HSE-330 · Lesson 10 of 12 · 26 min

Contractors, controlling employers and multi-employer sites

Few oil and gas sites are worked by a single employer. A typical pad during completion might have the operator's wellsite supervisor, a fracturing company, a wireline contractor, a coiled tubing unit, water transfer and trucking companies, rental equipment providers, a flowback crew, a security service and a steady stream of delivery drivers, each with its own supervisors and procedures. The NIOSH data in Lesson 1 showed that most fatalities were among contractors, especially well servicing workers. When work is split among many employers, hazards fall into the gaps between them: one crew's work endangers another, nobody is sure who is in charge, and everyone assumes someone else has checked. This lesson explains how the law assigns responsibility on multi-employer sites, how operators manage contractors and how workers can keep themselves safe in a crowded workplace.

HSE-221 Lesson 9 covered simultaneous operations and interfaces under permit systems, and HSE-230 covers field-level hazard assessment. HSE-406, Contractor Safety Management, will cover the management system side for safety professionals in depth. This lesson gives the orientation-level view that every worker and new supervisor on an oil and gas site needs.

Who is on site

It helps to know the roles you will meet:

  • The operator: the company that holds the state permits and controls the site. Its representative on location is often called the company man, wellsite supervisor or consultant.
  • The controlling employer: under OSHA's multi-employer citation policy, an employer with general supervisory authority over the site, including the power to correct hazards or require others to correct them.
  • Contractors: drilling, completion, servicing, construction, maintenance and trucking companies, each the employer of its own workers.
  • Subcontractors and owner-operators: companies and self-employed people hired by contractors, often for short tasks.
  • Suppliers and service providers: rental equipment companies, chemical suppliers and technicians who deliver and set up equipment.
  • Visitors and regulators: landowners, inspectors, engineers and others who need orientation and escort.

How the law assigns responsibility

In the United States, OSHA's multi-employer citation policy explains how more than one employer can be cited for the same hazard on a multi-employer site. It describes four roles: the creating employer, which caused the hazard; the exposing employer, whose own workers are exposed; the correcting employer, responsible for fixing a type of hazard, such as a company that maintains guardrails; and the controlling employer, which has general authority over the site. A controlling employer must exercise reasonable care to prevent and detect violations, for example by inspecting at reasonable intervals and requiring contractors to correct hazards, although it need not inspect as often or in as much detail as each contractor. One employer can hold several roles at once. The operator and its consultants often act as controlling employers on oil and gas sites, and courts and OSHA have applied the policy to oil and gas work. Each employer keeps its duty to protect its own workers.

A diagram of responsibilities on a multi-employer oil and gas site. At the top is the operator or licensee, who controls the site. Below it is the coordinating party, shown as the prime contractor in the Canadian version and the controlling employer in the US version, with lines to four contractor boxes: completion, wireline, trucking and maintenance. Each contractor box has its own workers. A band across the bottom lists shared tools: site orientation, bridging document, daily coordination meeting, permits, stop work authority. The US version adds small labels for creating, exposing, correcting and controlling employer roles.
Roles on a multi-employer oil and gas site under OSHA's multi-employer citation policy.

Managing contractors: the life cycle

Good operators manage contractors through a life cycle rather than relying on a contract clause. API RP 76, Contractor Safety Management for Oil and Gas Drilling and Production Operations, describes this cycle. Before work, operators prequalify contractors by reviewing their safety program, training records, injury and illness rates and experience modification rate (EMR), often through third-party prequalification services. They then plan each job with the contractor, agree how hazards at the interfaces will be controlled and confirm that workers have the required training. During the work, they orient contractor workers, hold coordination meetings, monitor performance and stop work when needed. After the work, they evaluate the contractor's performance and feed the results into future selection.

A key planning tool is the bridging document, which links the operator's safety management system with each contractor's. It records whose procedures apply to which activities (for example, the operator's permit system, the contractor's lifting procedures), who is responsible for gas monitoring, emergency response and incident reporting, and how differences between the two systems will be resolved. Without a bridging document, two crews on the same site may follow different rules for the same hazard.

The contractor safety management life cycle and typical failures at each stage.
StageWhat happensCommon failure
PrequalificationReview safety program, training, injury rates and certificationsChoosing on price alone; accepting paperwork without checking
Job planningScope, hazards, bridging document, training requirements, SIMOPS reviewNo discussion of how one crew's work affects another
Mobilization and orientationSite orientation, ticket checks, equipment inspectionLate-arriving workers skip orientation
ExecutionDaily coordination meetings, permits, FLHAs, supervision, auditsSupervisors absent; changes made without reassessment
Evaluation and close-outPerformance review, lessons learned, feedback to selectionNo feedback; same problems repeat on the next job

New and short-service workers

Workers new to the industry, to a company or to a type of job are injured at higher rates than experienced workers. Many operators and contractors run short-service employee programs: new workers wear a distinctive hard hat color or sticker for their first months, are assigned a mentor, are limited to a set number per crew and are not allowed to do certain high-risk tasks alone. If you are new, ask questions and say when you have not done a task before; if you are experienced, watch out for new crew members, explain why things are done and stop them before they step into a hazard.

