At risk construction management (CM at-risk) places the construction manager in the role of general contractor, taking on financial responsibility for delivering the project within a guaranteed maximum price (GMP). Unlike agency CM, where the construction manager acts as an advisor without financial risk, CM at-risk means you own the budget, the schedule, and the liability. A 2025 RSMeans analysis found that CM at-risk delivery accounted for 38% of all non-residential construction projects over $10 million. That share has grown 12% since 2020.

This guide covers how CM at-risk works, what it means for your compliance obligations, and how requirements vary across states.

How CM At-Risk Differs From Other Delivery Methods

Understanding the differences prevents costly misunderstandings about your obligations.

Delivery Method	Financial Risk	Design Responsibility	GMP Required	Sub Contracts With
CM At-Risk	Construction manager	Owner/architect	Yes (typical)	Construction manager
Agency CM	Owner	Owner/architect	No	Owner
Design-Build	Design-builder	Design-builder	Varies	Design-builder
Design-Bid-Build	General contractor	Owner/architect	No (lump sum)	General contractor
IPD	Shared among parties	Shared	Target cost	Core team

In CM at-risk, you hold the subcontractor contracts. This means subcontractor compliance is your direct responsibility. You are not advising the owner on sub selection. You are making the selection and bearing the consequences.

The GMP and Its Compliance Implications

The guaranteed maximum price (GMP) is the defining feature of CM at-risk. You guarantee that the total construction cost will not exceed a specified amount. If costs come in under the GMP, savings are typically shared between you and the owner. If costs exceed the GMP, you absorb the overrun.

This structure creates specific compliance obligations.

Change order documentation. Every change to the GMP must be documented, justified, and approved. Owners scrutinize GMP adjustments more closely than they scrutinize lump-sum change orders because the GMP acts as a contractual ceiling. Your change order process must be rigorous.

Cost transparency. CM at-risk contracts typically require open-book accounting. The owner sees your subcontractor bids, material costs, and general conditions line items. This transparency means your cost data must be accurate and defensible.

Savings sharing. When the project comes in under GMP, the contract specifies how savings are divided. Common splits are 50/50, 60/40 (owner/CM), or 75/25. Track costs meticulously to ensure accurate savings calculations at project closeout.

State-by-State CM At-Risk Requirements

State	CM At-Risk Allowed for Public Work	Prequalification Required	Bonding Requirement	Key Regulation
California	Yes (with restrictions)	Yes	100% performance + payment bonds	Public Contract Code Sec. 20133
Texas	Yes	Varies by agency	Statutory bonds required	Government Code Ch. 2269
Florida	Yes	Yes	Statutory bonds	Sec. 255.20, Florida Statutes
New York	Yes (public authorities)	Case-by-case	100% performance + payment bonds	General Municipal Law Art. 5-A
Georgia	Yes	Recommended	Statutory bonds	O.C.G.A. Sec. 36-91-2
Colorado	Yes	Yes for state projects	100% performance + payment bonds	CRS 24-30-1404
Virginia	Yes	Required	Statutory bonds	Va. Code Sec. 2.2-4382
Illinois	Yes	Required for state work	100% bonds required	30 ILCS 535
Ohio	Yes	Required	Performance + payment bonds	ORC 9.33
Washington	Yes	Yes	Retainage or bonds	RCW 39.10

Public CM at-risk projects carry additional requirements beyond private work. Most states require competitive subcontractor bidding for public CM at-risk projects, even though the CM holds the sub contracts. This differs from private CM at-risk where the CM can negotiate subcontracts directly.

Insurance Requirements for CM At-Risk

CM at-risk projects typically require higher insurance limits than traditional GC contracts because the CM takes on both management and construction risk.

General liability. Most owners require $2 million per occurrence and $5 million aggregate for CM at-risk projects, compared to $1 million/$2 million for traditional GC work. The higher limits reflect the broader scope of responsibility.

Professional liability. Because the CM at-risk role includes preconstruction services (budgeting, scheduling, constructability review), some owners require professional liability insurance. Limits of $1-$5 million are typical. This coverage protects against errors in preconstruction advice.

Contractor's pollution liability. Environmental coverage is increasingly required for CM at-risk projects, especially for renovation, demolition, or brownfield sites. Limits of $1-$2 million are standard.

