What this is
What is a contractor safety plan?
What is a contractor safety plan?
A contractor safety plan is the site's governing document for contracted work: the requirements every contractor must meet to be engaged, admitted and kept on site, and the supervision and monitoring the site applies while they work. It is written once by the contract manager, reviewed yearly, and referenced by every prequalification, induction and contractor permit the site issues.
Is this the plan the contractor writes, or the plan the site writes?
The site writes it. This plan states the host organisation's requirements; the contractor answers it with their own documents, principally the method statement or RAMS for the specific task, insurance certificates and competence evidence. Confusing the directions is expensive: a site holding a contractor's generic corporate safety manual has evidence about the contractor, not control over the work.
Why does contracted work need its own plan at all?
Because contractors fall through the gaps in systems built for employees. They are not on the training matrix, not in the toolbox talk, not on the emergency roll call, and on site precisely when supervision is thinnest: nights, weekends and shutdowns. ISO 45001 cl.8.1.4 exists because injury and contamination statistics for contracted work run consistently worse than for direct employment on the same sites.
Scope
When is a contractor safety plan required?
This plan governs contracted work as a category. It is the standing rulebook the per-vendor and per-job records are checked against, not those records themselves, and it must not be diluted into a general statement of how the site manages safety.
Use this template when
- The site engages contractors and needs its requirements on them stated once, owned, and referenced by every prequalification and induction
- The yearly review of contractor arrangements is due, or an incident, audit or regulatory change has reopened them
- Contracted work is expanding into new risk, a shutdown, construction, hot work or roof work, and the tiering and supervision rules need to cover it
- A customer or certification audit requires evidence of how contractor safety and site GMP rules are imposed and checked
- Contractor performance is drifting and the site needs the scorecard, escalation and removal machinery the plan defines
Do not use it for
- How the site manages safety as a whole, which is the Safety Management Plan (SAF-121); this plan governs one population, not the system
- The rules themselves that contractors must follow on the floor, which are the Site Safety Rules (SAF-124); this plan requires that they are provided and links to them by Rules ID
- The per-vendor prequalification questionnaire and its evidence, which are KnowContractor records raised against each vendor, checked against this plan
- Authorising a specific piece of high-risk work, which is a permit to work raised for that job on that day, not a standing plan
- The task-level method for a specific job, which is the contractor's method statement or RAMS, reviewed against this plan but authored by them
Compliance mapping
Which ISO 45001 cl.8.1.4 requirements does this satisfy?
Regulation treats contracted work as a coordination problem between duty holders, not a transfer of duty. Every major regime keeps the host on the hook and adds an obligation to cooperate, coordinate and check.
| Clause | Requirement | Where it lands |
|---|---|---|
| ISO 45001 cl.8.1.4.1 | Procurement controls to ensure purchased goods and services, including contracted services, conform to the management system's requirements | Requirements on contractors |
| ISO 45001 cl.8.1.4.2 | Coordination with contractors to identify and control the hazards each party's activities create for the other's workers and for others at the workplace | Requirements on contractors |
| HSWA 1974 s.3 (GB) | Duty to conduct the undertaking so that persons not in your employment, including contractors' workers, are not exposed to risk | Requirements on contractors |
| CDM 2015 (GB) | Those appointing contractors for construction work must ensure they have the skills, knowledge, experience and organisational capability for it | Requirements on contractors |
| OSHA CPL 02-00-124 | Multi-employer citation policy: a controlling employer must exercise reasonable care to detect and correct violations on the worksite, including those created by others | Supervision and monitoring |
| ISO 45001 cl.9.1.1 | Monitoring and measurement of the extent to which legal and other requirements, including those placed on contractors, are being met | Supervision and monitoring |
| FDA 21 CFR 117 subpart B | Current good manufacturing practice, including hygiene and plant controls, applies to everyone working in a food plant, not only employees | Food safety requirements |
| BRCGS Food Safety Issue 9 sec.7 | Personnel requirements, including hygiene, medical screening and protective clothing, apply to contractors and visitors as they do to staff | Food safety requirements |
What it does not cover
- The per-vendor prequalification record, which is raised against each contractor in KnowContractor with its questionnaire, insurance evidence and expiry dates; this plan defines what that record must contain.
