On October 1, 2021, the Defense Counterintelligence and Security Agency reported it had enrolled every Department of Defense security clearance holder in a program called Continuous Vetting. The same milestone retired the practice of reinvestigating those holders every five to ten years. If you were cleared before that date, the ground rules shifted underneath you. And the phrase many cleared workers still say out of habit, Continuous Evaluation, is no longer the phrase the government leads with.

The difference is not branding. Continuous Evaluation and Continuous Vetting describe two different scopes of the same idea: rather than checking your background on a fixed clock, the government checks it continuously. Getting the two terms straight matters before your next alert lands in a system you cannot see.

What is the difference between continuous evaluation and continuous vetting?

Continuous Evaluation (CE) was the 2018 policy name for a set of automated record checks on continued eligibility. Continuous Vetting (CV) is the broader program running under Trusted Workforce 2.0. CV includes CE’s required data checks plus agency-specific checks, such as user activity monitoring. Guidance calls CV an evolution of the CE concept.

Continuous Evaluation came first as a formal directive. The Office of the Director of National Intelligence issued Security Executive Agent Directive 6, titled Continuous Evaluation, on January 12, 2018, and the National Counterintelligence and Security Center followed with implementation guidelines in March 2018. Executive Order 13467, as amended, frames CE as a set of automated record checks and business rules that assist in the ongoing assessment of a person’s continued eligibility, and it says CE is meant to complement continuous vetting. That last clause is the tell: even in the founding language, CE was the narrower piece and vetting was the wider effort.

The same executive order defines continuous vetting as reviewing the background of a covered individual at any time to determine whether that person continues to meet applicable requirements. In operating terms, the Government Accountability Office describes CV as the approach that includes the required CE data checks as well as required agency-specific data checks, such as user activity monitoring where appropriate. So CV is the superset. It carries CE’s automated checks and adds whatever an agency needs on top. If you learned about automated checks years ago through an earlier system, the lineage is worth reading; our piece on the Automated Continuing Evaluation System traces where the idea started, and the older Continuous Evaluation rollout debate shows how the concept was pushed to move faster.

What does continuous vetting actually check?

DCSA says CV pulls data from criminal, terrorism, and financial databases, plus public records, at any time during your period of eligibility. The older CE framework enumerated seven data categories. Keep the two straight: the DCSA public description is broad, while the seven-category list comes from the CE and Trusted Workforce 1.5 guidance.

On its Continuous Vetting program page, DCSA puts it plainly. Automated record checks pull data from criminal, terrorism, and financial databases, as well as public records, at any time during an individual’s period of eligibility. That is the seeker-facing summary, and it is deliberately short. It tells you the kinds of records in play without pretending to be an exhaustive schema.

The more granular list lives in the policy guidance. GAO records seven data categories for continuous evaluation automated record checks: eligibility, terrorism, foreign travel, suspicious financial activity, criminal activity, credit, and commercial data. A parallel GAO table describing the Trusted Workforce 1.5 requirement swaps the wording slightly, listing public records where the other list says commercial data, and adds employment conduct and subject interviews. The point for a cleared worker is not the exact label on the seventh bucket. It is that two of those categories, suspicious financial activity and credit, watch your money continuously. If a debt or a late-stage collection would have surprised your old adjudicator, it will not wait five years now. Our breakdown of financial issues and your security clearance covers what those triggers look like in practice.

Notice what the DCSA page does not claim. It does not say CV checks exactly seven named buckets on a public schedule. The broad description and the enumerated categories come from different documents at different levels of the system, and they are worth reading as two separate things rather than one master list.

When did continuous evaluation turn into continuous vetting?

The shift was phased. Phase One in December 2016 added two checks on top of reinvestigation. Trusted Workforce 1.5, in February 2020, set seven checks and let vetting satisfy reinvestigation. TW 1.25 guidance in January 2021 set a three-check floor. Under TW 2.0, continuous vetting replaces reinvestigation outright.

The transition reads as a staircase, not a switch. GAO’s phased guidance table lays out the steps. Phase One, in December 2016, required two checks, a credit bureau check and a criminal name check, in addition to periodic reinvestigation, with enrollment due by September 30, 2017. Trusted Workforce 1.5, dated February 2020, moved to seven checks and, importantly, said continuous vetting satisfies the reinvestigation requirement, with enrollment due by September 30, 2022. Trusted Workforce 1.25 guidance, dated January 2021, set an interim floor of three checks: eligibility, terrorism, and criminal activity. Trusted Workforce 2.0 is where the language becomes flat replacement. Continuous vetting replaces the periodic reinvestigation requirement, and the old fixed clock goes away.

That old clock is worth naming, because it is the thing being retired. The Performance Accountability Council describes periodic reinvestigations as requiring a new investigation after a set duration, typically every five or ten years depending on the sensitivity of the position. If you want the reader’s-eye view of that model before it disappears, see our note on what to expect from a security clearance reinvestigation.

The enrollment numbers show how fast the population moved. As of March 2021, executive-branch agencies had enrolled roughly three-quarters of a total eligible population of 4.1 million federal employees, military personnel, and contractors in a CE system, with about 3.3 million individuals from 33 agencies in ODNI’s system meeting the Trusted Workforce 1.25 requirements. DoD finished its own holders by October 1, 2021. The entire national security workforce transitioned by the end of 2022, and the full national security sensitive population is now enrolled. The newest wave reaches beyond national security into non-sensitive public trust roles: more than 53,700 of those personnel were enrolled as of March 2025, with the full population targeted to finish by October 2025. That expansion pairs with a structural change, the reduction of background-investigation tiers from five to three, which our guide to public trust positions and tiers walks through.

How much faster does continuous vetting catch problems?

