Knowella

Contractor Safety Plan

A contractor safety plan sets out what anyone working on your site under contract must meet, before the gate opens and while the work runs: prequalification, insurance, induction, competence, method statements, permits, and how compliance is checked. Its recurring failure is front-loading: assurance is exhaustive at award and absent during the work, so the file is immaculate while an uninducted subcontract crew works unsupervised on a Saturday.

KnowSafePlanSAF-12740 fields across 4 sectionsFull researchSee the form

Reviewed by Siddarth SinghCSPLast reviewed 16 August 2026

Basis
ISO 45001 cl.8.1.4
Workspace
KnowSafe
Form type
Plan
Review trigger
Yearly, and when contractor scope, site rules or regulation change
Feeds
Prequalification, inductions, permits, performance scorecards

The short version

  • The legal duty for contractor safety does not transfer with the contract. Under OSHA's multi-employer citation policy, HSWA section 3 and the Australian WHS Act, the host can be cited or prosecuted for a contractor's incident on its site, whatever the contract says about liability.
  • Prequalification is a snapshot that expires. Insurance lapses mid-contract, the qualified crew is swapped for one that is not, and a file accurate at award is fiction by month four unless something rechecks it.
  • Risk tiering is what makes the plan usable. Applying the full regime to a vending machine restocker guarantees the paperwork becomes ritual, and ritual paperwork is how the genuinely high-risk refrigeration contractor gets rubber-stamped in the noise.
  • Stop work authority must be extended to contractors explicitly and in writing. A contractor paid by milestone has every commercial incentive not to stop, and will not, unless the plan says stopping is expected and costs them nothing.
  • On a food site, contractors are a foreign body, allergen and hygiene vector, and the trades know none of it by default. Tool accountability, food-grade materials, glass rules and post-work sanitation are requirements in this plan, not quality's problem afterwards.
  • Subcontracting is the standard failure path. The party you prequalified is frequently not the party holding the tools, and a plan without an explicit flow-down and gate check has controlled the wrong company.

What this is

What is a contractor safety plan?

What is a contractor safety plan?

A contractor safety plan is the site's governing document for contracted work: the requirements every contractor must meet to be engaged, admitted and kept on site, and the supervision and monitoring the site applies while they work. It is written once by the contract manager, reviewed yearly, and referenced by every prequalification, induction and contractor permit the site issues.

Is this the plan the contractor writes, or the plan the site writes?

The site writes it. This plan states the host organisation's requirements; the contractor answers it with their own documents, principally the method statement or RAMS for the specific task, insurance certificates and competence evidence. Confusing the directions is expensive: a site holding a contractor's generic corporate safety manual has evidence about the contractor, not control over the work.

Why does contracted work need its own plan at all?

Because contractors fall through the gaps in systems built for employees. They are not on the training matrix, not in the toolbox talk, not on the emergency roll call, and on site precisely when supervision is thinnest: nights, weekends and shutdowns. ISO 45001 cl.8.1.4 exists because injury and contamination statistics for contracted work run consistently worse than for direct employment on the same sites.

Scope

When is a contractor safety plan required?

This plan governs contracted work as a category. It is the standing rulebook the per-vendor and per-job records are checked against, not those records themselves, and it must not be diluted into a general statement of how the site manages safety.

Use this template when

  • The site engages contractors and needs its requirements on them stated once, owned, and referenced by every prequalification and induction
  • The yearly review of contractor arrangements is due, or an incident, audit or regulatory change has reopened them
  • Contracted work is expanding into new risk, a shutdown, construction, hot work or roof work, and the tiering and supervision rules need to cover it
  • A customer or certification audit requires evidence of how contractor safety and site GMP rules are imposed and checked
  • Contractor performance is drifting and the site needs the scorecard, escalation and removal machinery the plan defines

Do not use it for

  • How the site manages safety as a whole, which is the Safety Management Plan (SAF-121); this plan governs one population, not the system
  • The rules themselves that contractors must follow on the floor, which are the Site Safety Rules (SAF-124); this plan requires that they are provided and links to them by Rules ID
  • The per-vendor prequalification questionnaire and its evidence, which are KnowContractor records raised against each vendor, checked against this plan
  • Authorising a specific piece of high-risk work, which is a permit to work raised for that job on that day, not a standing plan
  • The task-level method for a specific job, which is the contractor's method statement or RAMS, reviewed against this plan but authored by them

Compliance mapping

Which ISO 45001 cl.8.1.4 requirements does this satisfy?

