6.3 Contractor Vetting, Approval, and Monthly Compliance Auditing (CR 5(1)(o) & CR 7)

6.3 Contractor Vetting, Approval, and Monthly Compliance Auditing (CR 5(1)(o) & CR 7)

[!NOTE] SACPCMP Examination Focus: Supply chain oversight is one of the most heavily tested domains in the SACPCMP CHSO professional examination. Candidates must understand the cascading statutory liabilities linking the Client, Principal Contractor, and Subcontractor. Mastery of Construction Regulation 7(1)(c)(i)-(x), the multi-stage vetting process, the mandatory 30-day audit cycle under CR 5(1)(o) and CR 7(1)(c)(vii), and the administration of Corrective Action Notices (CANs) is essential.

In modern commercial and civil construction, principal contractors rarely execute all works using direct payroll labor. Projects rely extensively on specialized subcontractors for piling, structural steel, facade cladding, electrical reticulation, plumbing, and roofing. Historically, multi-tiered subcontracting was used to dilute safety accountability. The Construction Regulations 2014 dismantled this practice by creating an unbroken statutory chain of custody: the client governs the principal contractor, and the principal contractor assumes direct legal responsibility for vetting, authorizing, and continuously auditing every contractor operating on the site.

---

1. Supply Chain Governance and Cascade Liability

Under South African jurisprudence, an employer cannot contract out of statutory criminal liability. While a commercial subcontract assigns operational duties to a specialist contractor, the principal contractor retains overall statutory stewardship of the physical construction site under Section 8 and Section 9 of the OHS Act, as well as Construction Regulation 7.

The Role of Section 37(2) Mandatary Agreements

To establish legal accountability within the supply chain, the principal contractor must enter into a formal written agreement with every subcontractor under Section 37(2) of the OHS Act:

• Section 37(1) establishes the general principle of vicarious corporate liability: an employer is criminally liable for the safety contraventions of its mandataries (contractors and agents);
• Section 37(2) provides a legal mechanism whereby the employer and the mandatary agree in writing to the arrangements and procedures necessary to ensure compliance with the OHS Act;
• However, a Section 37(2) agreement is not a blank check of indemnity. It relieves the principal contractor of criminal liability only if the principal contractor can prove active, continuous due diligence—which includes rigorous pre-qualification vetting, plan approval, and mandatory 30-day compliance auditing.

---

2. Principal Contractor Duties Under Construction Regulation 7(1)

Construction Regulation 7(1) establishes detailed, prescriptive duties that a principal contractor must execute whenever procuring, appointing, and overseeing subcontractors:

• CR 7(1)(c) - Issue Client Specification: The principal contractor must provide the relevant sections of the Client Health and Safety Specification to every contractor being considered for appointment;
• CR 7(1)(d) - Verify Resource Allocation: The principal contractor must ensure that prospective contractors have allocated adequate health and safety budget, equipment, and competent personnel in their tender submissions before awarding the contract;
• CR 7(1)(e) - Verify COIDA Standing: The principal contractor must confirm that each appointed contractor is registered with the Compensation Commissioner (COIDA) or a licensed mutual association (FEMA) and possesses an active, valid Letter of Good Standing;
• CR 7(1)(f) - Enforce Safety Plan Compilation: The principal contractor must ensure each appointed contractor compiles a site-specific health and safety plan based on the client specification and project baseline risk assessment;
• CR 7(1)(g) - Review and Approve Subcontractor Plan in Writing: The principal contractor must formally review and approve the subcontractor's H&S plan in writing prior to allowing them site access;
• CR 7(1)(h) - Ensure Active H&S File: The principal contractor must ensure each contractor keeps an active, compliant safety file on site under Regulation 31;
• CR 7(1)(c)(vii) - Prohibition on Unapproved Subcontracting Tiers: "No contractor may appoint another contractor to perform construction work unless the contractor is reasonably satisfied that the contractor that he or she intends to appoint has the necessary competencies and resources to perform the construction work safely, and has informed the principal contractor in writing prior to such appointment."

[!WARNING] Critical Exam Rule on Tiered Subcontracting (CR 7(1)(c)(vii)): Subcontractors are strictly prohibited from subcontracting their work further (e.g., hiring labour-only sub-subcontractors) without prior written notification to and formal authorization from the principal contractor. Uncontrolled, unnotified subcontracting represents a catastrophic breakdown of site access control and safety governance.