- The permit to work, which authorises one crew to do one high-risk task on one day; this plan requires that permits exist and says which work needs them, but issues none.
- The method statement or RAMS review, which is a per-job record assessing the contractor's stated method against this plan and the site's conditions.
- The individual induction record, which evidences that a named person was inducted on a date, with its own expiry; the plan makes induction a condition of access, not a fact.
- The Site Safety Rules (SAF-124), which are the floor-level rules themselves; this plan links to them by Rules ID and obliges contractors to receive them, but does not contain them.
Global
Contractor Safety Plan requirements by country
The universal principle is that hiring a contractor is not hiring a scapegoat. Jurisdictions differ mainly in how they name the coordinating party and how far up the chain liability travels.
OSH Act; multi-employer citation policy (CPL 02-00-124)
Creating, exposing, correcting and controlling employers can each be cited for the same condition on a shared worksite.
A host that directs or could reasonably detect the work is a controlling employer, and the contractor's citation does not consume the host's.
HSWA 1974 ss.2–3; CDM 2015 for construction work
Non-delegable duty to persons affected by the undertaking, plus client duties to check capability and make management arrangements for construction.
Hosts are repeatedly convicted for contractor fatalities where selection and supervision were thin; the contract's indemnity clause is irrelevant to the prosecution.
Framework Directive 89/391/EEC art.6(4)
Where several undertakings share a workplace, employers must cooperate, coordinate protection and prevention, and inform each other of risks.
Coordination is itself the legal duty; a plan that only screens contractors and never exchanges hazard information fails the actual requirement.
Prime contractor provisions in provincial OHS law (e.g. BC, Alberta)
On multi-employer worksites one party, by designation or by default the owner, holds the coordination duty for the whole site.
If no prime contractor is designated in writing, the duty defaults to the owner, which is usually the host reading this plan.
Model WHS Act ss.19 and 46
The PCBU's primary duty extends to contractors' workers, and overlapping duty holders must consult, cooperate and coordinate so far as reasonably practicable.
Section 46 makes failure to coordinate an offence in its own right, separate from any injury; the coordination evidence this plan generates is itself the compliance.
ISO 45001 cl.8.1.4
Procurement, contractor and outsourcing controls as management system requirements, with hazards controlled in both directions.
Certification auditors test both directions: what your contractors could do to your workers, and what your operations could do to theirs. Most plans only answer the first.
How to complete it
How to complete a contractor safety plan, step by step
The plan's questions are answerable with a Pass and a signature. Whether the programme behind them is real turns on four decisions the form cannot make for you.
Risk Tiering Defined is the plan's load-bearing answer. A tiering that puts the ammonia-plant refrigeration contractor and the photocopier engineer through the same regime produces two failures at once: the low-risk trades learn the paperwork is theatre, and the reviewers, numbed by volume, rubber-stamp the one file that deserved an hour. State the tiers, what triggers each, and which requirements switch on at each level.
Contract Owner Named For Each Package fails in substance when the named owner is a procurement role who has never seen the work. The owner knows the contractor is on site today, holds the inspection frequency for their tier, and is the escalation point when something is wrong. An orphaned contractor, signed in by security and owned by nobody, is the most common condition found after a contractor incident.
The form's own help text says it: contractors are the least willing to stop work. They are paid by milestone, fear being seen as difficult, and assume the site's rules are for the site's staff. The plan must say in words that contractors can and must stop unsafe work, that stopping will never be held against them commercially, and the induction must repeat it. Defining the removal process without the protection for stopping builds a system that punishes honesty.
GMP Requirements Explained is only a Pass when a welder could act on the explanation. That means tools counted in and out, food-grade lubricants named in the method statement, glass and brittle plastic declared before entry, allergen awareness where the work crosses lines, and post-work sanitation handed to quality before the line restarts. A contractor's swarf, lost blade or leaking gearbox is a recall vector, and this plan is the only place the trades will ever hear that.
