Can this form be signed electronically?

Yes. Electronic signatures are legally valid under the ESIGN Act (15 U.S.C. ch. 96) and UETA in most states provided the signature meets intent, consent, attribution, and retention tests. Exceptions (e.g., certain wills or court filings) may still require paper.

What signer authentication is recommended?

For high-risk employees, use stronger authentication such as SMS one-time passcodes, knowledge-based authentication, or multi-factor methods. Maintain logs of authentication events. Higher assurance decreases repudiation risk and supports compliance under 21 CFR Part 11 or HIPAA where applicable.

Is notarization or witness required by state?

Notarization and witness rules vary by state and document purpose. Some jurisdictions permit remote online notarization (RON); others require in-person notarization or specific witness counts. Verify state notary statutes and regulatory requirements before finalizing signatures.

How long must these records be kept?

Retention depends on federal and state rules and industry standards. Federal baselines include IRS three-year guidance (IRC §6501(a)) and HIPAA six-year retention (45 CFR §164.530(j)). Follow corporate policy that meets the longest applicable requirement and document retention rationale.

Can PHI be included on the form?

Including protected health information requires HIPAA safeguards and a signed Business Associate Agreement when third parties process PHI. Limit access, use role-based controls, and ensure the eSignature vendor supports HIPAA with a BAA to meet regulatory obligations.

What if information changes later?

Document revisions using an amendment or updated form. Record the reason, effective date, approver signatures, and link to the original record. Maintain version history and retention metadata to preserve auditability and meet ESIGN/UETA retention and reproduction requirements.

Electronic Signature
Templates
HR
High-Risk Employee Identification Form

High-Risk Employee Identification Form

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

HIGH-RISK EMPLOYEE IDENTIFICATION FORM

Purpose: This form documents identification, assessment and mitigation planning for employees whose duties, access, behavior, or history indicate an elevated risk to personnel safety, financial assets, regulatory compliance, information security, or organizational reputation. Completion of this form initiates monitoring and mitigation steps required by Human Resources and Risk Management.

Personal Information

Full legal name Home address Primary phone Work email

Position Information

Employee ID Department Job title / position Reporting manager Position start date

Employment type (check all that apply) Full-time Part-time Contractor Temporary

Employment History (most recent two employers)

Employer 1 - Company name Title / role

Key responsibilities Reason for leaving

Employer 2 - Company name Title / role

Key responsibilities Reason for leaving

Education

Highest degree or certification Institution Graduation date

References

Reference 1 - Name

Reference 2 - Name

Reference 3 - Name

Risk Assessment

Identify the primary risk categories applicable to the employee's position, duties, or conduct. Check all that apply:

Operational risk (safety-critical duties) Financial risk (cash, payments, reconciliation) Information security / data privacy Regulatory / compliance exposure Behavioral / performance concerns Reputational risk

Severity rating:

Low Medium High

Risk description and observed indicators

Risk factor checklist (check all that apply):

Access to cash, payments, or reconciliations High-pressure client interactions Prior disciplinary action or performance plan Regular unsupervised work or isolated environment Authority to approve transactions or personnel actions Access to sensitive personal or business data Operation of safety-critical equipment or vehicles Role subject to licensing or strict regulatory controls Known or suspected substance abuse concern

Mitigation and Monitoring Plan

Summary of mitigation measures required Required training, counseling or supervision Monitoring actions and frequency

Responsible manager for mitigation

Mitigation due date

Access and Privileges Affected

Restrict or review the following privileges as applicable (check all that apply):

Corporate systems and application access Financial systems and payment access Keycard or physical access controls Remote access / VPN Access to physical assets or inventory Privileged user credentials Operation of safety-critical equipment

If access affected, specify systems, accounts, or badges

Prior Incidents and Investigations

Describe prior incidents, investigations, or corrective actions relevant to risk Dates of relevant incidents (list MM/DD/YYYY)

Manager Assessment and Recommendation

Manager assessment summary

Manager name

Manager title

Date of assessment

Legal Disclosures and Certification

At-Will Employment: Completion of this form and any resulting actions do not alter the at-will nature of employment unless a separate written agreement signed by authorized company officers expressly states otherwise.

