Let's make contact

Contractor Risk Assessments and Permits to Work

Contractor Risk Assessments and Permits to Work: Connecting Legal Duties to Safe Work on Site

The risk assessment says the equipment will be isolated. The method statement describes diagnostic testing while energised. The permit request simply says “maintenance”. Three documents exist, but they do not describe one agreed task.

That contradiction should be resolved before authorisation. Contractor work needs a consistent account of what will happen, which hazards matter, which controls apply and who verifies them. The SafetyWallet platform supports the connection through OHS Online and a structured management process, while competent authorised people remain responsible for decisions at the workplace.

Short answer
A task-based risk assessment identifies hazards, risks and controls. A method statement explains how the work will be done. A permit-to-work authorises defined work under specified conditions where required by applicable rules. These documents must agree and reflect the actual site. A permit does not replace risk assessment, supervision or verification, and changed conditions may require suspension, review and reauthorisation.
Supervisor and contractor technician reviewing work information outside a cordoned maintenance bay.

Authorisation must reflect the task and actual workplace conditions.

Begin with the legal duty to understand and control the work

Section 8 of the OHS Act addresses safe systems, hazard identification, precautions, information and supervision within its scope. Section 9 concerns people other than employees affected by the undertaking. These duties apply to real activities and conditions, not merely the existence of a completed form. Source: OHS Act, sections 8 and 9.

Specific activities may require additional assessments, competence, authorisations or controls under applicable regulations. Determine those requirements from the work and legal context. A site can also establish its own approved permit matrix to manage defined activities and interfaces.

Avoid a universal rule that every contractor visit, or every activity labelled “high risk”, requires the same permit. Equally, do not omit a required authorisation because the company has an approved safety file. The correct question is which legal and site requirements apply to this task, at this place and time.

What we see repeatedly in South African workplaces

The gaps to test include copied assessments with unrelated hazards, method statements written before the site was understood, permits issued without checking the area and changed work continuing under the original description. Another problem is assuming that a contractor’s assessment accounts for client-controlled hazards that were never disclosed.

A useful pre-start review asks both parties to describe the task in plain language. If their explanations differ about energy, access, sequencing, simultaneous work or emergency arrangements, the documents need more than signatures. The underlying decision still needs to be made.

Discuss your task-control process with SafetyWallet if risk assessments and permits are currently managed as separate paperwork exercises.

Give each document a clear purpose

Record Main question What it cannot establish alone
Task-based risk assessment What can cause harm and which controls are needed? That every control is in place today
Method statement How will the contractor carry out the agreed work? That the site has been prepared
Site procedure or SOP What approved sequence and rules apply? That the team understands and follows them
Permit-to-work Is this defined work authorised under stated conditions? That conditions will remain unchanged
Inspection or JSO record What was verified or observed? That unobserved activities were also satisfactory

Keep the documents linked to the same scope, work location and revision. When a method changes, identify the affected assessment, instructions, permit conditions and people. Updating only one record can leave the work team relying on conflicting information.

Build the assessment from actual task steps

Establish what the work includes

“Service the conveyor” can involve access, cleaning, isolation, dismantling, lifting, replacement, testing and restart. Break the scope into meaningful activities and consider who can be affected at each stage. Include contractor employees, client employees, delivery drivers and other people within the relevant interface.

Use task-based risk assessments as a structured starting point. Customise hazards and controls for actual equipment, environment, people and operations. Library content helps people begin; it does not remove the need for competent workplace input.

Check the controls as a connected set

A control can depend on another organisation’s action. The contractor may require access to an isolated area, while the client controls the shutdown. A lifting activity may depend on clearing an access route used by deliveries. Record these dependencies so an unanswered assumption does not become a dangerous instruction.

Consider elimination or reduction of hazards and suitable physical or organisational controls before relying only on personal protective equipment. The Act’s section 8 duty structure expressly addresses eliminating or mitigating hazards before resorting to PPE. The exact controls still depend on the task and competent assessment.

Task to Assessment to Method to Verification to Authorisation to Review.

Follow the sequence and verify the evidence supporting each decision.

Use the permit as a defined decision point

Where a permit is required, the request should identify the work, location, period, person in charge and linked assessment or method. The authorised reviewer needs sufficient information to determine the applicable conditions and prerequisites.

Before issue, verify the relevant area preparation, isolation, testing, boundaries, conflicting activities and emergency arrangements through the approved process. A software check that a document exists is different from competent confirmation that a physical condition is satisfactory.

The work team needs to understand and accept the conditions. Confirm who monitors them, what changes require a pause, and how handover is managed. A permit should be specific enough that a worker can recognise when the task has moved outside its authorised limits.

Suspend when the facts change

Changed scope, people, method, isolation, weather or nearby work can alter the risk. Follow the approved stop and escalation process when conditions fail or material uncertainty arises. Make the situation safe within competence and authority, record the facts and obtain the appropriate review before restart.

Revalidation should confirm the changed facts and controls, not simply extend a time field. At closeout, check completion, remaining defects, removal of equipment, restoration and handover through the approved process. Ending a permit record does not itself prove safe recommissioning.

A weekend maintenance conflict

In a fictional distribution centre, an electrical contractor and a cleaning team are booked into the same plant area. The electrical method assumes restricted access. The cleaning schedule assumes the area is available throughout the morning. Each team has a valid purchase order and its own paperwork.