What auditors find
Most common contractor safety plan findings
Contractor findings cluster in the gap between the file and the site: what was true at prequalification, and what is standing in the plant room right now.
| Finding | Clause | What fixes it |
|---|---|---|
| Insurance and prequalification current at award, expired mid-contract with the work continuing. | ISO 45001 cl.8.1.4.1 | Drive rechecks off document expiry dates, and make lapsed cover suspend site access automatically. |
| Subcontractors on site who were never prequalified or inducted; only the principal was assessed. | ISO 45001 cl.8.1.4.2 | Flow requirements down in the contract and verify each individual at the gate against the induction record. |
| No induction evidence for named individuals working on site, or inductions expired. | ISO 45001 cl.8.1.4.2 | Make Induction Required Before Access a gate condition enforced at sign-in, not a policy statement. |
| Method statement is the contractor's generic corporate document, not written for this task on this site. | CDM 2015 | Reject generic RAMS at review; require the site's hazards, permits and rules to appear in the method by name. |
| No named contract owner for the package; nobody on site knew the contractor was working that day. | OSHA CPL 02-00-124 | Name the owner per package in the plan and require their sign-off before each mobilisation. |
| Site inspection frequency stated as required, with no contractor inspections recorded all year. | ISO 45001 cl.9.1.1 | Set a numeric frequency per risk tier and log the inspections against the package. |
| Stop work authority not communicated to contractors, or contradicted by milestone penalties. | ISO 45001 cl.7.4 | State the authority and its commercial protection in the plan and the induction, and test it in toolbox talks. |
| Contractor tools and parts not accounted for after work above open product lines. | FDA 21 CFR 117 subpart B | Require a counted tool and part register per job, reconciled before the area is released to production. |
| Glass and brittle plastic brought into production areas without declaration or registration. | BRCGS Food Safety Issue 9 cl.4.9 | Brief the glass and brittle plastic rules at induction and check contractor kit against them at entry. |
| Escalation and removal process undefined; repeated violations handled ad hoc and the contractor re-engaged. | ISO 45001 cl.8.1.4.1 | Define the escalation ladder and feed the performance scorecard into the next award decision. |
Case in point
Case in point: the immaculate file and the Saturday crew
A dairy processor engaged its long-standing refrigeration contractor for a compressor overhaul, scheduled for a Saturday to avoid production. The prequalification file was exemplary: insurance current, ISO certificates on record, the lead engineer inducted, a method statement on file. The contract manager who owned the package was not on site at weekends, and the plan's inspection frequency for contracted work read as required.
The contractor, short-staffed, sent two fitters from a subcontract labour firm. Neither had been prequalified or inducted; security signed them in against the principal's booking. They completed the overhaul competently but left the plant room short one snapped hacksaw blade, unrecorded because tool accountability appeared nowhere in their briefing. A metal detector found the fragment eleven days later, downstream of product that had already shipped. The withdrawal cost more than the site's annual maintenance budget.
The investigation found no villain. Every control existed on paper: flow-down implied by the contract, induction required before access, tool accountability in the food safety section. What did not exist was anything that operated on a Saturday: no gate check against induction records, no owner present or delegated, no inspection, no reconciliation before the Monday restart. The plan had governed the file, and the file was not what stood in the plant room.
The template
The template, field by field
The form exactly as it installs. Every field, option, score and conditional rule is editable, and the links to other templates come with it.
4 sections
- Reference
- SAF-127
- Archetype
- Plan
- Record ID
- CSP-2026-000
- Scoring
- Not scored
- Direction
- n/a
- Singleton
- No
- Basis
- ISO 45001 cl.8.1.4
- Links
- Links Vendor; feeds KnowContractor
- Tags
- Programme, Contractor
- Sections
- 4
- Fields
- 40
- Follow up fields
- 3
- Repeating sections
- 0
- Links out
- 4
Header
9 fieldsPlan ID*
Auto sequence. Format CSP-2026-0000.
The record's own ID. Other templates point at this value.
Status*
Drives who this goes to next.
- Planned2 pts
- In progress2 pts
- Complete3 pts
- Deferred0 pts
- Open0 pts
- Closed3 pts
- Overdue0 pts
Plan Version*
Issue Date*
Next Review Due*
Site*
Site ID*
Format SITE-000.