---

3. The Multi-Stage Contractor Pre-Qualification Vetting Protocol

Professional construction health and safety management in South Africa enforces a three-stage vetting gateway before any subcontractor is issued a formal letter of appointment:

+-------------------------------------------------------------------------------------------------+
|                      Three-Stage Contractor Pre-Qualification Vetting Gateway                   |
+-------------------------------------------------------------------------------------------------+
|  STAGE 1: Mandatory Legal Compliance Gates (Pass / Fail Gateway)                                |
|  • Valid COIDA / FEMA Letter of Good Standing (verified against online commissioner database)    |
|  • Signed Section 37(2) Mandatary Agreement                                                     |
|  • Valid SARS Tax Clearance Pin & CIPC Company Registration                                     |
|  • SACPCMP Registration Proof for proposed safety personnel (CHSO / CHSM)                       |
|                                  │                                                              |
|                                  ▼                                                              |
|  STAGE 2: Technical Competency & Historical Safety Performance                                  |
|  • 3-Year Historical Safety Statistics: Lost Time Injury Frequency Rate (LTIFR), Fatalities     |
|  • Department of Employment and Labour statutory notice history (Section 30 Prohibitions)       |
|  • Certified competency certificates for key trades (Riggers, Scaffold Erectors, Electricians)  |
|  • Major plant maintenance logs and statutory load test certificates (DMR 18)                   |
|                                  │                                                              |
|                                  ▼                                                              |
|  STAGE 3: Site-Specific Safety Plan Evaluation & Approval Gateway                               |
|  • Detailed alignment with Client H&S Specification and PC Master Safety Plan                   |
|  • Task-specific Issue-Based Risk Assessments (CR 9) and Safe Work Procedures (SWPs)            |
|  • Verification of adequate health and safety budget pricing in Bill of Quantities (CR 7(1)(d)) |
|                                  │                                                              |
|                                  ▼                                                              |
|  [CR 7(1)(c)(vii)] Formal Written Appointment Issued ───> Site Access Authorized                      |
+-------------------------------------------------------------------------------------------------+

Stage 1: Mandatory Legal Compliance Gates (Pass/Fail)

If a prospective contractor fails any Stage 1 requirement, vetting is terminated immediately. A contractor cannot be awarded work on an active site without a verified COIDA Letter of Good Standing, an executed Section 37(2) agreement, and verified SACPCMP credentials for appointed safety personnel.

Stage 2: Technical Competency and Historical Performance

The vetting team evaluates the contractor's past three-year safety track record. High Lost Time Injury Frequency Rates (LTIFR), historical fatalities, or repeated Section 30 Prohibition Notices from DoEL trigger mandatory senior management reviews. Plant and equipment registers are audited to ensure mobile cranes, earthmoving equipment, and scaffolding components meet SANS standards.

Stage 3: Site-Specific Safety Plan Evaluation

The contractor's draft H&S plan is audited against the Client H&S Specification. Boilerplate submissions are rejected. The plan must contain task-specific safe work procedures and method statements addressing the actual scope of works, together with a signed organogram and resource commitments.

---

4. Statutory Auditing Mandates: CR 5(1)(o) and CR 7(1)(c)(vii)

South African construction law rejects the notion of "audit when convenient." The Construction Regulations establish a mandatory, non-negotiable 30-day statutory audit frequency across two primary tiers of the project hierarchy:

1. Client Auditing Principal Contractor (CR 5(1)(o)): The client (or the client's appointed SACPCMP Pr.CHSA under CR 5(1)(e)) must ensure that health and safety audits are conducted on the principal contractor at least once every 30 calendar days.
2. Principal Contractor Auditing Subcontractors (CR 7(1)(c)(vii)): The principal contractor must ensure that every contractor operating on the site is audited at least once every 30 calendar days to ensure compliance with the approved health and safety plan.

Comparative Audit Matrix

The Three-Tier Audit Methodology

A compliant 30-day compliance audit comprises three mandatory stages:

• Stage 1 - Document Verification: Reviewing the physical or electronic safety file. Verifying that daily inspection registers (scaffolding, ladders, power tools) are signed daily, Annexure 3 medical certificates are active, toolbox talks are conducted, and appointments are current;
• Stage 2 - Physical Site Inspection: Verifying that documentary commitments match physical site reality. Walking the active work faces to inspect scaffolding stability, leading-edge protection, excavation shoring, temporary electrical distribution boards, chemical storage bunds, and PPE compliance;
• Stage 3 - Worker & Supervisory Interviews: Testing whether workers understand their Daily Safe Task Instructions (DSTIs), know the location of first aid stations, and understand their legal right to refuse dangerous work under Section 14 and South African common law.

---

5. Audit Non-Conformances, Corrective Action Notices (CANs), and Sanctions

Audit findings must be formally categorized to reflect the severity of risk and establish legally enforceable remediation timeframes:

+-------------------------------------------------------------------------------------------------+
|                            Audit Finding Severity Hierarchy & CAN Workflow                      |
+-------------------------------------------------------------------------------------------------+
| CRITICAL / IMMINENT DANGER  ───> Immediate Stop-Work Directive Served (Zero-Tolerance)           |
| (e.g., Unshored deep trench, working at 6m without edge protection or harness tie-off)          |
| Action: Work stopped immediately; CAN issued; rectified and re-inspected BEFORE work resumes.    |
|                                                                                                 |
| MAJOR NON-CONFORMANCE      ───> Corrective Action Notice (CAN) Issued (24–48 Hour Remediation)  |
| (e.g., Expired COIDA Letter of Good Standing, uncertified crane operator, bypassed safety guard)|
| Action: Formal CAN served; re-inspection within 48 hours; contractual penalties if unresolved.  |
|                                                                                                 |
| MINOR NON-CONFORMANCE      ───> Administrative Notice (3–7 Day Remediation)                     |
| (e.g., Daily ladder register missing yesterday's counter-signature, faded warning sign)         |
| Action: Logged in audit report; verified during routine daily inspection or next weekly cycle.  |
+-------------------------------------------------------------------------------------------------+