Regulation treats contracted work as a coordination problem between duty holders, not a transfer of duty. Every major regime keeps the host on the hook and adds an obligation to cooperate, coordinate and check.

ClauseRequirementWhere it lands
ISO 45001 cl.8.1.4.1Procurement controls to ensure purchased goods and services, including contracted services, conform to the management system's requirementsRequirements on contractors
ISO 45001 cl.8.1.4.2Coordination with contractors to identify and control the hazards each party's activities create for the other's workers and for others at the workplaceRequirements on contractors
HSWA 1974 s.3 (GB)Duty to conduct the undertaking so that persons not in your employment, including contractors' workers, are not exposed to riskRequirements on contractors
CDM 2015 (GB)Those appointing contractors for construction work must ensure they have the skills, knowledge, experience and organisational capability for itRequirements on contractors
OSHA CPL 02-00-124Multi-employer citation policy: a controlling employer must exercise reasonable care to detect and correct violations on the worksite, including those created by othersSupervision and monitoring
ISO 45001 cl.9.1.1Monitoring and measurement of the extent to which legal and other requirements, including those placed on contractors, are being metSupervision and monitoring
FDA 21 CFR 117 subpart BCurrent good manufacturing practice, including hygiene and plant controls, applies to everyone working in a food plant, not only employeesFood safety requirements
BRCGS Food Safety Issue 9 sec.7Personnel requirements, including hygiene, medical screening and protective clothing, apply to contractors and visitors as they do to staffFood safety requirements

What it does not cover

  • The per-vendor prequalification record, which is raised against each contractor in KnowContractor with its questionnaire, insurance evidence and expiry dates; this plan defines what that record must contain.
  • The permit to work, which authorises one crew to do one high-risk task on one day; this plan requires that permits exist and says which work needs them, but issues none.
  • The method statement or RAMS review, which is a per-job record assessing the contractor's stated method against this plan and the site's conditions.
  • The individual induction record, which evidences that a named person was inducted on a date, with its own expiry; the plan makes induction a condition of access, not a fact.
  • The Site Safety Rules (SAF-124), which are the floor-level rules themselves; this plan links to them by Rules ID and obliges contractors to receive them, but does not contain them.

Global

Contractor Safety Plan requirements by country

The universal principle is that hiring a contractor is not hiring a scapegoat. Jurisdictions differ mainly in how they name the coordinating party and how far up the chain liability travels.

United States

OSH Act; multi-employer citation policy (CPL 02-00-124)

Creating, exposing, correcting and controlling employers can each be cited for the same condition on a shared worksite.

A host that directs or could reasonably detect the work is a controlling employer, and the contractor's citation does not consume the host's.

United Kingdom

HSWA 1974 ss.2–3; CDM 2015 for construction work

Non-delegable duty to persons affected by the undertaking, plus client duties to check capability and make management arrangements for construction.

Hosts are repeatedly convicted for contractor fatalities where selection and supervision were thin; the contract's indemnity clause is irrelevant to the prosecution.

European Union

Framework Directive 89/391/EEC art.6(4)

Where several undertakings share a workplace, employers must cooperate, coordinate protection and prevention, and inform each other of risks.

Coordination is itself the legal duty; a plan that only screens contractors and never exchanges hazard information fails the actual requirement.

Canada

Prime contractor provisions in provincial OHS law (e.g. BC, Alberta)

On multi-employer worksites one party, by designation or by default the owner, holds the coordination duty for the whole site.

If no prime contractor is designated in writing, the duty defaults to the owner, which is usually the host reading this plan.

Australia

Model WHS Act ss.19 and 46

The PCBU's primary duty extends to contractors' workers, and overlapping duty holders must consult, cooperate and coordinate so far as reasonably practicable.

Section 46 makes failure to coordinate an offence in its own right, separate from any injury; the coordination evidence this plan generates is itself the compliance.