Links to FDN-001 Site ID
Plan Owner*
Approved By*
Requirements on contractors
9 fieldsPrequalification Required*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Insurance Requirements Defined*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Risk Tiering Defined*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Induction Required Before Access*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Competence Verification Required*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Method Statement Required*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Permit Requirements Explained*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Site Rules Provided*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Rules ID
Links to SAF-124 Rules ID
Food safety requirements
6 fieldsGMP Requirements Explained*
- Yes3 pts
- No0 pts
Tool And Part Accountability Required*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Food Grade Materials Required*
- Yes3 pts
- No0 pts
Post Work Sanitation Required*
Glass And Brittle Plastic Rules Explained*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Allergen Awareness Required
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Supervision and monitoring
16 fieldsContract Owner Named For Each Package*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Site Inspection Frequency Defined*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Performance Scorecard Used*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Incident Reporting Expectations Defined*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Stop Work Authority Extended To Contractors*
Contractors are often the least willing to stop work. Say explicitly that they can.
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Escalation And Removal Process Defined*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Plan Document
Document ID
Format DOC-0000.
Links to FDN-008 Document ID
Action Required*
Raise the action record, then enter its reference here.
- No2 pts
- Yes0 pts
Priority
- High0 pts
- Medium1 pt
- Low3 pts
CAPA ID
Format CAPA-2026-00000.
Links to FDN-014 CAPA ID
Action Owner
Plan Owner*
Signature*
Site Manager*
Second Signature*
SAF-127 · record IDs look like CSP-2026-000 · Links Vendor; feeds KnowContractor
Open in KnowellaRun it with agents
From a document you fill in to a programme that runs itself
The plan is a rulebook, and rulebooks do not watch gates. What fails is the machinery around it: the insurance that expired quietly, the induction that lapsed, the inspection rota nobody ran, the scorecard that never reached the next award decision.
Holds the plan with its owner and review date, links it to the Site Safety Rules it references, and routes the yearly review before the plan lapses into folklore.
Runs the per-vendor machinery the plan requires: prequalification records, insurance expiry tracking, induction status per individual, and the performance scorecard that feeds the next engagement.
Owns the food safety half of the during-work controls, tool and part reconciliation, glass register checks and post-work sanitation release before the line restarts.

Watches expiries, inductions and inspection gaps across live packages, and raises the specific lapse, this certificate, this crew, this weekend, instead of a monthly summary nobody reads in time.
This template lives in KnowSafe — safety and compliance. Incidents, hazards, permits, inspections and the critical controls behind them.
Meet KnowSafe→Glossary
Contractor Safety Plan definitions and key terms
- Prequalification
- Assessment of a contractor's competence, insurance, systems and history before they are eligible for engagement; a gate into the approved list, not evidence about any specific job.
- Risk tiering
- Classifying contracted work by the risk it brings, so that the depth of prequalification, method review and supervision scales with the work rather than applying uniformly.
- Method statement (RAMS)
- The contractor's written description of how a specific task will be done safely, with its risk assessment; authored by the contractor, reviewed by the site against this plan.
- Permit to work
- A time-bound authorisation for specified high-risk work, hot work, confined spaces, work at height, isolations, issued per job and closed out when the work ends.
- Site induction
- The briefing an individual must receive before unescorted access, covering site hazards, rules, emergency arrangements and, on food sites, hygiene and GMP; evidenced per person with an expiry.
- Stop work authority
- The explicit right and expectation that anyone, including a contractor's worker, halts work they believe unsafe, without commercial or personal consequence.
- Controlling employer
- In OSHA's multi-employer policy, the employer with general supervisory authority over a worksite, who must exercise reasonable care to detect and correct violations even in another employer's work.
- Tool and part accountability
- Counting tools, parts and consumables into and out of a production area so that anything missing is found before product is, a foreign-body control specific to food and pharma sites.
FAQ
Frequently asked questions about contractor safety plan
If the contractor is prequalified and insured, is the site still liable for their incidents?+
Yes. The duty does not transfer. OSHA's multi-employer policy can cite the host as controlling employer, HSWA section 3 prosecutions of hosts for contractor fatalities are routine in the UK, and the Australian WHS Act extends the PCBU's primary duty to contractors' workers. Prequalification and insurance change who pays damages, not who the regulator charges. What protects the site is evidence of selection, coordination and supervision, which is what this plan generates.
