Contractor management is where visitor management stops being a courtesy and starts being evidence. A visitor signs in and leaves. A contractor arrives with a permit, a method statement, an induction and an insurance certificate, and if something goes wrong you have to produce all four. Here is what the term actually covers and where most sites are exposed.
What is contractor management?
Contractor management is the process of controlling and recording third-party workers on your site. It spans three moments: the checks done before they arrive, the induction and sign-in on the day, and the record you keep afterwards.
The distinction from ordinary visitor handling is not the person, it is the work. A contractor performs a task, which brings permits to work, method statements and safety duties into scope. That changes what a good record looks like.
Why it sits with facilities rather than procurement
Procurement owns the commercial relationship with the contractor company. Facilities owns what happens at the door on the day, which is where the risk actually lands. The two are frequently disconnected: procurement holds the insurance certificate in a supplier file, and reception has no way to see that it expired last month.
That gap is the single most common finding when a site is audited. The evidence exists somewhere in the organisation, but not at the point and time it was needed.
What good looks like, before they arrive
| Requirement | Visitor | Contractor |
|---|
| Name and host recorded | Yes | Yes |
| Timestamped arrival and departure | Yes | Yes |
| Company-level record | Rarely needed | Required, you report by contractor |
| Insurance evidence with expiry | No | Required before arrival |
| Competency and qualification check | No | Required, task specific |
| Risk assessment and method statement | No | Required, with reviewer recorded |
| Permit to work | No | Where the task demands it |
| Induction with version recorded | Sometimes | Required |
| Record must survive an audit | Helpful | Essential |
Confirm the scope of works and who owns it on your side. Collect insurance certificates and check the expiry dates rather than just their presence. Collect the risk assessment and method statement, and record who reviewed them. Check competency evidence for the specific task, not the company in general. Issue the permit where the task requires one, and record its validity window.
Where you engage a contractor directly rather than through a supplier, establish who holds the right to work obligation before work starts.
What good looks like, on the day
Sign the contractor in against their company, not just as an individual, so you can report by contractor later. Run the induction and record which version they saw, because site rules change and an induction record without a version is weak evidence. Capture the host and the areas they are cleared for. Give them a badge that is visibly different from a standard visitor badge. Confirm the emergency arrangements and the muster point, and log that you did.
What good looks like, afterwards
Sign them out, with an automatic close-off for anyone who forgets, because an open record makes your evacuation list wrong. Retain the induction against the person and the version. Then test yourself against the question an auditor asks: who was on this site on this date, from which contractor, inducted when.
Set a retention period and apply it. Keeping everything indefinitely solves the audit problem and creates a data protection one.
Where sites are usually exposed
Contractors tracked in a separate book from visitors, so no single list exists. No sign-out, so nobody can say when the site was clear. Insurance and competency evidence held centrally but invisible at the door. Induction records with no version. And the one that only surfaces during a drill: contractors missing entirely from the roll call.
How to start
Pick one site and answer the auditor question for a date last month. Whatever you cannot answer in ten minutes is your gap, and it is usually the same gap at every other site you run.
Our contractor compliance pack is the checklist and record structure behind this article, free to download.
References
General information, not legal advice. Confirm what applies to your jurisdiction, sector and site.