11.2 Contractor Prequalification, Selection, and Onboarding

Contractor safety starts before the bid is awarded

Domain 9 explicitly tests "legal liability regarding contractor management." Contractor risk is easiest and cheapest to control before the contractor arrives. The scope of work should describe the task, location, schedule, expected hazards, required permits, required qualifications (e.g., competent-person coverage), site rules, equipment interfaces, and emergency expectations.

If the scope is vague, the contractor prices the job without understanding confined spaces, energy isolation, hot work, elevated work, traffic, chemical exposure, or production hazards. A low bid is not a bargain if it depends on unsafe assumptions. The lifecycle is: define the scope, prequalify, select, onboard, coordinate daily, verify in the field, and close out with lessons learned. A scope change, a new subcontractor, or a new hazard should loop the process back through review before work continues.

The legal anchor: PSM contractor provisions

For hosts covered by OSHA's Process Safety Management (PSM) standard, 29 CFR 1910.119(h), contractor evaluation is not optional good practice; it is a legal duty. The host employer must obtain and evaluate the contract employer's safety performance and programs, inform contractors of the known potential hazards of the process, explain the emergency action plan, and develop and implement safe work practices to control contractor entrance and presence. The contract employer in turn must train its workers, document that training, and ensure its workers follow the host's safety rules.

Even outside PSM, this exchange is the template the exam expects: the host shares its hazards, the contractor shares the hazards it brings, and both verify training. A certificate of insurance does not satisfy this duty; capability evaluation does.

What prequalification actually reviews

Prequalification decides whether the contractor can do the work safely, not merely whether paperwork exists. Common screening criteria:

Many hosts use third-party platforms (ISNetworld, Avetta, Veriforce) to standardize this review. The TRIR formula is (number of recordable cases x 200,000) / total hours worked, where 200,000 represents 100 full-time workers over a year. The companion DART rate uses the same denominator but counts only Days Away, Restricted, or Transferred cases, isolating the more serious injuries. A common exam distractor is selecting a contractor purely on low bid; the defensible criterion set weighs EMR, TRIR, DART, program completeness, and citation history together, because a single favorable metric can mask a weak overall safety system.

Onboarding turns paper into behavior

Onboarding converts prequalification into site behavior. The contractor crew should receive site-specific hazards, emergency alarms, evacuation routes and muster points, restricted areas, security rules, reporting expectations, the permit systems in use, communication contacts, incident-reporting steps, injury-treatment procedures, and stop-work authority. The host should also learn what hazards the contractor brings: chemicals, equipment, stored energy, noise, mobile equipment, dust, or ignition sources.

A practical contractor file documents the whole lifecycle:

• Defined scope of work and hazard expectations.
• Prequalification review and approval notes (EMR, TRIR, programs).
• Insurance and contract documents routed through procurement or legal.
• Site orientation records and required training evidence.
• Permits, JHAs, and daily coordination notes.
• Inspection findings, corrective actions, and closeout records.

Field verification and closeout without overreach

Field verification is not taking over the contractor's work. The host or construction manager may inspect the work area, confirm permits are active, check that controls match the JHA, and require correction of site-rule violations. The contractor's employer still owns the duty to supervise, train, provide competent oversight, and maintain its equipment. The exam tests this boundary: the host verifies site-rule compliance without assuming the role of the contractor's direct supervisor.

Closeout is part of contractor management. At job end, confirm temporary controls are removed safely, affected equipment is returned to a safe state (lockout cleared, guards reinstalled), waste and materials are handled as planned, and open corrective actions are closed. A short post-job review captures lessons about scope clarity, permit quality, and coordination gaps before the next purchase order. Weak exam answers "let the contractor handle everything," "choose the lowest bidder," or "assume insurance makes the job safe" all ignore the host's nondelegable duty to coordinate known hazards.

A worked example ties the lifecycle together: a host hires a roofing contractor. Define scope (membrane replacement, fall hazard above 6 feet, hot-work torch, propane storage). Prequalify (EMR 0.92, fall-protection program, competent person named, valid hot-work training). Onboard (roof-access route, fire watch and extinguisher staging, alarm and muster point, who issues the hot-work permit). Coordinate daily (weather holds, occupied space below). Verify in the field (active permit, fire watch present, anchor points rated). Close out (propane removed, roof secured, debris managed, corrective actions closed).

Skipping any stage, especially the pre-mobilization stages, is where the exam plants the trap.