BPSS, SC, DV: tender vetting requirements explained

Winning UK public sector work often hinges on one question: can your team access the data? Whether you are bidding for a Ministry of Defence infrastructure upgrade or a Home Office software project, security vetting requirements will appear in the procurement documents. For bid managers and operations directors, these acronyms—BPSS, SC, and DV—represent hard constraints on mobilisation timelines and project costs.

The UK government mandates that anyone accessing its assets undergoes vetting. This is not merely a bureaucratic hurdle; it is a fundamental requirement of national security. Yet the way vetting is handled during the tender process is frequently misunderstood. Bidders often assume they need clearance just to submit a proposal, or they underestimate the time required to clear new hires. This guide breaks down the three primary levels of vetting you will encounter in public sector tenders.

You will learn when each clearance level applies, what it costs to process, and how to sequence your vetting applications alongside your tender deadlines. By understanding the mechanics of the Baseline Personnel Security Standard (BPSS), Security Check (SC), and Developed Vetting (DV), you can submit compliant bids without committing to unnecessary overhead.

What this guide covers

The definitions and access levels of BPSS, SC, and DV clearances.
The processing timelines and associated costs for each vetting tier.
How security requirements are evaluated during the tender process.
The role of Facility Security Clearance (FSC) for defence contractors.
Common mistakes bidders make when addressing vetting requirements.
Frequently asked questions about sponsorship and clearance transfers.

The Baseline Personnel Security Standard (BPSS)

The Baseline Personnel Security Standard (BPSS) is the foundation of all government vetting. It is essential to understand that BPSS is not a formal security clearance. Instead, it is a mandatory pre-employment screening protocol designed to confirm the identity and integrity of individuals accessing government assets. Every civil servant, armed forces member, and government contractor must hold BPSS before they can begin work.

BPSS grants individuals access to information classified as OFFICIAL. In exceptional circumstances, and only with written authorisation from the relevant security team, BPSS holders may be granted supervised access to SECRET assets. Because it is the entry-level requirement, BPSS underpins all higher tiers of national security vetting. If a candidate fails BPSS, they cannot proceed to SC or DV clearance.

The screening process is rigorous but straightforward. The employing authority—in this case, your business—is responsible for ensuring the checks are completed. The process verifies the individual's identity, their right to work in the UK, their employment history over the preceding three years, and any unspent criminal convictions.

For SMBs, BPSS is the most common requirement you will see in IT Services and Professional Services tenders. The timeline is manageable, typically taking five to ten working days to process through a commercial screening provider. Costs are relatively low, usually ranging between £80 and £150 per person. Because the employer handles BPSS, you can initiate these checks as soon as you identify the personnel for a contract, making it easy to align with your mobilisation schedule.

Security Check (SC) clearance

When a contract involves long-term, frequent, and uncontrolled access to SECRET assets, the buyer will stipulate Security Check (SC) clearance. SC is the most widely held security clearance in the UK public sector. It is frequently required for roles within the Ministry of Defence, the Home Office, and agencies handling critical national infrastructure.

SC clearance allows individuals to work independently with SECRET material and provides occasional, supervised access to TOP SECRET assets. It is also mandated for individuals who, while not directly accessing SECRET data, might gain a comprehensive understanding of a SECRET plan or policy through their role. This often applies to senior project managers and systems architects in cyber contracts.

The SC vetting process is significantly more intrusive than BPSS. It begins with the successful completion of BPSS, followed by a detailed security questionnaire. The United Kingdom Security Vetting (UKSV) agency then conducts a series of checks. These include a review of departmental and company records, a check of both spent and unspent criminal records, and an assessment of credit and financial history via a credit reference agency. UKSV also checks Security Service (MI5) records. If any financial or security concerns arise, the applicant may be required to complete a separate financial questionnaire or attend an interview.

Timelines for SC clearance require careful planning. Processing typically takes between six and twelve weeks, though complex cases or backlogs at UKSV can extend this. The cost of SC clearance is borne by the sponsoring organisation and generally ranges from £500 to £1,000 per applicant, depending on the specific checks required and administrative overhead. Crucially, SC clearance requires sponsorship. Your business must be sponsored by a government department or an existing prime contractor to apply for SC on behalf of your staff.