DoD reported that potentially adverse information now surfaces on average about three years faster for Top Secret holders and seven years faster for Secret holders than under the old reinvestigation model. Treat that as a DoD-reported figure from the January 2025 Trusted Workforce progress report, not an independent audit result.

Speed is the whole argument for the model. Under a five- or ten-year cycle, an event in year two could sit unseen until year five or later. Continuous checks close that gap. The Performance Accountability Council reports a DoD finding that potentially adverse information is now collected on average three years faster for Top Secret clearance holders and seven years faster for Secret clearance holders when compared to the traditional model. Read that as DoD’s own measurement, useful as a direction and a magnitude, not as an outside verification.

For a cleared worker, the translation is blunt. The window between a reportable event and the government knowing about it has shrunk. A late tax filing, an arrest, or a new line of credit is now more likely to be seen close to when it happens.

What happens when continuous vetting flags you?

When an automated check generates a valid alert, such as for criminal activity, it triggers further investigation. Depending on what the review finds, the outcome can be mitigation and continued eligibility, or suspension, or revocation. The alert and the resulting adjudication record move through the government’s clearance systems.

GAO’s current description of CV under Trusted Workforce 2.0 makes the mechanism explicit. Continuous vetting consists of ongoing automated record checks of public and government data, agency-specific data, and certain time- or event-driven investigative activities. When those automated checks generate an alert, such as for criminal activity, the alert prompts further investigation. An alert is a starting point, not a verdict. DCSA frames the same flow: a valid alert triggers investigation and can lead to mitigation, suspension, or revocation.

Where the alert and its outcome are recorded matters, because it affects what a future employer or facility security officer sees. The government’s clearance and adjudication records live in systems that have their own history and quirks, which our comparison of Scattered Castles and DISS untangles. If a review moves against you, the stakes are the same ones cleared workers have always faced; our guide to what happens if your clearance is suspended or revoked covers the process from there.

Why isn’t the switch to continuous vetting finished?

The policy is set, but the IT backbone is not. The National Background Investigation Services (NBIS) is meant to connect the systems that run CV. In September 2024, DCSA completed a 36-month NBIS roadmap projecting milestones through fiscal year 2027, and GAO has tied NBIS delays to slow full implementation of Trusted Workforce 2.0.

Trusted Workforce 2.0 is the whole-of-government reform of personnel vetting, and it began implementation in 2018, when the Performance Accountability Council’s principal members initiated it in March of that year. The technical spine is the National Background Investigation Services, or NBIS, which is being built to connect the systems and databases that support continuous vetting. Historically the checks have run through two major systems: ODNI’s CE system on a classified network, covering the seven Trusted Workforce 1.5 categories, and DCSA’s Mirador for the DoD population. NBIS is designed to interface with both.

Building that spine has been the bottleneck. In September 2024, DCSA completed a 36-month roadmap for NBIS projecting product-development milestones through fiscal year 2027, and GAO has linked NBIS delays to the slow pace of full TW 2.0 implementation. For cleared contractors, the administration of these checks flows through the industry rulebook; our explainer on the NISPOM rule at 32 CFR 117 covers the contractor side, and enrollment on the ground is often the facility security officer’s job, which our piece on FSO requirements details.

Frequently Asked Questions

Is continuous evaluation the same as continuous vetting?

No. Continuous Evaluation is the older, narrower term from Security Executive Agent Directive 6, issued January 12, 2018. Continuous Vetting is the broader current program under Trusted Workforce 2.0. CV includes CE’s required data checks plus agency-specific checks, and guidance describes CV as an evolution of the CE concept.

Does continuous vetting replace the five-year or ten-year reinvestigation?

Yes, under Trusted Workforce 2.0. The Performance Accountability Council describes the old model as a new investigation after a set duration, typically every five or ten years by position sensitivity. Under Trusted Workforce 1.5 (February 2020) continuous vetting satisfied that requirement; under TW 2.0 it replaces it.

What databases does continuous vetting check?

DCSA states that automated record checks pull data from criminal, terrorism, and financial databases, as well as public records, at any time during your period of eligibility. The CE and Trusted Workforce 1.5 guidance enumerates seven categories, including eligibility, foreign travel, suspicious financial activity, criminal activity, and credit.

Who is enrolled in continuous vetting now?

The full national security sensitive population is enrolled. DoD finished its clearance holders by October 1, 2021, and the entire national security workforce transitioned by the end of 2022. The newest wave covers non-sensitive public trust roles, with more than 53,700 enrolled as of March 2025.

What happens if continuous vetting flags me?

A valid automated alert, such as for criminal activity, triggers further investigation. The review can end in mitigation and continued eligibility, or in suspension or revocation, depending on the facts. The alert and the adjudication record move through the government’s clearance systems.

The policy question is settled: in 2026 a clearance is a live subscription, not a five-year renewal. The open question is coverage, and the NBIS roadmap running through fiscal year 2027 is what decides how completely the system sees each population. The practical move for anyone holding eligibility is to treat your own record as the thing under watch. Report the police contact, the foreign travel, and the debt before an automated check surfaces it for you, because under Continuous Vetting the check no longer waits for your reinvestigation year.

Primary sources: DCSA, Continuous Vetting program page; GAO-25-107325, Federal Workforce: Trusted Workforce 2.0 (May 9, 2025); GAO-22-104093, Personnel Vetting (Dec. 2021); Performance Accountability Council, Trusted Workforce 2.0 Transition Report (Jan. 2025) and Personnel Vetting Quarterly Progress Report (FY24 Q4); ODNI, Security Executive Agent Directive 6 (Jan. 12, 2018); DCSA enrollment announcement via DVIDS (Oct. 1, 2021); and the contractor rule at 32 CFR part 117.