International

ISO 45001 cl.8.1.4

Procurement, contractor and outsourcing controls as management system requirements, with hazards controlled in both directions.

Certification auditors test both directions: what your contractors could do to your workers, and what your operations could do to theirs. Most plans only answer the first.

How to complete it

How to complete a contractor safety plan, step by step

The plan's questions are answerable with a Pass and a signature. Whether the programme behind them is real turns on four decisions the form cannot make for you.

Tier by risk, or drown everyone in the same paper

Risk Tiering Defined is the plan's load-bearing answer. A tiering that puts the ammonia-plant refrigeration contractor and the photocopier engineer through the same regime produces two failures at once: the low-risk trades learn the paperwork is theatre, and the reviewers, numbed by volume, rubber-stamp the one file that deserved an hour. State the tiers, what triggers each, and which requirements switch on at each level.

Name a contract owner who actually walks the job

Contract Owner Named For Each Package fails in substance when the named owner is a procurement role who has never seen the work. The owner knows the contractor is on site today, holds the inspection frequency for their tier, and is the escalation point when something is wrong. An orphaned contractor, signed in by security and owned by nobody, is the most common condition found after a contractor incident.

Make stop work authority survive the commercial relationship

The form's own help text says it: contractors are the least willing to stop work. They are paid by milestone, fear being seen as difficult, and assume the site's rules are for the site's staff. The plan must say in words that contractors can and must stop unsafe work, that stopping will never be held against them commercially, and the induction must repeat it. Defining the removal process without the protection for stopping builds a system that punishes honesty.

Write the food safety section for the trades, not the auditor

GMP Requirements Explained is only a Pass when a welder could act on the explanation. That means tools counted in and out, food-grade lubricants named in the method statement, glass and brittle plastic declared before entry, allergen awareness where the work crosses lines, and post-work sanitation handed to quality before the line restarts. A contractor's swarf, lost blade or leaking gearbox is a recall vector, and this plan is the only place the trades will ever hear that.

What auditors find

Most common contractor safety plan findings

Contractor findings cluster in the gap between the file and the site: what was true at prequalification, and what is standing in the plant room right now.

FindingClauseWhat fixes it
Insurance and prequalification current at award, expired mid-contract with the work continuing.ISO 45001 cl.8.1.4.1Drive rechecks off document expiry dates, and make lapsed cover suspend site access automatically.
Subcontractors on site who were never prequalified or inducted; only the principal was assessed.ISO 45001 cl.8.1.4.2Flow requirements down in the contract and verify each individual at the gate against the induction record.
No induction evidence for named individuals working on site, or inductions expired.ISO 45001 cl.8.1.4.2Make Induction Required Before Access a gate condition enforced at sign-in, not a policy statement.
Method statement is the contractor's generic corporate document, not written for this task on this site.CDM 2015Reject generic RAMS at review; require the site's hazards, permits and rules to appear in the method by name.
No named contract owner for the package; nobody on site knew the contractor was working that day.OSHA CPL 02-00-124Name the owner per package in the plan and require their sign-off before each mobilisation.
Site inspection frequency stated as required, with no contractor inspections recorded all year.ISO 45001 cl.9.1.1Set a numeric frequency per risk tier and log the inspections against the package.
Stop work authority not communicated to contractors, or contradicted by milestone penalties.ISO 45001 cl.7.4State the authority and its commercial protection in the plan and the induction, and test it in toolbox talks.
Contractor tools and parts not accounted for after work above open product lines.FDA 21 CFR 117 subpart BRequire a counted tool and part register per job, reconciled before the area is released to production.
Glass and brittle plastic brought into production areas without declaration or registration.BRCGS Food Safety Issue 9 cl.4.9Brief the glass and brittle plastic rules at induction and check contractor kit against them at entry.
Escalation and removal process undefined; repeated violations handled ad hoc and the contractor re-engaged.ISO 45001 cl.8.1.4.1Define the escalation ladder and feed the performance scorecard into the next award decision.

Case in point

Case in point: the immaculate file and the Saturday crew

A dairy processor engaged its long-standing refrigeration contractor for a compressor overhaul, scheduled for a Saturday to avoid production. The prequalification file was exemplary: insurance current, ISO certificates on record, the lead engineer inducted, a method statement on file. The contract manager who owned the package was not on site at weekends, and the plan's inspection frequency for contracted work read as required.