SC clearances are usually valid for ten years for civil servants and contractors working for organisations with Facility Security Clearance (FSC). For contractors without FSC, the validity is reduced to seven years.

Developed Vetting (DV) clearance

Developed Vetting (DV) is the most comprehensive and intrusive level of national security vetting in the UK. It is reserved for individuals who require frequent and uncontrolled access to TOP SECRET assets, or any access to TOP SECRET codeword material. DV is predominantly seen in highly sensitive defence, intelligence, and cyber contracts.

The DV process builds upon the foundation of SC clearance but delves much deeper into an individual's personal life. After completing BPSS and a DV-specific security questionnaire, the applicant undergoes all the checks associated with SC. However, DV introduces a full review of personal finances, assessing assets, liabilities, income, and expenditure. This financial review extends to the joint financial position of the applicant and their spouse or partner.

The defining feature of DV is the detailed interview conducted by a trained Investigating Officer. This interview covers the applicant's background, lifestyle, relationships, and any potential vulnerabilities that could be exploited by hostile actors. The Investigating Officer will also conduct interviews with referees who know the applicant well.

The timeline for DV clearance is extensive and must be factored into any long-term bid strategy. It typically takes between six and nine months to complete, and complex cases can take over a year. The costs are correspondingly high, often exceeding £2,000 to £5,000 per person. DV clearances are valid for a maximum of seven years, after which they must be formally renewed.

Facility Security Clearance (FSC) for defence contractors

When bidding for highly classified work, particularly with the Ministry of Defence, individual clearances are only part of the equation. If your business needs to store, process, or manufacture assets classified at SECRET or above on your own premises, you must hold Facility Security Clearance (FSC).

FSC, formerly known as List X, is an accreditation that confirms your physical site and procedural security controls meet stringent government standards. It ensures that your premises are equipped to protect highly sensitive assets from espionage and internal breaches. FSC is facility-specific; if your business operates across multiple sites, each location handling classified material must be cleared individually.

The relationship between FSC and tender vetting is critical. For contracts involving SECRET or TOP SECRET information, the MOD typically requires suppliers to hold a valid FSC before the contract is awarded. While a Provisional FSC may be issued during the Invitation to Tender (ITT) stage to allow limited access for bid preparation, full FSC must be achieved before any classified assets are transferred.

Holding FSC also impacts the validity of individual clearances. Contractors working for an FSC-accredited organisation generally retain their SC clearance for ten years, whereas those without FSC must renew every seven years. Furthermore, prime contractors holding FSC can only share classified information with FSC-cleared subcontractors.

Tender vetting: the sponsorship catch-22

One of the most persistent sources of confusion in public sector tendering is the issue of sponsorship. Many SMBs believe they must possess SC or DV cleared staff before they can bid for a contract. This is a misconception that artificially limits competition.

The UK government’s official policy, as outlined by the Cabinet Office, states that individuals should not be expected to hold an existing security clearance to apply for posts that require vetting. Advertising for staff who already hold clearance is considered contrary to government policy, unnecessary, and potentially discriminatory. The only exception is for short-term posts that must be filled urgently.

You do not need to hold national security clearance to bid for UK government work. Government contracting procedures are designed to ensure that there is no competitive advantage in having prior security clearances. Requests for clearances must be raised during the contractual process, usually after you have been named the preferred bidder or awarded the contract.

However, to put your staff through SC or DV vetting, your business must be sponsored. You cannot simply apply for clearance speculatively. Sponsorship is provided by the Contracting Authority (the government department buying the service) or by a prime contractor if you are bidding as a subcontractor. During the tender process, the buyer will confirm their willingness to sponsor the successful bidder's staff through the necessary vetting procedures.

Worked example

Consider a scenario where an SMB is bidding for a £2M data migration project with the Home Office. The Invitation to Tender (ITT) specifies that the core migration team must hold SC clearance, while the wider support staff require BPSS.

