What this is
What is a contractor site safety audit?
What is a contractor site safety audit?
A contractor site safety audit is a check, carried out while the contractor is actually working, of whether their permit, method statement and risk assessment match what the crew is doing. It examines documentation at the workface, the people present, and their practices, and it is distinct from an audit of the contractor's records held in an office.
Who should carry out a site safety audit?
Safety personnel or the contract owner, ideally someone who can recognise the hazards of the work being done and is not the person who approved the method statement. Auditing your own approval is a weak check; a second set of eyes catches what the approver assumed away.
How is a site safety audit different from a documentation audit?
A site safety audit is a physical, on-the-ground check of conditions and behaviour: is the crew wearing the right PPE, is isolation applied, is the exclusion zone up. A documentation audit is a paperwork check of whether records, permits and training evidence exist and are current. The two use different evidence and answer different questions.
Scope
When is a contractor site safety audit required?
This audit is one step in a larger programme, and its boundary with the documentation audit is the one people cross most often. Using a records check to answer a site-conditions question, or vice versa, produces a record that does not stand up.
Use this template when
- A significant work package by a contractor is underway on your site
- You want to verify a method statement or permit is actually being followed, not just that one exists
- A previous finding, incident or near miss suggests the crew's practice does not match what was approved
- You are running an unannounced or penetration-style check as part of the audit schedule
- A linked record needs this one to exist: links vendor; feeds finding
Do not use it for
- Contractor Documentation Audit, which checks whether the contractor's records, permits and training evidence are complete and current, not what the crew is doing today
- Contractor Equipment Verification, which checks that equipment brought on site is inspected, certified and fit for use
- Subcontractor Verification Audit, which checks that subcontractors have been vetted to the same standard as the main contractor
- Contractor Method Statement Review, which reviews and approves the method statement before work starts, rather than checking it is followed once it does
- Anything outside KnowContractor, which belongs in the workspace that owns that process
Compliance mapping
Which ISO 19011 requirements does this satisfy?
ISO 19011 does not set safety requirements; it sets the method for running the audit itself, and the safety content comes from the host site's own rules, the contractor's method statement, and the general duty each jurisdiction places on whoever controls the workplace.
| Clause | Requirement | Where it lands |
|---|---|---|
| ISO 19011 cl.6.3 | Preparing audit activities: defining scope, audit type and criteria before the visit | Header |
| ISO 19011 cl.6.4.7 | Collecting and verifying information through observation, interview and document review at the point of work | Documentation at the workface |
| OSHA multi-employer worksite doctrine (CPL 02-00-124) | Controlling and host employers have a duty to identify and address hazards created by contractors on their site | People |
| HSE CDM 2015 reg.13 | Principal contractor plans, manages and monitors the construction phase, including contractor competence and coordination on site | Work practices |
| Codex Alimentarius CXC 1-1969 | General principles of food hygiene applied to anyone, including contractors, working in or near production areas | Food safety practices |
| ISO 19011 cl.6.4.8 | Generating audit findings by evaluating evidence against the audit criteria | Findings |
| ISO 19011 cl.6.7 | Conducting audit follow-up to verify that agreed actions were completed and effective | Result |
What it does not cover
- Contractor Documentation Audit, which is the paperwork check that records, permits and training evidence exist and are current, and is not answered by watching the work.
- Contractor Equipment Verification, which is a dedicated check of inspection tags, certification and fitness for use for equipment brought on site.
- The permit-to-work approval itself, which is a separate authorisation issued before the work starts, not evidenced retrospectively by this audit.
- A general risk assessment of the task, which belongs with the contractor's own method statement and risk assessment, reviewed and approved before work begins.
- Formal investigation of an incident found during the audit, which needs its own record and, where the incident was unreported, a review of the contractor's reporting obligation.
Global
Contractor Site Safety Audit requirements by country
The duty to control contractor safety on your own site is close to universal. What differs is how directly the regulator ties that duty to the host, rather than leaving it entirely with the contractor's own employer.
OSH Act General Duty Clause and multi-employer worksite doctrine
A host or controlling employer can be cited for hazards created by a contractor if it knew or should have known and failed to act.
Watching the work is not a courtesy; it is how a host employer builds the evidence that it exercised reasonable care over a contractor it does not directly supervise.
Construction (Design and Management) Regulations 2015; Health and Safety at Work etc. Act 1974
The principal contractor has an explicit duty to plan, manage and monitor the construction phase, and duty holders more broadly must ensure the safety of others affected by their undertaking.
Monitoring is a named duty, not an optional check, wherever CDM applies, and the audit record is direct evidence of it being discharged.
