Common Assessment Standard Version 6: a contractor evidence checklist
9 November 2026 · UK construction supply chains
Build UK’s Common Assessment Standard Version 6 took effect on 1 November 2026. If a buyer asks for CAS at your next prequalification or renewal, start by checking which evidence you can already show. You may need new records or clearer ownership, not a new folder of generic policies.
1. Confirm which assessment your buyer expects
Ask the buyer or recognised assessment body to confirm the assessment level, scope and date. CAS is a construction prequalification scheme, not a universal legal requirement or a replacement for project-specific checks. Do not assume a buyer’s request for SSIP means it wants the full CAS assessment.
2. Decide whether the Building Safety section applies
Version 6 treats the Building Safety section as opt-out rather than opt-in. If you do not carry out building work regulated by the Building Regulations, check the current question set and your assessor’s instructions before giving the requested statement. Check your actual scope, including subcontracted activities where relevant. Do not opt out based on your trade label alone.
3. Show competence and quality ownership in practice
Competence questions have moved into the Quality section. Start with a live project: identify the person responsible for quality, record who was authorised for the work, and check how training, supervision and changes were managed. Review fraud-prevention arrangements and your drugs and alcohol policy against the revised questions. Keep evidence of how the arrangements are used, not just a signed policy.
4. Review information security before renewal
Cyber Essentials Plus no longer exempts a supplier from the Information Security section. CHAS says the exemption now applies only to suppliers holding ISO 27001. Check the accepted scope and evidence with your assessor. If you need to complete the questions, identify who owns information security, where project data sits and how access, incidents and suppliers are managed. Cyber Essentials can still support your wider security controls.
Frequently asked questions
Do we need ISO 27001 to apply?
No. Suppliers without the exemption can answer the Information Security questions and supply the evidence requested. Treat ISO 27001 as a separate decision driven by your customers, risks and business needs.
Can we reuse existing ISO evidence?
Yes, where it is current, relevant and accepted. Cross-reference your quality, safety or information-security records to each applicable question. Keep the original owner and review date visible, and do not assume a certificate answers every question.
Get ready for your next assessment
Clause Ten can review your current evidence, agree a gap list and help your team implement and check the actions. Explore contractor accreditation support or ISO 27001 consultancy. Your assessment body makes the certification decision.
Sources: Build UK Common Assessment Standard and CHAS Version 6 guidance.
Comments