A joint review identifies the conflict before work. The client sequences the activities, confirms the relevant boundaries and arranges communication between the people in charge. The contractor and cleaner revise their plans accordingly. If a delay changes the sequence, the affected arrangements are reviewed again.

The client gains a workable programme rather than competing instructions. The providers gain a clear basis for staffing and supervision. The records capture why the sequence was chosen, who agreed it and what must remain true during execution.

Supervisor and contractor representatives discussing a site plan in a quiet induction room.

Resolve conflicting activities and explain the agreed sequence before work.

How OHS Online supports the work-control process

OHS Online connects tasks, risk information, controls, documents, responsibilities and evidence. Where the approved client permit matrix requires a permit, use the enabled permit workflow and authorised roles appropriate to the relationship, site and work. Confirm the actual configuration rather than assuming every deployment has identical automatic checks.

Keep the contractor relationship and its information current. Connected SafetyWallet providers can share authorised programme information, while external providers maintain requested records through manual portal uploads. Neither route removes the need to reconcile the task assessment, method and field conditions.

Software gives visibility, but visibility is not the same as control. A dashboard can show an overdue requirement or a permit record. It cannot physically establish an isolation, remove an obstruction or decide whether an unanticipated condition is acceptable. Those actions need competent people with clear authority.

Procurement coordinator and contractor business owner reviewing information beside a laptop.

Relevant authorised information supports decisions and follow-up by both organisations.

The SafetyWallet model: one platform, multiple layers of support

SafetyWallet combines a SaaS subscription, OHS Online, structured methods, learning and support. Triple P—Policies, Procedures and Practices connects the organisation’s work-control commitments to procedures and daily implementation.

Registers assign recurring checks. Job Safety Observations compare the approved task controls with actual practice. MES, the Mindset Evolution Schema, supports recognition and development after immediate risks are controlled. This makes behaviour based safety relevant to real decisions, such as stopping when permit conditions no longer match the work.

Expert health and safety support and approved Partners assist within agreed competence and scope. My Safety Hub and eLearning support understanding. The SafetyWallet Shop, also known as My Safety Shop, offers relevant products and services.

These elements support a practical health and safety management system and health and safety compliance in South Africa. ISO 45001 support in South Africa can assist system development without guaranteeing certification.

Why both parties benefit

The client gains clearer coordination, authorisation and handover evidence. Contractors gain better information about site dependencies and a defined route for raising conflicts before being expected to proceed. Suppliers involved in installation also gain clarity about when product acceptance becomes on-site work control.

Directory visibility can help consenting providers become discoverable to subscribers. Qualifying active management through OHS Online can earn reward discounts on eligible ecosystem purchases. A permit count or uploaded assessment alone does not establish reward eligibility, and commercial benefits must never displace a required control.

Book a SafetyWallet demo to discuss how task information, contractor records and work-control evidence can connect in your programme.

Software only vs consultant only vs the SafetyWallet model

Approach What it solves What it often misses Best use Long-term result
Software only Organises work records Physical verification Supporting authorised roles Depends on competent action
Consultant only Adds technical input Every changing work condition Defined specialist support Depends on implementation
Safety file/document approach Records planned controls Contradictions during execution Supporting authorisation Needs active revision
SafetyWallet model Connects software, training, support, risk, controls, behaviour and accountability Still needs field control Building internal ownership Supports coordinated work

Frequently Asked Questions

Questions about assessments and permits, method statements, isolation verification and SafetyWallet.

No. Apply the relevant legal requirements and approved site permit matrix to the actual activity. Do not replace that assessment with a blanket vendor rule.

No. A permit authorises defined work under stated conditions. The assessment identifies hazards, risks and the controls needed to support the decision.

Resolve the actual intended work and review the affected controls before authorisation. Do not assume the safest wording is the method that will be followed.

Follow the approved suspension and change process. Review the new conditions and obtain the required authorisation before the affected work resumes.

No. It records a decision or status. Physical isolation and any required verification must be performed by competent authorised people under the applicable procedure.

No. It connects OHS Online with structured methods, learning and support, while each employer retains responsibility for its decisions and implementation.

Check that the documents describe one task

Before the next controlled activity, compare the scope, assessment, method and authorisation. Ask the work team to explain the conditions that allow work and the changes that would stop it.

SafetyWallet supports that connection. Our purpose remains: “We believe in making sure your loved ones return home healthy and safe after work.”

Talk to the SafetyWallet team about bringing task risk and contractor work control into one practical programme.

Continue the series

Start with the guide to contractors and suppliers on your premises. Previous article: Contractor Safety Files and Site Induction: What Must Be Verified Before Work Begins?.

By SafetyWallet. Based on its Contractor and Supplier Health and Safety Management learning material and Ownership with Support approach. General educational guidance, not task-specific technical instruction or authorisation.

We’re Here to Support
Your Health & Safety
Compliance Journey.

Head Office

71 Second Avenue,
Florentia, Alberton North, 1449
010 980 0888
0861 444 777

Partner Programme

Earn up to 40% recurring commission
Become a Partner

© 2025 SafetyWallet (Pty) Ltd. All rights reserved