Should stop work authority really extend to contractors?+
Yes, explicitly and in writing. Contractors are the population least likely to stop work: they are paid by milestone, on unfamiliar ground, and afraid of losing the relationship. If the plan does not state that they can stop work and that stopping carries no commercial penalty, the site has an early-warning system with its loudest sensors disabled, and the first notice of a problem will be the incident itself.
How often should contractor work be inspected?+
At a defined numeric frequency set by risk tier, not as required. High-tier work, hot work, roof work, work on ammonia or above open product, warrants presence at the start and daily checks; low-tier work can run on sampling. The number matters less than its existence, because as required resolves to never on exactly the shifts contractors work. Record the inspections against the package so the scorecard has data.
Do the food safety requirements really apply to a plumber or an electrician?+
Yes, and more than to most employees, because trades bring in what production never does: loose fasteners, blades, swarf, non-food-grade lubricants, glass, and clothing that was on another site that morning. 21 CFR 117's GMP provisions apply to everyone working in the plant, and BRCGS extends personnel requirements to contractors and visitors. The plan translates those rules into what a trade actually does: count tools, declare materials, hand the area to sanitation before restart.
Is this one plan per contractor, or one for the site?+
One for the site. The plan states the requirements once; each contractor then has a prequalification record, each job a method statement review and any permits, and each individual an induction record, all checked against this plan. A plan per contractor duplicates the rules, guarantees divergence, and hides the decision that should be central: which tier the work falls into.
What about subcontractors the principal brings in?+
They are the standard failure path, and the plan must name them. Flow the requirements down contractually, require the principal to declare every firm and individual before mobilisation, and verify at the gate that the person entering matches an induction record. The company you prequalified is frequently not the company holding the tools; a gate check against individuals is the only control that closes that gap on the day.
Keep going
Related templates and programmes
Industries this is written for
Programmes this belongs to
Used together in Safety Programme Management
Regulatory Inspection Record
Records a visit by a regulator, including what was inspected, what was said and any orders issued
Management Review Record
Records the periodic review of the management system by senior leadership, covering performance, risks, resources and improvement
Interested Party Register
Holds the parties whose needs shape the management system, from regulators and customers to neighbours and the workforce
Safety Management Plan
Sets out how safety is managed across the site, covering roles, processes, resources and how performance is measured
Annual Safety Objectives
Sets the safety goals for the year with measures, owners and target dates
Safety Program Review
Reviews how a specific programme, such as PPE or working at height, is performing
More in Programs
Safety Management Plan
Sets out how safety is managed across the site, covering roles, processes, resources and how performance is measured
Annual Safety Objectives
Sets the safety goals for the year with measures, owners and target dates
Safety Program Review
Reviews how a specific programme, such as PPE or working at height, is performing
Site Safety Rules
The short list of rules everyone on site must follow, including visitors and contractors
PPE Program Plan
Sets out what protective equipment is required for which task, how it is selected, issued, maintained and replaced
Hearing Protection Program Plan
Sets out how noise exposure is controlled, including monitoring, protection, training and hearing tests

Written and reviewed by
Siddarth Singh
Founder & Chief Executive Officer, Knowella
Certified Safety Professional and industrial and systems engineer with more than a decade inside food supply chain, freight and manufacturing operations. This page was written against the current text of the standards it cites, not against secondary summaries of them.
- Certified Safety Professional (CSP), Board of Certified Safety Professionals
- MBA, University of Chicago Booth School of Business
- MS and BS, The Ohio State University, Industrial and Systems Engineering
- Six Sigma Black Belt
Sources and last review. Reviewed 16 August 2026 against:
- ISO 45001:2018 clause 8.1.4, procurement, contractors and outsourcing
- OSHA CPL 02-00-124, Multi-Employer Citation Policy
- Health and Safety at Work etc. Act 1974, section 3, and HSE guidance INDG368, Using contractors (GB)
- Construction (Design and Management) Regulations 2015 (GB)
- FDA 21 CFR Part 117 subpart B, current good manufacturing practice
- BRCGS Global Standard Food Safety Issue 9, sections 4.9 and 7
- Model Work Health and Safety Act, sections 19 and 46 (Australia)
This page is general guidance, not legal advice. Confirm requirements with your jurisdiction’s regulator.