The Contractor Who Passed the Audit
A regional utility outsources its meter-reading and minor repair work to a contractor with 60 field staff. The contract requires the contractor to hold ISO 45001 certification, provide monthly safety statistics, and report all lost-time injuries within 24 hours. At the annual contract review, the contractor presents a clean audit report, zero lost-time injuries for 12 months, and 98% completion of scheduled jobs. The utility's own field supervisor mentions that two of her staff were told by contractor crews that 'near-misses don't get written up because it slows the job down.' She also notes that the contractor's crews work alone in remote areas with no lone-worker check-in. The contractor's safety manager says the audit found no non-conformities and that the statistics speak for themselves. The utility's procurement lead is satisfied and wants to renew for three years.
1. Assess the reliability of the evidence the contractor has presented. What risk identification gaps does it reveal?
Read the worked answer
The evidence is weak in three distinct ways, and each weakness points to an identification gap.
1. Zero lost-time injuries is an outcome measure, not a safety measure. A zero-LTI year on 60 field staff is statistically unremarkable and can coexist with high underlying risk. It tells you nothing about exposure, near-misses, or control effectiveness. Worse, combined with the report that near-misses are not recorded, zero LTIs is consistent with under-reporting rather than safety. The utility should treat the absence of near-miss data as a red flag, not a clean bill of health.
2. The audit scoped the management system, not the work. ISO 45001 certification confirms a system exists; it does not confirm that lone working, remote-area work, or reporting culture are controlled in practice. The audit found no non-conformities, which may mean the audit was narrow or that the contractor's documentation is good. The utility should ask what the audit sampled.
3. The reporting incentive is misaligned. If crews believe reporting slows the job, the 24-hour reporting requirement is being circumvented. That is a control failure and a cultural signal.
Identification gaps revealed:
- Lone working in remote areas is a known hazard class that is not in the utility's risk register for this contract.
- Near-miss data, a leading indicator, is not being collected, so emerging risks are invisible.
- The utility relies on contractor self-reporting with no independent verification.
- The contract review process did not include the utility's own field supervisor's observations, which were volunteered and are highly relevant.
2. Recommend how the utility should restructure the contract review and monitoring before renewal.
Read the worked answer
Renewal should be conditional, not automatic. Recommended structure:
Before renewal:
- Require the contractor to demonstrate a functioning near-miss reporting process, with evidence of reports received and actions taken in the last 12 months. A genuine reporting culture produces near-misses; zero reports from 60 field staff is implausible.
- Require a lone-worker control standard: check-in intervals, escalation if a check-in is missed, and a means of locating staff in remote areas. Verify it by sampling, not by policy document.
- Conduct a joint site visit with the utility's field supervisor and a sample of contractor crews, without the contractor's safety manager present, to test reporting culture directly.
- Ask the contractor to explain the audit scope: what was sampled, what was excluded, and whether lone working was in scope.
Contract changes:
- Replace 'zero LTIs' as the headline metric with a balanced set: near-misses reported, hazards raised and closed, lone-worker check-in compliance, and leading-indicator trends.
- Add a no-blame reporting clause so crews are not penalised for reporting, and a protection clause so reports cannot be used against the reporter.
- Require independent verification (utility spot checks) rather than self-reporting alone.
- Set a review trigger: any month with zero near-miss reports from an active workforce prompts a review.
Governance: the utility's own field supervisor should be a formal input to contract review. Her observations were the most valuable evidence in the room and were not part of the process.