connect verified evidence with organisational and role context, structured human review and an auditable decision trail.
THE ARC is at an early stage. Some capabilities are pilot-stage and others are planned or being explored; the current-status page sets out which is which.
This describes GSJ’s product direction, not regulatory guidance. See current development status.
What does this not mean?
- It is not an automated trust score or a system that makes final decisions on its own.
- It is not a recruitment marketplace or a replacement for an organisation’s own vetting obligations.
- It does not mean collecting as much data about people as possible; relevance and proportionality matter.
- Referencing public frameworks does not imply that any public body endorses or uses THE ARC.
What else do people ask?
- Is workforce trust infrastructure the same as a trust score?
- No. A single score hides the evidence and reasoning behind it. Trust infrastructure keeps evidence, context and human judgement visible so decisions can be reviewed.
- Who is workforce trust infrastructure for?
- Organisations where a workforce decision can become an operational risk decision — for example security services, defence-adjacent suppliers, emergency services and critical infrastructure operators.
- Does it replace background screening?
- No. Screening results can be one input. Trust infrastructure is about connecting those inputs to the role, the organisation and an accountable review.
- Who makes the final decision?
- Qualified people within the responsible organisation. The infrastructure supports their review; it does not replace it.
Which official sources can I read?
Cited for educational context only. Reference to these bodies or documents does not imply endorsement of, partnership with, or use of GSJ or THE ARC.
- NIST SP 800-63-4, Digital Identity Guidelines (opens in a new tab)National Institute of Standards and Technology (NIST)
- NIST SP 800-63A-4, Identity Proofing and Enrollment (opens in a new tab)National Institute of Standards and Technology (NIST)
- Directive (EU) 2022/2557 on the resilience of critical entities (see Article 14, background checks) (opens in a new tab)EUR-Lex, Publications Office of the European Union