The buyer’s ITT documentation will typically include a section on Security Requirements. It might read:

All supplier personnel deployed on this contract must hold the Baseline Personnel Security Standard (BPSS) prior to the commencement of services. The Lead Architect and Senior Data Engineers (estimated 4 FTE) must hold Security Check (SC) clearance. The Authority will sponsor SC clearance applications for the successful Tenderer’s personnel. However, the Tenderer must demonstrate in their mobilisation plan how they will manage service delivery while clearances are processed.

In your bid response, you must address this directly. You should not claim to already have SC-cleared staff unless you genuinely do and their clearances are transferable. Instead, your method statement should detail your BPSS screening process and provide a realistic timeline for SC clearance.

Your mobilisation plan might look like this:

Week 1-2: Contract award. Initiate BPSS checks for all 15 project staff via our commercial screening partner.
Week 3: BPSS completed. Submit SC clearance applications to UKSV for the 4 core team members under Home Office sponsorship.
Week 4-10: Non-sensitive discovery and planning work commences using BPSS-cleared staff.
Week 11-14: Anticipated SC clearance approval. Core team begins migration of SECRET data.

This response demonstrates to the buyer that you understand the vetting process, you have factored the 6-12 week SC timeline into your project plan, and you are not relying on the false assumption that clearance is required on day one.

Common mistakes

Assuming clearance is required to bid. Many businesses self-disqualify from tenders because they do not have cleared staff. Unless explicitly stated for an urgent requirement, buyers will sponsor the winning bidder. Focus on proving your technical competence, not your current clearance roster.
Confusing BPSS with national security vetting. BPSS is a pre-employment check, not a formal security clearance. Do not state in your bid that your staff are security cleared if they only hold BPSS. Be precise with your terminology to maintain credibility with the buyer.
Failing to budget for vetting delays. SC and DV timelines are averages, not guarantees. If your pricing model assumes all staff will be fully productive on day one, a delayed DV clearance could destroy your margin. Build buffer time into your mobilisation plan and identify non-sensitive work that uncleared staff can perform while waiting.
Misunderstanding clearance transfers. Clearances belong to the sponsoring organisation, not the individual. If you hire someone who holds SC clearance from a previous defence role, that clearance must be formally transferred to your sponsorship. This process is not automatic and can be rejected if the new role does not justify the clearance level.
Ignoring residency requirements. SC and DV clearances have strict UK residency requirements, typically five years for SC and ten years for DV. If your proposed project team includes individuals who have recently lived overseas, their vetting will be significantly delayed or rejected. Audit your team's residency history before naming them in a bid.
Overlooking Facility Security Clearance (FSC). If a Ministry of Defence tender requires you to process SECRET data on your own IT systems, individual SC clearances are insufficient. You must hold or obtain FSC. Failing to account for the cost and time required to accredit your physical premises will lead to compliance failure.

Frequently asked questions

Can we apply for SC or DV clearance before we win a contract?

No. You cannot apply for national security vetting speculatively. Your business must be sponsored by a government department or an existing prime contractor, and this sponsorship is tied to a specific contract or defined operational requirement.

How long does BPSS take to complete?

Because BPSS is managed by the employer rather than UKSV, the timeline is within your control. Using a competent commercial screening provider, BPSS checks typically take between five and ten working days.

Do we pay for the security clearances?

The cost of BPSS is borne by the employer. For SC and DV, the costs are technically borne by the sponsoring organisation. However, in many commercial contracts, the buyer will expect the supplier to absorb the administrative costs of the vetting process. Always check the pricing schedule instructions in the ITT.

What happens if an employee fails their vetting?

If an employee fails BPSS, they cannot work on the government contract. If they fail SC or DV, the UKSV will notify the sponsor. The individual cannot access the classified material, and you will need to propose an alternative team member and restart the vetting process for them.

Can a subcontractor rely on the prime contractor's FSC?

No. Facility Security Clearance is site-specific. If a prime contractor shares SECRET material with a subcontractor, the subcontractor must hold their own FSC for the premises where the data will be stored or processed.