UNCLASSIFIED records; (c) undertake criminal record checks; (d) establish that applicants are entitled to undertake the employment in question; and, (e) record and risk manage cases where it is impossible to perform all the required checks. To achieve the security outcomes mandated above, organisations must:  Ensure that HR processes do not allow anyone to commence work on critical infrastructure projects without undergoing appropriate recruitment checks;  Verify the identity of the candidate by conducting independent checks using Government or third party issued documents such as passports or similar photographic identity documents;  Establish whether the applicant has the right to work in Uganda including meeting residency requirements based on the sensitivity of the position;  Check the candidate’s employment record by validating the completeness and accuracy of the curriculum vitae;  Obtain satisfactory character references about the applicant e.g. one business and one personal;  Establish whether the applicant is qualified for the job by confirming the claimed academic and professional qualifications; and  Based on risk assessment, determine whether the applicant is liable to undergo additional national security vetting described in section 7.4. 40