ISO 19011
Defines how to plan, conduct and follow up an audit and how to judge the competence of the auditor doing it.
A site audit that skips planning the scope or skips the follow-up step is procedurally weaker even where its individual findings are correct.
How to complete it
How to complete a contractor site safety audit, step by step
The template prompts for what to check. It does not prompt for the judgement calls that decide whether the audit actually tested anything.
The info field on this template says it plainly: stand and watch for ten minutes before asking questions. An auditor who starts with the method statement and works outward from it tends to confirm what the document says rather than notice what it does not cover.
A signed briefing sheet proves someone was present in the room. Asking a worker what the main hazard of the job is proves, or disproves, that the briefing actually landed. The help text on this field exists because the two are routinely mistaken for each other.
Isolation being applied and the contractor's own locks being on it are different facts. A site lock alone means the contractor's crew can be exposed if someone releases it without knowing the crew is still working, which is exactly the scenario positive isolation is meant to prevent.
On a production site, a contractor eating in the production area or leaving loose fixings near a line is not a housekeeping footnote; it is a contamination pathway with the same seriousness as a missing exclusion zone, and the audit should not let one category read as more optional than the other.
What auditors find
Most common contractor site safety audit findings
The findings below are the ones that recur once an audit is actually run at the workface rather than in the site office.
| Finding | Clause | What fixes it |
|---|---|---|
| Crew working to a different method than the approved method statement, with no variation raised. | HSE CDM 2015 reg.13 | Stop and correct the deviation on the day; require a documented variation before work resumes if the method has genuinely changed. |
| Worker cannot state the main hazard of the task despite a signed briefing record. | ISO 19011 cl.6.4.7 | Treat the briefing as not delivered; require it to be repeated and re-verify by asking a different worker. |
| Undeclared subcontractor or worker present who is not on the register. | OSHA multi-employer worksite doctrine (CPL 02-00-124) | Remove the individual from site until inducted and added to the register; treat as a control failure by the contractor, not an admin gap. |
| Contractor's own isolation locks not applied, relying on the site's lock alone. | HSE CDM 2015 reg.13 | Stop work until the contractor applies its own lock; do not accept the site lock as a substitute. |
| Loose fixings, unprotected glass or unsecured tools near production, or eating observed in the production area. | Codex Alimentarius CXC 1-1969 | Clear the area and correct the practice before work continues; log as a food safety finding, not a general housekeeping note. |
| Exclusion zone not maintained or only partly marked around active work at height or with mobile equipment. | ISO 19011 cl.6.4.8 | Reinstate the zone before observation continues; where it had already lapsed, raise a finding rather than treating the correction as closing the matter. |
Case in point
Case in point: the audit that passed on paper twice
A meat processing site ran an announced audit of a refrigeration contractor working in the chill store. The method statement was on site, the risk assessment was current, the crew was briefed, and PPE was correct. The audit passed and was filed alongside a clean review from the previous year.
Four months later an unannounced audit of the same contractor, on a different job, found the crew working without their own isolation locks on a compressor, relying on a site lock applied earlier that day by someone who had since left the building. The method statement specified positive isolation with the contractor's own lock throughout. It had never been checked at the workface, because both prior visits were announced and both happened to catch the crew doing the job correctly that day.
The template
The template, field by field
The form exactly as it installs. Every field, option, score and conditional rule is editable, and the links to other templates come with it.
7 sections
- Reference
- CON-025
- Archetype
- Audit
- Record ID
- AUD-2026-000
- Scoring
- Weighted percent
- Direction
- High is good
- Singleton
- No
- Basis
- ISO 19011
- Links
- Links Vendor; feeds Finding
- Tags
- Contractor, Audit
- Sections
- 7
- Fields
- 67
- Follow up fields
- 9
- Repeating sections
- 1
- Links out
- 5
Header
14 fieldsAudit ID*
Auto sequence. Format AUD-2026-00000.
The record's own ID. Other templates point at this value.
Status*
Drives who this goes to next.
- Planned2 pts
- In progress2 pts
- Complete3 pts
- Deferred0 pts
- Open0 pts
- Closed3 pts
- Overdue0 pts
Date and Time*
Completed By*
Site*
Site ID*
Format SITE-000.
Links to FDN-001 Site ID
Contractor*
Vendor ID*
Format VEN-0000.
Links to FDN-005 Vendor ID
Area
The area within the site.
Exact Location
Drop a pin for anything hard to find.
