In major projects and complex organisations, contractors are often the front line of delivery. They construct our infrastructure, maintain critical assets, execute shutdowns, provide specialist services and, in many cases, undertake some of the highest-risk activities within an organisation.
Yet contractor safety management is still too often treated as a compliance exercise.
We prequalify. We issue contracts. We induct. We audit. We collect statistics.
Then we assume the system is working.
The difficulty is that compliance tells us whether certain requirements exist. It does not necessarily tell us how mature an organisation is in managing contractor risk.
That distinction becomes increasingly important as organisations grow, projects become larger, supply chains become more complex and multiple layers of subcontracting are introduced.
Moving Beyond the Checklist
In my book, Contractor Safety Management: From Compliance to Culture, I examine contractor safety through international case studies and major incidents. What becomes apparent when studying serious failures is that they rarely sit neatly within one department, one procedure or one contractor.
They develop across interfaces.
Procurement decisions influence contractor capability. Contract conditions influence behaviour. Leadership decisions influence priorities. Supervision affects operational control. Culture determines whether people are prepared to challenge unsafe decisions. Communication determines whether critical information reaches the people who need it.
This is why contractor management must be viewed as a system rather than a collection of individual HSE activities.
One way of doing this is through a maturity model.
The Contractor Safety Management Maturity Assessment we developed looks beyond individual procedures and considers contractor management across ten interconnected pillars: Governance & Accountability; Contractor Selection & Prequalification; Risk Assessment & Work Planning; Leadership & Safety Culture; Training & Competence Assurance; Operational Control; Contractor Performance Intelligence; Incident Learning & Assurance; Contractor Welfare & Human Factors; and Technology & Future Readiness. Demoura Lawson Consulting
The objective is not simply to ask:
"Do we have a procedure?"
The more important questions are: How effectively is it implemented? How consistently is it applied? How well do the different parts of the system connect? And what happens when the organisation comes under pressure?
Major Incidents Show Why This Matters
Consider Grenfell Tower.
The tragedy cannot be understood by examining one contractor or one technical decision in isolation. It involved a complicated network of clients, designers, contractors, subcontractors, suppliers, regulatory requirements and decisions made over time.
From a contractor-management perspective, the lesson is powerful: accountability can become dangerously diluted when responsibility passes through multiple organisational interfaces.
The Florida International University pedestrian bridge collapse provides another important lesson. Complex engineering projects require technical competence, but they also require effective escalation, communication and decision-making when warning signs emerge.
A technically capable contractor-management system must therefore also be a learning and communication system.
The Deepwater Horizon disaster demonstrates the same principle on a very different scale. Multiple organisations were operating together within a highly complex, high-hazard environment. Decisions were being made across organisational boundaries where operational, commercial and safety considerations intersected.
For organisations managing major contractors, the lesson is not that contractors require more paperwork. It is that interfaces between companies must be deliberately engineered and actively managed.
The Hyatt Regency walkway collapse remains another powerful example of how changes in design, communication and responsibility can combine with catastrophic consequences. A seemingly technical change can travel through a contracting chain without the overall risk being fully recognised.
We can see similar lessons when looking at other major industrial and infrastructure failures. Different industries, different countries and different decades can reveal remarkably similar organisational weaknesses: unclear accountability, inadequate competence assurance, poor communication, fragmented oversight, ineffective learning and a failure to recognise how decisions in one part of the contracting system create risk somewhere else.
Maturity Means Understanding the Whole System
A mature contractor-management organisation does not wait until mobilisation to start managing safety.
Safety begins when the organisation decides what it is going to outsource and why.
It continues through contractor selection, prequalification, procurement, contract development, planning, mobilisation, competence verification, supervision, performance monitoring, incident learning and, finally, contract close-out.
The strongest organisations also understand that all contractors should not be managed identically.
Risk should determine the level of governance.
A contractor servicing office equipment does not require the same assurance framework as a contractor undertaking confined-space entry during a refinery shutdown.
Maturity therefore means moving from standardisation alone towards intelligent, risk-based control.
It also means changing what we measure.
Traditional contractor KPIs frequently concentrate on lagging indicators: injuries, lost-time incidents and recordable cases. These remain important, but they tell us primarily what has already happened.
A mature system asks different questions.
Are critical controls being verified?
Are supervisors competent?
Are contractor concerns being escalated?
Are corrective actions actually reducing recurring risk?
Are procurement decisions introducing new vulnerabilities?
Are subcontractors being governed to the same expected standard?
Are we learning before an incident rather than after one?
That is where contractor performance intelligence becomes far more valuable than simply collecting statistics.
From Compliance to Culture
Ultimately, the purpose of a maturity model is not to create another score.
It is to create a roadmap.
An organisation should be able to understand where it currently stands, where its vulnerabilities exist and what needs to change to reach the next level of maturity.
Some organisations will need stronger governance.
Others may have excellent procedures but weak field implementation.
Some may have strong operational controls but insufficient contractor-selection processes.
Others may collect enormous quantities of data without converting that information into meaningful decisions.
The value of a structured maturity assessment is that it makes those gaps visible.
This philosophy sits at the heart of the wider Contractor Safety Management approach and the principles I explore in Contractor Safety Management: From Compliance to Culture: progressing from basic compliance, through increasingly systematic and proactive management, towards a culture where contractor safety becomes integrated into the way an organisation makes decisions.
For large organisations and global projects, I believe this systematic approach is becoming essential.
Contractors should never sit outside an organisation's safety culture simply because they sit outside its payroll.
If their people are undertaking work on our behalf, interacting with our operations, representing our projects and being exposed to risks created through our decisions, contractor safety becomes a shared organisational responsibility.
The question for leadership is therefore no longer simply:
"Are our contractors compliant?"
The more valuable question is:
"How mature are we as an organisation in the way we manage our contractors?"
That is a considerably harder question to answer.
But it is also the question that can expose weaknesses before an incident does.
Adel Lawson, CFIOSH
Author of Contractor Safety Management: From Compliance to Culture
For further information on Contractor Safety Management: From Compliance to Culture, including the case studies, frameworks and practical approaches to contractor governance, risk and safety culture discussed in the book, visit Routledge / CRC Press – Contractor Safety Management: From Compliance to Culture.