What a Contractor Management System Must Contain

Engaging a contractor does not hand them the risk. The business that engages them remains a PCBU with the primary duty of care to the extent it has influence or control over the work, and section 46 of the WHS Act requires it to consult, cooperate and coordinate with the contractor as a fellow duty holder. After an incident involving a contractor, the questions asked of the engaging business are whether it checked the contractor was competent and insured, whether it inducted them to the site’s hazards, whether it supervised and monitored the work, and whether it acted when it saw something wrong. A contractor management system is the record that those things were done, every time, by a procedure rather than by memory.

The governing document: the business’s policy on when and how contractors are engaged, the categories of contractor and the controls each category attracts, the roles involved (the contractor manager, the site representative, the person who approves prequalification), and the code of practice contractors sign up to on engagement, covering site rules, permits, SWMS, incident reporting and the stop-work authority. Every other document in the system is referenced from this one.

Before a contractor is engaged the system assesses them against defined criteria: safety management system and policy, WHS performance history, licences and competencies for the trade, insurance, previous incidents and prosecutions, and the specific high-risk work they will do. A scoring rubric turns the assessment into a decision that two people would make the same way, and a record that shows the decision was made. Prequalification is renewed on a cycle and when the scope of work changes.

The register records, for every contractor, the public liability policy (most principal contractors and clients require $20 million), workers compensation or personal accident cover for sole traders, professional indemnity where design or certification is involved, and every licence and high-risk work licence the trade needs, each with its expiry. The register is reviewed before engagement and before expiry; a contractor whose cover has lapsed does not work until it is reinstated. This is the document a client’s prequalification and an insurer’s claims assessor ask for first.

Every contractor worker is inducted to the site or the business before starting: the hazards of the place, the site rules, emergency arrangements, the permit-to-work and SWMS requirements, reporting lines and the stop-work authority. The induction package includes the presentation, the acknowledgement the worker signs and the register of who has been inducted and when. Induction is repeated when the site or the rules change.

The system defines what the contractor must supply before high-risk work starts, a SWMS for high risk construction work, a permit for hot work, confined space, isolation, excavation, height and lifting, and who on the engaging side reviews and accepts them. It then sets the monitoring: site inspections, toolbox attendance, review of the contractor’s permits and sign-ons, and the records kept. Monitoring is where most contractor management systems are weakest, because the prequalification was done once and the work is watched by nobody.

The system gives named people the authority to stop contractor work that is unsafe and the forms to record a non-conformance, the corrective action required, the time allowed and the consequence of not fixing it, up to removal from site and from the prequalified list. Without the written authority and the form, stop-work decisions are made late, argued about and not recorded.

A matrix mapping each contractor control to the duty it satisfies: the WHS Act sections on the primary duty, consultation and coordination, the WHS Regulations on high risk construction work and licensing, ISO 45001 clause 8.1.4.2 on contractors, and the state variations, including Victoria’s OHS Act. It is how a business answers an auditor’s "show me where this requirement is met" without a search.

An ISO 45001 auditor asks for the procedure, evidence that contractors were evaluated before engagement, the controls applied to their work and the records of monitoring. A client’s prequalification asks for the same, with the insurance register and incident history. A WHS inspector after an incident asks whether the engaging business knew who was on site, had checked their competence and cover, had inducted them and had supervised the work. One system answers all three if it is kept, which means the registers and the monitoring records have to be live, not written once for the audit.

Contractor management software provides a portal where contractors upload their own insurances and licences, automated expiry chasing, online induction with a quiz, and a dashboard of who is compliant. It suits businesses engaging hundreds of contractors across many sites, and it is priced per contractor or per site, typically from several hundred dollars a month. A document-based system, the policy, the prequalification rubric, the registers, the induction package and the forms kept as controlled documents, does the same job for a principal contractor or a manufacturer engaging dozens of contractors, for a one-off cost, and it is what a software platform is configured from if the business grows into one. The wrong choice is a folder of downloaded forms with no procedure, no register and no one monitoring.