The contractor, short-staffed, sent two fitters from a subcontract labour firm. Neither had been prequalified or inducted; security signed them in against the principal's booking. They completed the overhaul competently but left the plant room short one snapped hacksaw blade, unrecorded because tool accountability appeared nowhere in their briefing. A metal detector found the fragment eleven days later, downstream of product that had already shipped. The withdrawal cost more than the site's annual maintenance budget.

The investigation found no villain. Every control existed on paper: flow-down implied by the contract, induction required before access, tool accountability in the food safety section. What did not exist was anything that operated on a Saturday: no gate check against induction records, no owner present or delegated, no inspection, no reconciliation before the Monday restart. The plan had governed the file, and the file was not what stood in the plant room.

The template

The template, field by field

The form exactly as it installs. Every field, option, score and conditional rule is editable, and the links to other templates come with it.

40fields
4 sections
Reference
SAF-127
Archetype
Plan
Record ID
CSP-2026-000
Scoring
Not scored
Direction
n/a
Singleton
No
Basis
ISO 45001 cl.8.1.4
Links
Links Vendor; feeds KnowContractor
Tags
Programme, Contractor
Sections
4
Fields
40
Follow up fields
3
Repeating sections
0
Links out
4
Field typesOwn ID, generated on saveCase thread and parentPick list from a registryLinked to another templateFollow up, dashed outlineScored

Header

9 fields
Text

Plan ID*

Generated on save

Auto sequence. Format CSP-2026-0000.

The record's own ID. Other templates point at this value.

Single Choice

Status*

Scored

Drives who this goes to next.

  • Planned2 pts
  • In progress2 pts
  • Complete3 pts
  • Deferred0 pts
  • Open0 pts
  • Closed3 pts
  • Overdue0 pts
Text

Plan Version*

Date & Time

Issue Date*

Date & Time

Next Review Due*

Pick List

Site*

From FDN-001 Site NameFilter: Status is Active
Text

Site ID*

Linked

Format SITE-000.

Links to FDN-001 Site ID

Users

Plan Owner*

Users

Approved By*

Requirements on contractors

9 fields
Single Choice

Prequalification Required*

Scored
  • Yes2 pts
  • No0 pts
  • N/Aexcluded from denominator
Single Choice

Insurance Requirements Defined*

Scored
  • Pass2 pts
  • Partial1 pt
  • Fail0 pts
  • N/Aexcluded from denominator
Single Choice

Risk Tiering Defined*

Scored
  • Pass2 pts
  • Partial1 pt
  • Fail0 pts
  • N/Aexcluded from denominator
Single Choice

Induction Required Before Access*

Scored
  • Yes2 pts
  • No0 pts
  • N/Aexcluded from denominator
Single Choice

Competence Verification Required*

Scored
  • Yes2 pts
  • No0 pts
  • N/Aexcluded from denominator
Single Choice

Method Statement Required*

Scored
  • Yes2 pts
  • No0 pts
  • N/Aexcluded from denominator
Single Choice

Permit Requirements Explained*

Scored
  • Pass2 pts
  • Partial1 pt
  • Fail0 pts
  • N/Aexcluded from denominator
Single Choice

Site Rules Provided*

Scored
  • Pass2 pts
  • Partial1 pt
  • Fail0 pts
  • N/Aexcluded from denominator
Text

Rules ID

OptionalLinked

Links to SAF-124 Rules ID

Food safety requirements

6 fields
Single Choice

GMP Requirements Explained*

Scored
  • Yes3 pts
  • No0 pts
Single Choice

Tool And Part Accountability Required*

Scored
  • Yes2 pts
  • No0 pts
  • N/Aexcluded from denominator
Single Choice

Food Grade Materials Required*

Scored
  • Yes3 pts
  • No0 pts
Single Choice

Post Work Sanitation Required*

YesNo
Single Choice

Glass And Brittle Plastic Rules Explained*

Scored
  • Pass2 pts
  • Partial1 pt
  • Fail0 pts
  • N/Aexcluded from denominator
Single Choice