Builder's risk. The CM at-risk typically arranges builder's risk insurance for the project. The policy must cover the full replacement value of the work in progress. The owner is usually named as an additional insured.

Case Study: CM At-Risk Compliance in Practice

A mid-size GC in Colorado took on a $45 million public school construction project under a CM at-risk contract. The project involved 28 subcontractors across all trades.

The GC established a compliance tracking system covering insurance verification for all 28 subs (monthly checks), license verification with the state licensing board, prevailing wage compliance for all trades (weekly certified payroll review), DBE participation tracking (15% goal), and LEED documentation for the owner's sustainability requirements.

The GC used automated compliance tracking for insurance and licensing. This caught 14 insurance lapses during the 18-month project. Each lapse was resolved within 72 hours because the system flagged it immediately instead of waiting for a manual review.

The project finished 2% under GMP, generating $540,000 in shared savings. The GC attributed the cost performance to two factors: rigorous subcontractor prequalification that prevented defaults, and tight change order management that documented every scope change before work began.

Risk Allocation in CM At-Risk Contracts

Risk	Typically Allocated To	Negotiable?
Cost overruns above GMP	CM at-risk	Rarely
Design errors by architect	Owner	Sometimes
Unforeseen site conditions	Shared	Yes
Schedule delays (owner-caused)	Owner	Yes
Schedule delays (CM-caused)	CM at-risk	Rarely
Subcontractor default	CM at-risk	No
Force majeure	Shared	Yes
Permit delays	Shared	Yes
Material price escalation	Varies	Yes

Negotiate risk allocation during preconstruction, not after GMP is set. Once you commit to a GMP, your leverage on risk allocation diminishes. Push for shared risk on items outside your control (unforeseen conditions, permit delays, force majeure) and accept risk on items within your control (subcontractor selection, schedule management, cost control).

Subcontractor Management Under CM At-Risk

CM at-risk amplifies the importance of subcontractor management. You hold the contracts. You own the compliance. You absorb the cost if a sub defaults.

Prequalify every subcontractor using financial, safety, and capacity criteria. Check insurance coverage monthly, not just at contract award. Require performance bonds on subcontracts exceeding $100,000.

Track subcontractor compliance in real time. A compliance platform automates insurance verification, license checks, and bond status monitoring. This matters more on CM at-risk projects because every compliance gap is your financial exposure.

FAQs

What is at risk construction management? At risk construction management (CM at-risk) is a project delivery method where the construction manager guarantees a maximum price (GMP) for the project. The CM holds subcontractor contracts, manages construction, and bears financial responsibility for cost overruns above the GMP.

How does CM at-risk differ from general contracting? The key difference is timing. In CM at-risk, the construction manager joins during preconstruction to provide budgeting, scheduling, and constructability input. In traditional GC work, the contractor bids on completed documents. CM at-risk also typically uses a GMP instead of a lump-sum price.

What insurance do I need for CM at-risk projects? Most CM at-risk contracts require general liability ($2M/$5M), professional liability ($1-$5M), workers' compensation at statutory limits, commercial auto ($1M), and often contractor's pollution liability ($1-$2M). You also typically arrange builder's risk insurance for the project.

Is CM at-risk allowed on public projects in all states? Most states allow CM at-risk for public projects, but the specific requirements vary. Some states limit it to projects above a certain dollar threshold. Others require legislative authorization for each project. Check your state's public procurement code for specific rules.

What happens if the project exceeds the GMP? The CM at-risk absorbs cost overruns above the GMP, except for owner-directed changes, unforeseen conditions (if allocated to the owner), and other contractually excluded items. This is why accurate estimating during preconstruction is critical to profitability.

How do I manage subcontractor risk on CM at-risk projects? Prequalify all subs on financial stability, safety record, and workforce capacity. Require performance bonds on large subcontracts. Monitor insurance and license compliance monthly. Use a compliance tracking platform to automate verification and catch lapses before they create exposure.

Protect Your CM At-Risk Projects With SubcontractorAudit

SubcontractorAudit provides the compliance tracking that CM at-risk projects demand. Automated insurance verification, license monitoring, and prequalification workflows keep every subcontractor accountable. Request a demo to see how the platform fits CM at-risk operations.