Following subcontractor risk best practices protects general contractors from the claims, delays, and financial losses that subcontractor failures create. Yet most GCs make predictable mistakes in their risk management programs. A 2025 Aon Construction Risk Report found that 58% of GCs identified gaps in their subcontractor risk processes after experiencing a claim. The mistake was not hiring a bad sub. The mistake was not catching the warning signs before the problem occurred.

This analysis covers the 8 most common subcontractor risk management mistakes and how to avoid each one.

Mistake 1: Skipping Pre-Qualification for Repeat Subcontractors

GCs frequently waive pre-qualification for subs they have worked with before. The assumption is that past performance guarantees future reliability. That assumption fails regularly.

A subcontractor's risk profile changes over time. Their EMR may have increased. Their insurance may have changed carriers or reduced limits. Their financial situation may have deteriorated. Using them on a new project based on a two-year-old pre-qualification creates exposure.

How to avoid it. Re-qualify every subcontractor at least annually. Require updated insurance documentation, current EMR, and fresh financial verification regardless of the prior relationship. The data collection is minimal for a well-organized sub.

Mistake 2: Accepting Low-Bid Subs Without Risk Assessment

Price is an important factor in subcontractor selection, but it should never be the only factor. The lowest bidder often carries the highest risk.

A sub bidding significantly below competitors may be cutting corners on insurance, safety, labor quality, or materials. A 2024 FMI Capital Advisors study found that subcontractors bidding more than 15% below the average were 3.2 times more likely to file claims or default during the project.

How to avoid it. Evaluate bids against a risk-adjusted framework. When a bid falls more than 10-15% below the average, investigate the reasons. Verify that the sub's insurance, safety program, and workforce capabilities support the bid price. Award based on best value, not lowest price.

Mistake 3: Not Monitoring Insurance During Construction

Many GCs verify insurance at subcontract execution and never check again. Policies expire. Carriers cancel coverage. Subs allow endorsements to lapse. If you are not monitoring continuously, you will have uninsured subs on your projects.

Monitoring Gap	Risk Created	Frequency Among GCs
No expiration tracking	Coverage lapses undetected	34% of GCs
Certificate-only review	Endorsements not verified	41% of GCs
No mid-project audits	Changed coverage missed	56% of GCs
No sub-tier tracking	Sub-tier subs uninsured	63% of GCs
No renewal follow-up	Expired certs on file	29% of GCs

How to avoid it. Implement automated expiration tracking with alerts at 30, 14, and 7 days before any policy expires. Tie insurance compliance to payment approval. Audit a sample of subcontractor files quarterly during active construction.

Mistake 4: Ignoring Sub-Tier Contractor Risk

First-tier subcontractors hire their own subcontractors. Those sub-tier contractors work on your project site under your supervision. If they lack insurance, safety programs, or the skills for the work, the risk flows uphill to you.

Sub-tier risk is the most commonly overlooked element of subcontractor risk management. GCs focus on the companies they contract with directly and ignore the companies those subs bring to the project.

How to avoid it. Require first-tier subs to notify you before any sub-tier contractor mobilizes. Collect insurance certificates for every sub-tier contractor. Apply the same minimum standards. Include sub-tier compliance obligations in your subcontract. Enforce them.

Mistake 5: Using Non-Compliant Indemnification Language

Indemnification is a critical risk transfer mechanism. But non-compliant indemnification language is worse than no language at all because it creates a false sense of security.

At least 42 states restrict or prohibit broad-form indemnification in construction contracts. Using a broad-form clause in a state that prohibits it renders the clause void. The GC loses the contractual risk transfer they believed they had.

How to avoid it. Review indemnification language with construction counsel for every state where you operate. Use intermediate-form indemnification that transfers risk for the sub's negligence without attempting to shift the GC's sole liability. Update templates when state laws change. Do not use a single template across all states.

Mistake 6: Failing to Document Risk Management Actions

When a claim arises two years after project completion, your defense depends on documentation. GCs who do not document their risk management actions lose the evidence they need.

What to document. Pre-qualification decisions, insurance verification results, safety observations, corrective action notices, meeting minutes, and all risk-related correspondence. Date and sign every document. Store records digitally with backups.

How to avoid it. Build documentation into your workflows so it happens automatically. Use templates for safety observations, corrective actions, and compliance notifications. Assign responsibility for maintaining complete files. Audit documentation completeness quarterly.

Mistake 7: Treating Safety Compliance as a Checkbox

Requiring a safety program on paper is not the same as verifying that the sub follows it in practice. GCs who check the box at pre-qualification and never observe field safety miss the risks that cause injuries.

How to avoid it. Conduct daily safety observations of subcontractor work. Track incidents and near misses by subcontractor. Review safety metrics monthly. Address deteriorating trends with formal corrective action requirements. Respond to serious violations with stop-work authority.

Mistake 8: Not Planning for Subcontractor Default

Every project carries the risk that a subcontractor will fail to complete their work. Financial distress, inadequate workforce, safety shutdowns, and insurance cancellations can all trigger default. GCs who do not plan for this scenario scramble when it happens.

How to avoid it. Include default provisions in every subcontract. Maintain a list of backup subcontractors for critical trades. Monitor financial indicators throughout the project. When distress signals appear, engage early with the sub's management. Have a contingency plan that can be activated within 48 hours.

Read the full pillar guide at Third Party Risk Certification: Everything GCs Need to Know.

Use Our EMR Calculator

Identify high-risk subcontractors before they create problems. Our EMR Calculator Tool scores safety performance and flags subs that warrant additional scrutiny.

FAQs

What is the most costly subcontractor risk management mistake? Ignoring sub-tier contractor risk. Sub-tier contractors working without verified insurance on your project site create the same exposure as uninsured first-tier subs. A claim involving an uninsured sub-tier contractor has no policy to respond, leaving the GC and the first-tier sub fully exposed. The average uninsured claim costs $127,000 in direct expenses.

How often should GCs re-qualify subcontractors? At least annually. Re-qualification should include updated insurance documentation, current EMR, and fresh financial verification. Event-driven re-qualification should occur after safety incidents, financial changes, or ownership transitions regardless of the annual cycle.

Should GCs always choose the lowest bidder? No. Bids more than 10-15% below the average warrant investigation. The lowest bidder is 3.2 times more likely to file claims or default. Evaluate bids against a risk-adjusted framework that considers insurance, safety, financial stability, and experience alongside price.

What documentation do GCs need for subcontractor risk management? Keep pre-qualification records, insurance certificates with endorsements, EMR letters, safety observations, incident reports, corrective action notices, meeting minutes, and all risk-related correspondence. Retain records for the statute of repose period in the project's jurisdiction, typically 6-15 years.

How do anti-indemnity statutes affect subcontractor risk management? Anti-indemnity statutes limit the GC's ability to transfer risk through contract language. In states that prohibit broad-form indemnification, the GC cannot require the sub to cover the GC's own negligence. This makes insurance verification and safety monitoring even more critical since contractual risk transfer is reduced.

What are the warning signs of subcontractor financial distress? Slow payment to suppliers, liens from lower-tier subs, requests for accelerated payment, declining bonding capacity, policy cancellation notices, and sudden workforce reductions. When two or more of these indicators appear together, conduct an immediate financial review and develop a contingency plan.

Stop Making These Subcontractor Risk Mistakes

SubcontractorAudit automates pre-qualification, insurance tracking, and compliance monitoring so you catch risks before they become claims. Request a demo to see the platform in action.