Allergen Awareness Required

OptionalScored
  • Yes2 pts
  • No0 pts
  • N/Aexcluded from denominator

Supervision and monitoring

16 fields
Single Choice

Contract Owner Named For Each Package*

Scored
  • Pass2 pts
  • Partial1 pt
  • Fail0 pts
  • N/Aexcluded from denominator
Single Choice

Site Inspection Frequency Defined*

Scored
  • Pass2 pts
  • Partial1 pt
  • Fail0 pts
  • N/Aexcluded from denominator
Single Choice

Performance Scorecard Used*

Scored
  • Pass2 pts
  • Partial1 pt
  • Fail0 pts
  • N/Aexcluded from denominator
Single Choice

Incident Reporting Expectations Defined*

Scored
  • Pass2 pts
  • Partial1 pt
  • Fail0 pts
  • N/Aexcluded from denominator
Single Choice

Stop Work Authority Extended To Contractors*

Scored

Contractors are often the least willing to stop work. Say explicitly that they can.

  • Pass2 pts
  • Partial1 pt
  • Fail0 pts
  • N/Aexcluded from denominator
Single Choice

Escalation And Removal Process Defined*

Scored
  • Pass2 pts
  • Partial1 pt
  • Fail0 pts
  • N/Aexcluded from denominator
Pick List

Plan Document

OptionalFrom FDN-008 Document TitleFilter: Status is Current
Text

Document ID

OptionalLinked

Format DOC-0000.

Links to FDN-008 Document ID

Single Choice

Action Required*

Scored

Raise the action record, then enter its reference here.

  • No2 pts
  • Yes0 pts
Single Choice

Priority

OptionalScoredShows if Action Required equals Yes
  • High0 pts
  • Medium1 pt
  • Low3 pts
Text

CAPA ID

OptionalLinkedShows if Action Required equals Yes

Format CAPA-2026-00000.

Links to FDN-014 CAPA ID

Users

Action Owner

OptionalShows if Action Required equals Yes
Users

Plan Owner*

Signature

Signature*

Users

Site Manager*

Signature

Second Signature*

SAF-127 · record IDs look like CSP-2026-000 · Links Vendor; feeds KnowContractor

Open in Knowella

Run it with agents

From a document you fill in to a programme that runs itself

The plan is a rulebook, and rulebooks do not watch gates. What fails is the machinery around it: the insurance that expired quietly, the induction that lapsed, the inspection rota nobody ran, the scorecard that never reached the next award decision.

KnowSafe

Holds the plan with its owner and review date, links it to the Site Safety Rules it references, and routes the yearly review before the plan lapses into folklore.

KnowContractor

Runs the per-vendor machinery the plan requires: prequalification records, insurance expiry tracking, induction status per individual, and the performance scorecard that feeds the next engagement.

KnowQuality

Owns the food safety half of the during-work controls, tool and part reconciliation, glass register checks and post-work sanitation release before the line restarts.

Ella
Ella

Watches expiries, inductions and inspection gaps across live packages, and raises the specific lapse, this certificate, this crew, this weekend, instead of a monthly summary nobody reads in time.

This template lives in KnowSafe — safety and compliance. Incidents, hazards, permits, inspections and the critical controls behind them.

Meet KnowSafe→

Glossary

Contractor Safety Plan definitions and key terms

Prequalification
Assessment of a contractor's competence, insurance, systems and history before they are eligible for engagement; a gate into the approved list, not evidence about any specific job.
Risk tiering
Classifying contracted work by the risk it brings, so that the depth of prequalification, method review and supervision scales with the work rather than applying uniformly.
Method statement (RAMS)
The contractor's written description of how a specific task will be done safely, with its risk assessment; authored by the contractor, reviewed by the site against this plan.
Permit to work
A time-bound authorisation for specified high-risk work, hot work, confined spaces, work at height, isolations, issued per job and closed out when the work ends.
Site induction
The briefing an individual must receive before unescorted access, covering site hazards, rules, emergency arrangements and, on food sites, hygiene and GMP; evidenced per person with an expiry.
Stop work authority
The explicit right and expectation that anyone, including a contractor's worker, halts work they believe unsafe, without commercial or personal consequence.
Controlling employer
In OSHA's multi-employer policy, the employer with general supervisory authority over a worksite, who must exercise reasonable care to detect and correct violations even in another employer's work.
Tool and part accountability
Counting tools, parts and consumables into and out of a production area so that anything missing is found before product is, a foreign-body control specific to food and pharma sites.

