This can vary from organization to organization. Some may choose to screen potential customers or vendors at first contact. Some screen again when orders or finances change hands, and repeat this process with each order up until the time an order is shipped. Other organizations have an automated rescreening system in place instead of rescreening manually. Visitors may be screened when they sign up for a tour, and again when they arrive.

What is really important about when screening takes place is that it should fit the regulatory goals or risk objectives, of the organization—ensuring that finances, technology, information, or goods are not transferred in violation of regulations.

Generally speaking, screening should be performed for every export or financial transaction, domestic and foreign. Ideally, screening should include every party involved in the transaction, including the final end user, and the chain of individuals and businesses in-between.

Screening should also be take place for any type of contact, including visitors, employees, business associates, re-sellers, etc.—though the lists screened may vary for each of these purposes. Countries where exports are destined should also be screened to ensure they are not currently facing sanctions or embargoes.