Coordinating on the day

On a busy site, coordination happens through a few routine tools:

  • A daily coordination or pre-job meeting where all crews share their plans for the day, identify conflicts and agree on controls.
  • Field-level hazard assessments or job safety analyses for each task, reviewed when conditions change (HSE-230).
  • A permit system that controls hazardous work and shows who is working where (HSE-221 and HSE-333).
  • A simultaneous operations (SIMOPS) plan when different operations, such as production and completion or crane lifts and hot work, happen close together.
  • Shift handovers that pass on the state of work, permits and isolations.
  • Stop work authority, which allows any worker to stop a task they believe is unsafe, without fear of reprisal.

Stop work authority deserves emphasis. It only works if people use it and supervisors back it. On a multi-employer site, a worker from one company may see a hazard created by another company's crew. Stopping the work and raising the concern is the right thing to do, and most operators make clear that stop work authority extends across company lines. The right to refuse unsafe work under OHS law, explained in HSE-101, protects workers who refuse work they believe endangers them.

Visitors and escorts

Visitors such as engineers, sales representatives, landowners, auditors and new managers often know little about oil and gas hazards. Most sites require every visitor to sign in, receive at least a short orientation covering alarms, muster points, wind direction and restricted areas, wear the required PPE and a gas monitor where H2S may be present, and stay with a trained escort. The escort is responsible for keeping the visitor out of red zones and hazardous areas and for leading them to safety in an emergency. Inspectors from regulators also sign in and receive orientation, although they have legal powers to enter and examine the site.

Incidents on multi-employer sites

When something goes wrong on a site with many employers, reporting and investigation must not fall into the gaps. Every injury, near miss and dangerous occurrence should be reported to the worker's own supervisor and to the coordinating party for the site, whatever company the worker belongs to. Legal reports to the OHS regulator are usually the duty of the injured worker's employer, and some events must also be reported by the operator to the energy regulator. Investigations work best when they involve all the employers whose work contributed, so that each can fix its part, and when lessons are shared across crews and companies rather than kept within one. A contractor that hides incidents to protect its standing with the operator puts everyone on the site at risk; operators that punish contractors for honest reporting encourage exactly that.

Communication is a recurring cause of multi-employer incidents. Crews may use different radio channels, different terms for the same equipment and, sometimes, different working languages. Sites reduce the risk by agreeing a common radio channel for emergencies, using plain language rather than company jargon in coordination meetings, confirming instructions by repeating them back and making sure every worker can understand alarms and emergency instructions.

Measuring contractor safety

Operators compare contractors using injury statistics. The total recordable incident rate (TRIR) counts OSHA-recordable injuries and illnesses per 200,000 hours worked, which is roughly 100 workers working for a year. The days away, restricted or transferred (DART) rate counts the more serious cases. The experience modification rate compares a company's workers' compensation claims with the average for its industry, with 1.0 as average. Statistics from small contractors swing widely from year to year, so operators look at trends and at leading indicators such as training completion, inspections and near-miss reporting as well. The program below calculates these rates for three invented contractors bidding for work at Pinecrest.

# Invented contractor data: name, hours worked, recordable cases, DART cases, EMR
bids = [("Contractor A", 410_000, 3, 1, 0.82),
        ("Contractor B", 95_000, 2, 1, 1.05),
        ("Contractor C", 260_000, 1, 0, 1.31)]
for name, hours, rec, dart, emr in bids:
    trir = rec * 200_000 / hours
    dart_rate = dart * 200_000 / hours
    flags = []
    if emr > 1.0:
        flags.append(f"EMR {emr:.2f} above 1.0: ask why")
    if hours < 200_000:
        flags.append("small sample: look at 3-year trend")
    print(f"{name}: TRIR {trir:4.2f}, DART {dart_rate:4.2f}", "; ".join(flags))
Output
Contractor A: TRIR 1.46, DART 0.49 
Contractor B: TRIR 4.21, DART 2.11 EMR 1.05 above 1.0: ask why; small sample: look at 3-year trend
Contractor C: TRIR 0.77, DART 0.00 EMR 1.31 above 1.0: ask why

No single number decides a contract. Contractor B's rates look worst, but its small number of hours means one or two injuries swing the rate widely, so its three-year trend and program matter more. Contractor C has the best rate this year but raises a different question that needs a closer look at its program. Numbers start a conversation about how each contractor manages its hazards; they do not end it.