FAQ

Frequently asked questions about contractor safety plan

If the contractor is prequalified and insured, is the site still liable for their incidents?+

Yes. The duty does not transfer. OSHA's multi-employer policy can cite the host as controlling employer, HSWA section 3 prosecutions of hosts for contractor fatalities are routine in the UK, and the Australian WHS Act extends the PCBU's primary duty to contractors' workers. Prequalification and insurance change who pays damages, not who the regulator charges. What protects the site is evidence of selection, coordination and supervision, which is what this plan generates.

Should stop work authority really extend to contractors?+

Yes, explicitly and in writing. Contractors are the population least likely to stop work: they are paid by milestone, on unfamiliar ground, and afraid of losing the relationship. If the plan does not state that they can stop work and that stopping carries no commercial penalty, the site has an early-warning system with its loudest sensors disabled, and the first notice of a problem will be the incident itself.

How often should contractor work be inspected?+

At a defined numeric frequency set by risk tier, not as required. High-tier work, hot work, roof work, work on ammonia or above open product, warrants presence at the start and daily checks; low-tier work can run on sampling. The number matters less than its existence, because as required resolves to never on exactly the shifts contractors work. Record the inspections against the package so the scorecard has data.

Do the food safety requirements really apply to a plumber or an electrician?+

Yes, and more than to most employees, because trades bring in what production never does: loose fasteners, blades, swarf, non-food-grade lubricants, glass, and clothing that was on another site that morning. 21 CFR 117's GMP provisions apply to everyone working in the plant, and BRCGS extends personnel requirements to contractors and visitors. The plan translates those rules into what a trade actually does: count tools, declare materials, hand the area to sanitation before restart.

Is this one plan per contractor, or one for the site?+

One for the site. The plan states the requirements once; each contractor then has a prequalification record, each job a method statement review and any permits, and each individual an induction record, all checked against this plan. A plan per contractor duplicates the rules, guarantees divergence, and hides the decision that should be central: which tier the work falls into.

What about subcontractors the principal brings in?+

They are the standard failure path, and the plan must name them. Flow the requirements down contractually, require the principal to declare every firm and individual before mobilisation, and verify at the gate that the person entering matches an induction record. The company you prequalified is frequently not the company holding the tools; a gate check against individuals is the only control that closes that gap on the day.

Keep going

Related templates and programmes

Siddarth Singh

Written and reviewed by

Siddarth Singh

Founder & Chief Executive Officer, Knowella

Certified Safety Professional and industrial and systems engineer with more than a decade inside food supply chain, freight and manufacturing operations. This page was written against the current text of the standards it cites, not against secondary summaries of them.

  • Certified Safety Professional (CSP), Board of Certified Safety Professionals
  • MBA, University of Chicago Booth School of Business
  • MS and BS, The Ohio State University, Industrial and Systems Engineering
  • Six Sigma Black Belt
Verify with BCSP →

Sources and last review. Reviewed 16 August 2026 against:

  • ISO 45001:2018 clause 8.1.4, procurement, contractors and outsourcing
  • OSHA CPL 02-00-124, Multi-Employer Citation Policy
  • Health and Safety at Work etc. Act 1974, section 3, and HSE guidance INDG368, Using contractors (GB)
  • Construction (Design and Management) Regulations 2015 (GB)
  • FDA 21 CFR Part 117 subpart B, current good manufacturing practice
  • BRCGS Global Standard Food Safety Issue 9, sections 4.9 and 7
  • Model Work Health and Safety Act, sections 19 and 46 (Australia)

This page is general guidance, not legal advice. Confirm requirements with your jurisdiction’s regulator.

Start in Minutes, Not Weeks

Launch a Ready-Made Template and Customize It Your Way

Every template is fully editable. Adjust fields, workflows, and branding to match your processes, then deploy to your team instantly.