Applying subcontractor risk best practices consistently requires a structured checklist that your project teams can follow on every job. Without a standardized process, risk management becomes inconsistent. One project manager verifies endorsements while another accepts certificates at face value. One superintendent monitors safety daily while another checks quarterly. A 2025 Associated Builders and Contractors survey found that GCs with documented risk checklists experienced 38% fewer subcontractor-related claims than those without.

This guide provides checklists for every phase of subcontractor risk management.

Pre-Qualification Checklist

Complete this checklist before awarding any subcontract.

Insurance verification.

CGL certificate received and reviewed
Workers' compensation certificate received
Auto liability certificate received
Umbrella/excess certificate received
Additional insured endorsement page verified
Waiver of subrogation endorsement page verified
Coverage limits meet or exceed contract minimums
Carrier rated AM Best A- or better
Policy expiration dates logged in tracking system

Safety assessment.

EMR letter received and reviewed
EMR at or below threshold (typically 1.0)
OSHA 300 logs for past 3 years reviewed
TRIR calculated and compared to industry average
Written safety program on file
Safety officer or competent person designated
No willful OSHA violations in past 3 years

Financial assessment.

Surety letter confirming bonding capacity received
Commercial credit report reviewed
No outstanding tax liens verified
No bankruptcy filings in past 5 years confirmed
References from 3 recent projects contacted
Current workload assessed against capacity

Regulatory compliance.

State contractor license verified
Workers' compensation coverage confirmed for project state
OSHA violation history checked
No government contract debarment confirmed

Subcontract Execution Checklist

Complete these items when the subcontract is signed.

Item	Responsible Party	Deadline
Insurance exhibit attached to subcontract	Project manager	At execution
Indemnification clause reviewed for state compliance	Legal/risk manager	Before execution
Safety requirements incorporated by reference	Safety director	At execution
Payment tied to insurance compliance	Project manager	At execution
Sub-tier contractor notification requirement included	Project manager	At execution
Risk management obligations defined	Risk manager	At execution
Claims reporting procedures distributed	Project manager	Within 5 days
Emergency contact information collected	Superintendent	Within 5 days

Active Construction Monitoring Checklist

Use this checklist throughout the construction phase.

Weekly tasks.

Observe subcontractor safety practices on site
Verify active certificates for subs working this week
Collect toolbox talk documentation from subs
Review any incident reports from the past week

Monthly tasks.

Check for upcoming certificate expirations (30-day window)
Review safety metrics by subcontractor
Verify sub-tier contractor insurance is current
Follow up on any outstanding compliance items

Quarterly tasks.

Audit 25% of subcontractor insurance files for completeness
Review financial indicators for high-value subcontractors
Conduct formal risk review meeting
Document findings and assign corrective actions
Update risk scores for active subcontractors

Incident Response Checklist

Follow this checklist when a subcontractor-related incident occurs.

Immediate (within 4 hours).

Secure the incident scene
Provide first aid or emergency medical care
Verify the involved subcontractor's insurance status
Notify the project insurance administrator
Collect witness statements and photographs

Short-term (within 72 hours).

File the claim with the appropriate carrier
Complete a detailed incident investigation report
Notify the project owner if required by contract
Implement immediate corrective actions
Conduct a stand-down with the involved sub's crew

Follow-up (within 30 days).

Review the sub's corrective action plan
Verify implementation of corrective measures
Update the sub's risk assessment
Document all actions in the project file
Report to the quarterly risk review

Closeout Checklist

Complete these items before closing out each subcontractor.

Final certificate of insurance obtained
Completed operations coverage confirmed through warranty period
Warranty documentation on file
Final safety metrics documented
Outstanding corrective actions closed
Sub-tier contractor documentation archived
All records filed for retention period (statute of repose)

Read the full pillar guide at Third Party Risk Certification: Everything GCs Need to Know.

Use Our EMR Calculator

Score subcontractor safety risk as part of your pre-qualification checklist. Our EMR Calculator Tool benchmarks performance against industry standards.

FAQs

How many items should a subcontractor risk checklist include? A thorough subcontractor risk checklist covers 40-60 items across pre-qualification, subcontract execution, active monitoring, incident response, and closeout. The exact count depends on project complexity. Start with the essential items and add trade-specific or state-specific requirements based on your projects.

Who is responsible for completing the subcontractor risk checklist? The project manager typically owns the overall process. Safety directors handle safety-related items. Risk managers or compliance staff handle insurance verification. Superintendents handle daily field observations. Clear role assignment prevents items from being missed.

How do GCs track checklist completion across multiple projects? Use a compliance platform that tracks checklist status for every subcontractor on every project. Dashboards show completion rates, overdue items, and non-compliant subs across the portfolio. Manual tracking with spreadsheets works for 1-3 projects but breaks down with higher volume.

Should the checklist be different for high-risk versus low-risk trades? Yes. High-risk trades like roofing, demolition, and excavation warrant additional checklist items including higher insurance limits, more frequent safety observations, and additional financial verification. Low-risk trades can use the standard checklist. Create two or three tiers to match your risk categories.

How often should GCs update their risk management checklists? Review and update checklists at least annually. Update immediately when state regulations change, industry best practices evolve, or an internal audit reveals gaps. Incorporate lessons learned from each project into the next version of the checklist.

Can digital tools replace paper checklists? Yes, and they should. Digital checklists provide tracking, accountability, audit trails, and reporting that paper cannot match. They also allow standardization across projects and teams. The transition from paper to digital typically takes 2-4 weeks with proper training.

Turn This Checklist Into an Automated Workflow

SubcontractorAudit converts these checklists into automated workflows with tracking, alerts, and dashboards. Request a demo to see how the platform manages subcontractor risk on your projects.