Audit Type*
- Announced1 pt
- Unannounced3 pts
- Penetration style test4 pts
Auditor*
Work Package
Watch The Work, Not The Folder
The most useful contractor audit happens while they are working. Turn up unannounced, stand and watch for ten minutes, then start asking questions.
Documentation at the workface
6 fieldsPermit Present And Valid*
- Yes3 pts
- Not required3 pts
- No0 pts
Method Statement Available*
- Yes3 pts
- No0 pts
Risk Assessment Available*
- Yes3 pts
- No0 pts
Crew Briefed On Content*
Ask a worker what the main hazard is. If they cannot say, the briefing did not happen.
- Yes3 pts
- Partly1 pt
- No0 pts
Working To The Method Statement*
- Yes3 pts
- Partly1 pt
- No0 pts
Deviations Observed*
- None3 pts
- Minor1 pt
- Significant0 pts
People
6 fieldsAll Workers Inducted*
- Yes3 pts
- No0 pts
Induction Cards Checked
Anyone Not On Register*
- No3 pts
- Yes0 pts
Competency Evidence Available*
- Yes3 pts
- Partly1 pt
- No0 pts
Supervisor On Site*
- Yes3 pts
- No0 pts
Undeclared Subcontractors Present*
- No3 pts
- Yes0 pts
Work practices
9 fieldsCorrect PPE Worn*
- Yes3 pts
- Partly1 pt
- No0 pts
Isolation Applied Correctly*
- Yes3 pts
- Not required3 pts
- No0 pts
Their Own Locks Applied*
- Yes3 pts
- Not required3 pts
- No0 pts
Exclusion Zone In Place*
- Yes3 pts
- Partly1 pt
- No0 pts
Access Equipment Used Correctly*
- Yes3 pts
- Partly1 pt
- No0 pts
Housekeeping Standard*
- Good3 pts
- Acceptable2 pts
- Poor0 pts
Equipment Inspected And Tagged*
- Yes3 pts
- Partly1 pt
- No0 pts
Electrical Equipment Safe*
- Yes3 pts
- Concerns1 pt
- No0 pts
Waste Managed Correctly*
- Yes3 pts
- Partly1 pt
- No0 pts
Food safety practices
8 fieldsGMP Rules Followed*
- Yes3 pts
- Partly1 pt
- No0 pts
Protective Clothing Correct*
- Yes3 pts
- Partly1 pt
- No0 pts
Tools Accounted For*
- Yes3 pts
- Partly1 pt
- No0 pts
Product Protected Or Removed*
- Yes3 pts
- Not applicable3 pts
- No0 pts
Screening In Place*
- Yes3 pts
- Not required3 pts
- No0 pts
Food Grade Materials In Use*
- Yes3 pts
- Not applicable3 pts
- No0 pts
No Loose Items Or Glass Risk*
- Confirmed3 pts
- Some1 pt
- Significant0 pts
Eating Or Drinking In Production*
- None observed3 pts
- Observed0 pts
Findings
Repeats7 fieldsResult*
- Pass3 pts
- Pass with conditions2 pts
- Fail0 pts
Severity
- Minor3 pts
- Moderate1 pt
- Serious0 pts
Element Tag
Groups deficiencies by hazard type across every template.
Deficiency Detail
Photo Evidence
Fixed On The Spot
Finding ID
Raise a finding record where this needs tracking to closure.
Links to FDN-015 Finding ID
Result
17 fieldsItems Assessed*
Excludes anything marked N/A.
Items Failed*
Score Percent*
Calculated on submission. High is good. N/A items leave the denominator.
Result Band*
- Pass3 pts
- Caution1 pt
- Fail0 pts
Completeness Percent*
How much of the template was actually answered. A high score on a half completed form is not a high score.
Work Stopped*
- Not required3 pts
- Yes2 pts
- No0 pts
Violation Record ID
Links to CON-015 Violation ID
Feeds Scorecard*
Action Required*
Raise the action record, then enter its reference here.
- No2 pts
- Yes0 pts
Priority
- High0 pts
- Medium1 pt
- Low3 pts
CAPA ID
Format CAPA-2026-00000.
Links to FDN-014 CAPA ID
Action Owner
Next Audit Due*
Auditor*
Signature*
Contractor Supervisor*
Second Signature*
CON-025 · record IDs look like AUD-2026-000 · Links Vendor; feeds Finding
Open in KnowellaRun it with agents
From a document you fill in to a programme that runs itself
The audit is one visit. What decides whether it changes anything is whether the finding reaches an owner, and whether the next visit checks whether it stuck.
Holds the audit against the contractor's approval status and work package, and links a serious finding straight to the vendor's record.
