A subcontractor WHS audit is an independent check of whether a subcontractor is working safely and lawfully on a project, measured against defined criteria rather than against impressions. On a construction site, where much of the physical work and a large share of the risk sit with subcontractors, that check is one of the more useful things a principal contractor or a client can do to keep its own duties in order. This article explains what a subcontractor WHS audit is, the legal duties that make it matter, what it should examine, and what separates an audit that carries weight from one that does not.
It builds on the wider work on contractor assurance, including monitoring a principal contractor through delivery and why prequalification is not assurance. The framing follows the model WHS laws, while Victoria operates under its own Occupational Health and Safety Act 2004.
What a subcontractor WHS audit is?
An audit is a systematic, evidence-based comparison of what is actually happening against a defined set of criteria. A subcontractor WHS audit applies that discipline to a subcontractor’s work health and safety arrangements and to its performance on site. It is usually a second-party audit, meaning the party with an interest in the work, the principal contractor or the client, audits the subcontractor. That sits between a first-party audit, where an organisation audits itself, and a third-party audit, where an independent certification body assesses a system against a standard such as AS/NZS ISO 45001. The value of the exercise lies in measuring against criteria fixed in advance, so the result reflects evidence rather than the auditor’s general impression of a site.
Why a subcontractor WHS audit matters?
The reason sits in the duties. A person conducting a business or undertaking owes its primary duty of care not only to the workers it engages, but to workers whose activities it influences or directs, and it owes a duty not to put other people’s health and safety at risk. Where several duty holders share a workplace, each must, so far as is reasonably practicable, consult, cooperate, and coordinate with the others, and each must discharge its duty to the extent of its own capacity to influence and control the work. A principal contractor carries further duties on a construction project, including coordinating the safe work method statements for high-risk construction work and taking all reasonable steps to obtain those statements before the work begins. Auditing subcontractors is how a principal contractor or client turns those duties into something verified rather than assumed.
Officer due diligence reinforces the point. Officers must verify the provision and use of the resources and processes their organisation relies on to control risk, and a subcontractor audit is a direct way to verify that the controls relied on further down the chain are real. The chain is also where visibility tends to fall away, because the further the work travels from the party at the top, the less of it that party sees without deliberately looking.
What a subcontractor WHS audit examines?
A credible audit measures against criteria set before it begins. On a construction project those criteria come from the WHS management plan for the site, the safe work method statements for the high-risk construction work, the legal requirements that apply to the work, and the safety conditions written into the contract. Auditing against a generic checklist that ignores the actual work is one of the most common ways an audit loses its value.
The substance then follows the risk. For high-risk construction work, the regulation requires a safe work method statement that identifies the work, states the hazards and the risks, and describes the control measures and how they are implemented, monitored, and reviewed, and it requires arrangements to ensure the work is carried out in accordance with that statement. So the audit checks that the statements exist, that they match the work in front of them, and that they are actually followed on site rather than filed and forgotten. Beyond that, it examines plant and equipment and its maintenance, the licences and competencies of the people doing high-risk work, induction and supervision, permit systems for activities such as hot work or confined space entry, incident reporting and the response to it, and how the subcontractor manages its own workers and any lower-tier subcontractors it brings onto the site.
What gives an audit credibility
A subcontractor WHS audit is only as good as the rigour behind it. Recognised practice for auditing management systems, set out in the international standard ISO 19011, rests on a few principles that are worth holding to. The audit is planned against a defined scope and criteria rather than improvised. The findings are based on evidence gathered by more than one means, combining a review of documents with observation of the work, interviews with the people doing it, and sampling of actual records rather than templates. The auditor is competent in the work being audited and independent enough of it to report what is found without fear or favour. An audit that rests on a single site walk, or on the subcontractor’s own paperwork taken at face value, does not meet that standard, whatever it is called.
Findings and corrective action
An audit earns its keep at the point of findings. Each nonconformity should be recorded against the criterion it fails, rated by the risk it carries, and assigned a corrective action with an owner and a timeframe, the more serious the finding the shorter the time and the closer the follow-up. Findings raised and never closed are worse than no audit at all, because they put the party on notice of a problem it then failed to fix. Closing the loop, by verifying that each corrective action was completed and has held, is what turns an audit from a document into a control. Where a safe work method statement is found wanting, the regulation’s own requirement to review it provides the route to putting it right.
How often should I complete a sub-contractor WHS Audit?
Frequency follows risk. A subcontractor carrying out significant high-risk construction work, or one new to the project or to the principal contractor, warrants earlier and closer auditing than a long-known subcontractor on low-risk work. A subcontractor WHS audit is not the same thing as prequalification, which confirms a baseline at a point in time and says nothing about performance on this site, and it is one of the main tools of monitoring a project through delivery. Done and recorded properly, it also forms part of the evidence that the principal contractor and its officers verified the safety of the work rather than took it on trust.
How Safetysure can help
Safetysure conducts independent subcontractor WHS audits for principal contractors and clients, from Brisbane and across Australia, including for government agencies. The firm audits against the WHS management plan, the safe work method statements, and the law, tests the site reality through observation, interviews, and records rather than paperwork alone, and reports findings with risk-rated corrective actions that can be tracked to closure. This sits within the firm’s safety auditing and WHS audit work, and the wider task of managing contractors and their WHS responsibilities. For clients that want oversight maintained across a program of work, outsourced safety places a retained adviser alongside the project team, and the approach connects to the wider question of principal contractor WHS due diligence. To discuss a subcontractor audit or an audit program, the team can be reached through the contact page or on 1300 087 888.
Safetysure is an ISO 9001/45001/14001-accredited workplace health, safety and occupational hygiene consultancy based in Brisbane. This article is general information and not legal advice. Duty holders should verify current obligations against the legislation applicable in their jurisdiction.
Frequently asked questions
What is a subcontractor WHS audit?
An independent, evidence-based check of whether a subcontractor is working safely and lawfully, measured against defined criteria such as the WHS management plan, the safe work method statements, and the legal requirements for the work. It is usually a second-party audit, conducted by or for the principal contractor or client rather than by the subcontractor itself.
Why audit a subcontractor that already has its own WHS system or is prequalified?
Because neither confirms performance on this site. A management system and a prequalification listing show capability in general and at a point in time. An audit verifies that the controls are actually in place and followed on the project, which is what the law expects a principal contractor and its officers to check rather than assume.
What does a subcontractor WHS audit examine?
The safe work method statements for high-risk construction work and whether the work follows them, plant and equipment, licences and competencies, induction and supervision, permit systems, incident reporting and response, and how the subcontractor manages its own workers and lower-tier subcontractors, all measured against criteria set before the audit begins.
Who should conduct a subcontractor WHS audit?
Someone competent in the work being audited and independent enough of it to report what is found. Recognised practice for auditing management systems, set out in ISO 19011, calls for evidence gathered by more than one means and findings measured against defined criteria, rather than a single walk-through or a review of the subcontractor’s own paperwork.
How often should subcontractors be audited?
In proportion to risk. A subcontractor doing significant high-risk construction work, or one new to the project, warrants earlier and more frequent auditing than a long-known subcontractor on low-risk work. The aim is to verify at the points where a control failing would matter most.
You might like to read How often should you conduct WHS Audits