The Corrective Action Notice (CAN) Protocol

Whenever an audit reveals a major or critical non-conformance, the auditor must issue a formal Corrective Action Notice (CAN). A legally defensible CAN must contain:

1. Unique CAN reference tracking number and date of issue;
2. Specific clause of the OHS Act or Construction Regulations 2014 violated;
3. Precise physical location and factual description of the non-conformance (supported by photographic evidence);
4. Required corrective action and root cause remediation;
5. Designated responsible supervisor accountable for rectification;
6. Strict close-out deadline (e.g., immediate, 24 hours, or 7 days);
7. Verification section: signed by the CHSO confirming physical re-inspection and compliant close-out.

Contractual Sanctions for Chronic Non-Compliance

Where a subcontractor repeatedly fails monthly audits, ignores CAN deadlines, or permits imminent danger conditions, the principal contractor must escalate enforcement:

• Contractual Safety Withholding: Contractually withholding a percentage of the subcontractor's monthly progress payment certificate until safety non-conformances are fully closed out;
• Removal of Supervisors: Formally revoking the appointment of non-compliant construction supervisors under CR 8(7) or safety officers under CR 8(5);
• Site Eviction and Contract Termination: Expelling the contractor from the construction site and terminating the commercial contract on safety default grounds;
• Statutory Escalation: Reporting chronic reckless endangerment to the Department of Employment and Labour inspectorate or the SACPCMP disciplinary council.

---

6. Practical Site Scenarios & Exam Pitfalls

Practical Scenario 1: The Unauthorized Secondary Subcontractor

On a high-rise residential development in Sandton, Principal Contractor ABC appoints Subcontractor Y to install drywall partitions. Without informing ABC, Subcontractor Y hires a separate labour-broking gang of 12 workers from Subcontractor Z to hang ceiling boards at 4 metres. One of Subcontractor Z's workers falls from an unbraked mobile tower scaffold and sustains a severe spinal fracture. An investigation reveals Subcontractor Z has no COIDA registration, no safety file, and no site induction.

• Legal Analysis: Subcontractor Y committed a direct criminal violation of Construction Regulation 7(1)(c)(vii) by appointing Subcontractor Z without prior written notification to and authorization from Principal Contractor ABC. Principal Contractor ABC is also examined under Section 8 and Section 9: did ABC maintain adequate site access security and daily supervision to detect 12 uninducted workers entering the active work zone? Subcontractor Y faces severe criminal liability, while ABC's site access control failures expose the principal contractor to DoEL contravention notices.

Practical Scenario 2: The "Desk-Only" Audit Trap

A safety officer conducts monthly subcontractor audits under CR 7(1)(c)(vii) entirely inside the site canteen. The safety officer reviews binders, verifies that daily inspection checklists are signed, awards a 96% compliance score, and signs off the audit report. An hour later, an external scaffold on the west facade collapses due to missing bracing and missing base jacks, injuring three bricklayers.

• Legal Analysis: The safety officer conducted a negligent "paper audit." An audit under Construction Regulation 7(1)(c)(vii) is legally invalid if it consists solely of documentary verification without physical site inspection and verification of real-world site conditions. The fraudulent 96% score demonstrates a failure of due diligence, exposing the safety officer to SACPCMP professional misconduct hearings and criminal investigation under Section 38.

---

7. Common SACPCMP Exam Pitfalls & Traps

[!CAUTION] Avoid These Critical Exam Errors:

1. Extending the 30-Day Audit Cycle: Never select an answer claiming that audits can occur "quarterly," "bi-monthly," or "as determined by the contractor." Construction Regulations 5(1)(o) and 7(1)(o) strictly fix the maximum audit interval at once every 30 calendar days.
2. Assuming Section 37(2) Eliminates the Duty to Audit: A Section 37(2) agreement transfers operational compliance duties, but it never relieves the principal contractor of the duty to verify, inspect, and audit subcontractors under CR 7(1)(c)(vii).
3. Confusing Vetting with Auditing: Pre-qualification vetting occurs before site access (pre-construction). Auditing occurs continuously every 30 days during active construction. Passing initial vetting does not exempt a contractor from monthly audits.
4. Failing to Track CAN Close-Out: Issuing a Corrective Action Notice is only half the legal duty. An open, unverified CAN filed without proof of rectification is evidentiary proof that management was aware of a hazard and failed to eliminate it.