Tracks isolation, PPE and exclusion zone findings against the site's own hazard register, so a recurring gap on one contractor is visible against the pattern across all of them.
Picks up food safety practice findings from a contractor audit and folds them into the same corrective action process used for internal GMP non-conformances.
Watches for a work-stopped result or an unannounced audit that scores worse than the last announced one, and raises the pattern rather than waiting for the next scheduled visit.
This template lives in KnowContractor — contractor management. Prequalification, approval, induction, permits and performance.
Meet KnowContractor→Glossary
Contractor Site Safety Audit definitions and key terms
- Method statement
- The contractor's own document describing how a specific task will be carried out safely, including sequence of work, equipment and controls.
- Positive isolation
- Isolating an energy source in a way that cannot be defeated accidentally, typically with a lock the isolating person alone can remove.
- Exclusion zone
- A defined and marked area kept clear of people not involved in the work, used where the hazard could affect anyone passing nearby.
- Penetration-style test
- An audit style that deliberately probes for weaknesses the contractor would not expect to be tested, rather than checking against a known list.
- Weighted percent
- A score where items are not all worth the same amount, so a failure in a higher-weighted area pulls the overall score down more than a minor one.
FAQ
Frequently asked questions about contractor site safety audit
Should the audit be announced or unannounced?+
Both, over time. An announced audit is useful for planned, high-risk work packages where you want the contractor's supervisor present to walk it with you. An unannounced or penetration-style audit is the one that tells you what happens when nobody is expecting to be watched, and it should not be the only kind you run, or the only kind you skip.
What if the crew is working correctly but the paperwork on site is wrong?+
Record both facts. Correct working practice does not excuse an invalid or missing permit, and a valid permit does not excuse practice that has drifted from it. The two document fields exist separately because they fail independently.
Who should carry out the audit?+
Safety personnel or the contract owner, and ideally not the same person who approved the method statement being checked. A second set of eyes is more likely to notice where the approved method and the observed method have quietly diverged.
What happens when the audit finds a serious deviation?+
Work is stopped, recorded through the work-stopped field, and an action is raised with an owner and priority. A serious finding on this audit is not filed for later; the template is built to route it to a tracked action immediately.
How does the score account for a half-completed audit?+
Separately from the pass score. The completeness percentage tracks how much of the template was actually answered, so a high pass score on a half-finished audit is visibly flagged as such rather than read as a clean result.
Do undeclared subcontractors always fail the audit?+
Effectively, yes, because the field scores zero and it typically points to a wider control gap: if the contractor is running people who never went through induction, the induction and register controls have already failed before the audit started.
Keep going
Related templates and programmes
Industries this is written for
Programmes this belongs to
Used together in Contractor Onboarding and Management
Contractor Prequalification Questionnaire
Collects a contractor's safety, insurance, training and performance information before they are approved
Contractor Safety Statistics Review
Reviews a contractor's injury rates, citations and experience modifier over recent years
Contractor Risk Classification
Classifies a contractor by the risk of the work they do, from low risk services to high risk construction
Contractor Approval Record
Records the decision to approve a contractor to work on site
Contractor Safety Program Review
Reviews the contractor's own written safety programme against your requirements
Subcontractor Declaration
Records any subcontractors a contractor intends to use
More in Contractor Audits
Contractor Documentation Audit
Audits whether the contractor's records, permits and training evidence are complete and current
Contractor Equipment Verification
Checks that contractor equipment brought on site is inspected, certified and fit for use
Subcontractor Verification Audit
Checks that subcontractors have been vetted to the same standard as the main contractor
Contractor Audit Follow Up
Checks whether a contractor has closed the actions raised in a previous audit
Written and reviewed by
Siddarth Singh
Founder & Chief Executive Officer, Knowella
Certified Safety Professional and industrial and systems engineer with more than a decade inside food supply chain, freight and manufacturing operations. This page was written against the current text of the standards it cites, not against secondary summaries of them.
- Certified Safety Professional (CSP), Board of Certified Safety Professionals
- MBA, University of Chicago Booth School of Business
- MS and BS, The Ohio State University, Industrial and Systems Engineering
- Six Sigma Black Belt
Sources and last review. Reviewed 16 August 2026 against:
- ISO 19011:2018 — Auditing management systems, clause 6
- OSHA multi-employer worksite doctrine, CPL 02-00-124
- Construction (Design and Management) Regulations 2015, regulation 13 (UK)
- Codex Alimentarius CXC 1-1969, General Principles of Food Hygiene
This page is general guidance, not legal advice. Confirm requirements with your jurisdiction’s regulator.