Equal Employment Opportunity: The organization prohibits unlawful discrimination or retaliation. Risk designations are applied consistent with applicable equal employment laws and legitimate business needs.

Authorization and certification: I certify that the information provided on this form is accurate and complete to the best of my knowledge. I authorize the company to contact prior employers and listed references, to conduct applicable background and safety checks, and to take reasonable administrative or access actions necessary to mitigate identified risk. I understand that failure to disclose material facts may result in corrective action up to and including termination.

By checking this box I acknowledge and authorize the above statements.

Recordkeeping and Confidentiality

This record will be retained in accordance with company policy for personnel and risk records. Access to this form is restricted to HR, Risk Management and designated management personnel. Information will be handled as confidential and only disclosed as required for legitimate business or legal processes.

Employee Acknowledgement and Signature

Employee Name:

Signature:

Date:

What the High-Risk Employee Identification Form Is

The High-Risk Employee Identification Form documents individuals whose roles, behaviors, or circumstances present elevated operational, safety, security, or compliance risks for an employer. Typical uses include tracking access to sensitive systems, financial controls, patient care assignments, or positions with regulatory oversight. The form standardizes risk criteria, documents approvals for enhanced screening or monitoring, and records mitigation steps and assigned supervisors. It serves as an auditable personnel record to support decisions such as additional background checks, restricted access, reassignment, or termination when required by policy or regulation.

Why a Standardized High-Risk Form Matters

Use this form to create consistent documentation of employees with elevated risk, reduce subjective decision-making, and establish a defensible audit trail for compliance reviews. Clear records help HR, security, and legal teams coordinate mitigations while meeting regulatory or contractual obligations.

Who Completes and Relies on This Form

Human resources, security, compliance, and supervisors use the High-Risk Employee Identification Form to document risk factors and approvals.

HR managers: centralize personnel records, record mitigation steps, follow-up timelines, and update status.
Security teams: capture access privileges, incident history, and recommended technical controls linked to the employee.
Legal and compliance: retain evidence for audits, regulatory reporting, and disciplinary actions when needed.

Completed forms become part of personnel files and support consistent enforcement of risk mitigation and review cycles.

Essential Sections to Include

Core components ensure the form captures risk factors, approvals, proposed mitigations, and an audit trail suitable for HR and compliance review.

Risk Profile

List specific behaviors, role-based access, regulatory exposures, and objective indicators that elevate risk. Include dates, incidents, and immediate triggers to support later review or escalation decisions.

Job Details

Record title, department, supervisor, essential duties, and system privileges. Note temporary assignments or recent promotions that could change exposure and require reassessment of controls and training history.

Incident Log

Summarize prior security or performance incidents, investigation findings, and timelines. Attach supporting documents such as investigation reports, surveillance logs, or disciplinary records for corroboration and witness statements.

Mitigation Plan

Describe actions required (access restrictions, enhanced monitoring, training, reassignment), responsible owner(s), deadlines, and metrics to evaluate whether risk has been reduced and required resources and defined review frequency.

Authorizations

Capture managerial approvals, HR sign-off, legal clearance if required, and dates. Note any temporary waivers, scope limits, or conditions attached to the authorization and renewal requirements.

Audit Trail

Maintain timestamps, signer identities, IP addresses, and modification history. Ensure documents are retained in accordance with corporate retention policy and applicable statutes for defensibility and chain-of-custody notes.

Required Core Information Fields

Full Legal Name: As on government ID.

Employee ID: Internal unique identifier.

Job Title: Current role title.

Department: Organizational unit name.

Risk Category: Security, financial, safety, compliance.

Date Identified: Enter as MM/DD/YYYY; use local timezone.

Step-by-Step: From Identification to Archival

Follow these sequential steps to complete and process the High-Risk Employee Identification Form accurately and efficiently.

01

Gather Evidence: Collect incident reports, logs, and witness statements.
02

Complete Form: Enter fields precisely and attach supporting files.
03

Obtain Approvals: Manager and HR must sign or e-sign.
04

Archive: Store in personnel file with audit metadata.

Routing and eSubmission Overview

This section explains routing, signature capture, and record retention for eSubmission workflows and internal distributions.

Prepare Document: Upload PDF and designate required fields.
Add Signers: Assign roles and signing order.
Authenticate: Use email, SMS code, or MFA.
Record: System captures time, IP, and audit trail.