Worked problem

Two crews, one hazard

At Pinecrest, a maintenance contractor is replacing a valve on the battery inlet while a trucking contractor loads condensate from the tanks 66 ft (20 m) away. The maintenance crew plans to vent the line to atmosphere before removing the valve. Nobody has told the truck driver. What should have happened, and who is responsible?

Show solution
  1. The two activities interact: venting releases flammable and possibly sour gas, and the truck's engine and loading operation are ignition sources and put the driver downwind of the vent if the wind shifts.
  2. The daily coordination meeting or SIMOPS review should have identified the conflict, and the permit for the valve work should have required stopping loading, or scheduling it at another time, before venting.
  3. Under OSHA's policy, the maintenance contractor is the creating employer, the trucking company is the exposing employer, and the operator or its consultant, with authority over the site, is likely the controlling employer; each could be cited.
  4. Anyone who notices the conflict, including the truck driver, should use stop work authority until the two jobs are coordinated.

Answer: The interaction should have been caught by coordination and permits; responsibility is shared by the coordinating party and each employer, and anyone can stop the work.

Common mistakes

  • MistakeAssuming the operator handles all safety, so contractors need not plan.

    InsteadKnow that each employer keeps its duties to its own workers, and the coordinating party coordinates all employers.

  • MistakeChoosing contractors on price and paperwork alone.

    InsteadPrequalify on program and performance, then plan, monitor and evaluate the work.

  • MistakeStarting work without telling other crews what you will do.

    InsteadShare plans at the coordination meeting and check for simultaneous operations conflicts.

  • MistakeIgnoring a hazard because another company created it.

    InsteadUse stop work authority and report it, whoever created it.

  • MistakeJudging a small contractor on one year's injury rate.

    InsteadLook at trends, leading indicators and the safety program as well.

Summary and key terms

  • Oil and gas sites usually have many employers, and most fatalities are among contractors.
  • OSHA's multi-employer citation policy can hold creating, exposing, correcting and controlling employers responsible for the same hazard.
  • Every employer keeps its duties to its own workers, and the operator keeps its duties for the site.
  • Contractor safety management follows a life cycle: prequalify, plan, orient, execute and monitor, evaluate.
  • Bridging documents define whose procedures apply and who does what at the interfaces.
  • Short-service employee programs, coordination meetings, permits, SIMOPS plans and stop work authority control multi-employer hazards.
  • Injury rates per 200,000 hours help compare contractors but must be read with trends and leading indicators.
Prime contractor
In Alberta and British Columbia, the party designated to coordinate health and safety on a site with two or more employers.
Controlling employer
Under OSHA's multi-employer policy, an employer with general authority to correct hazards on a site.
Bridging document
A document linking the safety management systems of an operator and a contractor for a job.
Prequalification
Assessing a contractor's safety program and performance before awarding work.
Short-service employee
A worker new to the industry, company or job, often identified and mentored for a period.
Stop work authority
The authority of any worker to stop a task believed to be unsafe.
SIMOPS
Simultaneous operations: different activities happening close together that may interact.

Practice problems

Work each problem on paper first, then reveal the answer to check.

  1. Name the four employer roles in OSHA's multi-employer citation policy.

    Show answer

    Creating, exposing, correcting and controlling employers.

  2. What must a controlling employer do under the policy?

    Show answer

    Exercise reasonable care to prevent and detect violations, for example by inspecting at reasonable intervals and requiring correction.

  3. List the stages of the contractor safety management life cycle.

    Show answer

    Prequalification, job planning, mobilization and orientation, execution and monitoring, evaluation and close-out.

  4. What does a bridging document record?

    Show answer

    Whose procedures apply to which activities and who is responsible for monitoring, emergency response and reporting.

  5. Why do many companies mark short-service employees?

    Show answer

    New workers are injured at higher rates, so others can watch out for and mentor them.

  6. Name four coordination tools on a busy site.

    Show answer

    Any four of daily coordination meetings, FLHAs or JSAs, permits, SIMOPS plans, shift handovers, stop work authority.

  7. How is an injury frequency rate per 200,000 hours calculated?

    Show answer

    Number of injuries multiplied by 200,000, divided by hours worked.

  8. Why can a small contractor's injury rate be misleading?

    Show answer

    With few hours, one or two injuries change the rate greatly; trends matter more.

  9. Who may use stop work authority?

    Show answer

    Any worker, including workers of other companies on the site.

  10. In the venting example, what tool should have caught the conflict?

    Show answer

    The daily coordination meeting or SIMOPS review, and the permit for the valve work.

Lesson quiz · 5 questions

Score 60% or more to complete this lesson.

Take the quiz