Configure Online Workflow Settings

Configure the online workflow to enforce required fields, approvals, and secure routing consistent with HR policy and compliance needs.

Field	Configuration
Require Manager Approval	Require manager email and digital signature
Mandatory Evidence Attachments	Attach reports, logs, and witness statements
Authentication Level	Email link default; SMS OTP optional for high risk
Retention Setting	Retain signed record per retention policy

Platform Capabilities to Verify

Choose a signing platform that supports audit trails, secure storage, and the authentication methods required for HR and compliance reviews.

File Formats: PDF and Word DOCX formats supported.
Integrations: Integrates with HRIS and document storage.
Security: TLS and AES-256 encryption.

Key Timelines and Response Windows

Key timing expectations for completing, approving, and reviewing High-Risk Employee Identification Forms are shown below.

Immediate Notification to Supervisor and HR:

Report within 24 hours of identification or discovery.

Manager Approval Within Business Days:

Approve or escalate within 3 business days.

HR Review and Case Assignment:

Complete HR review within 7 calendar days.

Corrective Action Implementation Deadline per plan:

Implement agreed mitigations within the specified deadline.

Retention Start Date and Period:

Retention period begins on identification date.

Potential Risks and Legal Consequences

Discrimination Risk: Improper profiling may trigger legal claims.

Regulatory Fines: Fines for noncompliance vary by agency.

HIPAA Exposure: Unauthorized disclosures risk HIPAA penalties.

I-9 Violations: Improper documentation leads to civil penalties.

Operational Disruption: Loss of trust and productivity.

Data Breach: May require notification and remediation.

Common Mistakes to Avoid

Incomplete supporting documentation such as incident reports, timestamps, or witness statements that prevents objective assessment and slows approvals.
Using vague risk categories or subjective language without evidence, which increases legal exposure and undermines defensibility in audits.
Failing to follow defined approval workflow or missing required sign-offs, leading to invalid or unenforceable personnel actions.
Poor version control or storing signed forms in unsecured locations can create chain-of-custody issues during investigations.

How signNow Compares on Price and Capabilities

Comparison of common eSignature plans focusing on price, trial availability, bulk sending, audit trails, HIPAA compliance, and envelope limits for budgeting choice.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day trial	Varies by vendor	Varies by vendor	Varies by vendor	Varies by vendor
Bulk Send	Yes (Business Premium)	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No
Envelope Cap	No cap	100 envelopes/user/year	Varies	Varies	Varies

Frequently Asked Questions and Practical Answers

Answers to common questions about completing, signing, and storing the High-Risk Employee Identification Form, including eSignature and compliance considerations.

Need help? Contact support

Can this form be signed electronically?
Yes. Electronic signatures are legally valid under the ESIGN Act (15 U.S.C. ch. 96) and UETA in most states provided the signature meets intent, consent, attribution, and retention tests. Exceptions (e.g., certain wills or court filings) may still require paper.
What signer authentication is recommended?
For high-risk employees, use stronger authentication such as SMS one-time passcodes, knowledge-based authentication, or multi-factor methods. Maintain logs of authentication events. Higher assurance decreases repudiation risk and supports compliance under 21 CFR Part 11 or HIPAA where applicable.
Is notarization or witness required by state?
Notarization and witness rules vary by state and document purpose. Some jurisdictions permit remote online notarization (RON); others require in-person notarization or specific witness counts. Verify state notary statutes and regulatory requirements before finalizing signatures.
How long must these records be kept?
Retention depends on federal and state rules and industry standards. Federal baselines include IRS three-year guidance (IRC §6501(a)) and HIPAA six-year retention (45 CFR §164.530(j)). Follow corporate policy that meets the longest applicable requirement and document retention rationale.
Can PHI be included on the form?
Including protected health information requires HIPAA safeguards and a signed Business Associate Agreement when third parties process PHI. Limit access, use role-based controls, and ensure the eSignature vendor supports HIPAA with a BAA to meet regulatory obligations.
What if information changes later?
Document revisions using an amendment or updated form. Record the reason, effective date, approver signatures, and link to the original record. Maintain version history and retention metadata to preserve auditability and meet ESIGN/UETA retention and reproduction requirements.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now