CIDB SHASSIC Guide: CIS 10 Safety Audits in Malaysia

By Ir Vimal, Professional Engineer | Published on October 5, 2026

Construction site safety across Malaysia has evolved from a check-the-box statutory requirement into a data-driven, engineering benchmark. Central to this standardisation is the CIDB Safety and Health Assessment System in Construction (SHASSIC), administered under the regulatory framework of Construction Industry Standard (CIS 10:2020). Designed by the Construction Industry Development Board (CIDB Malaysia) in synergy with the Department of Occupational Safety and Health (DOSH Malaysia), SHASSIC independently evaluates, benchmarks, and scores occupational safety and health (OSH) management and site-level implementation across infrastructure and building works. For principal contractors and developers, securing a high SHASSIC rating is not merely a mark of operational excellence—it directly elevates competitive prequalification for major federal, state, and institutional infrastructure tenders.

1. Regulatory Framework & Legal Mandates

The operational framework of SHASSIC aligns with Malaysia’s statutory safety hierarchy. With the enforcement of the Occupational Safety and Health (Amendment) Act 2022 (Act A1648)—which streamlined and absorbed primary statutory mandates formerly governed under the repealed Factories and Machinery Act (FMA) 1967—duty-holders face expanded legal liabilities. Today, project owners, designers, and principal contractors are collectively bound by the principles of prevention through design and dynamic risk assessment.

SHASSIC assessments are officially conducted when a construction project reaches between 25% and 75% physical progress. Conducting audits during this critical window ensures that high-risk site operations—such as heavy crane lifting, deep basement shoring, falsework erection, and working at heights—are live and observable. This provides CIDB-certified assessors with an authentic, unvarnished cross-section of daily hazard identification and supervisory control.

2. Core Objectives of the CIS 10 Assessment System

The rollout of CIS 10 (Safety and Health Assessment System in Construction) was created to establish an empirical, repeatable framework that addresses chronic job-site risks. Its fundamental industry objectives include:

• Standardised Benchmarking: Providing an objective scoring mechanism that evaluates micro-contractors and tier-one turnkey builders on an equitable, standard grading curve.
• Harmonisation with International Protocols: Establishing procedural parity with global safety management standards, such as ISO 45001:2018 and MS 1722:2011 (Occupational Safety and Health Management Systems).
• Data-Driven Site Governance: Replacing static annual paperwork with proactive Hazard Identification, Risk Assessment, and Risk Control (HIRARC) matrices calibrated to active on-site machinery and transient labour forces.
• Commercial and Prequalification Leverage: Qualifying construction firms for premier CIDB scoreboards and preferential tender scoring in government mega-projects and institutional joint ventures.

3. The 3 Primary Components of a SHASSIC Audit

A certified SHASSIC evaluation dissects occupational safety across three targeted assessment methods, distributing points systematically to gauge administrative diligence, live engineering controls, and field safety culture.

Component 1: Document Check (20% Weightage)

Assessors verify statutory compliance, certifications, and technical filings, including:

• Corporate Safety Policy: Signed, up-to-date OSH commitments prominently displayed at site entrances and offices.
• HIRARC & Safe Work Method Statements (SWMS): Site-specific hazard management protocols that reflect real-time structural risks rather than generic administrative templates.
• Machinery Fitness Certificates (PMA/PMT): Current, certified inspection certs issued by DOSH for passenger hoists, tower cranes, mobile lifting plant, and pressurized air vessels.
• Personnel Competency: Valid CIDB Green Cards for all site operatives, formal site appointments for licensed Safety and Health Officers (SHO), certified Site Safety Supervisors (SSS), and accredited scaffolding supervisors.
• Incident Governance (NADOPOD): Structured documentation matching the Occupational Safety and Health (Notification of Accident, Dangerous Occurrence, Occupational Poisoning and Occupational Disease) Regulations 2004.

Component 2: Workplace Inspection (60% Weightage)

Accounting for the largest score proportion, this physical audit inspects the implementation of physical controls on the active work fronts:

• Fall Prevention and Working at Height: Structural compliance of perimeter edge protection, catch platforms, safety harnesses, anchorage lifelines, and certified modular scaffolding systems.
• Excavation, Earthworks, and Shoring: Visual stability of trench shoring systems, sheet piles, dewatering setups, and safe ingress/egress for sub-surface operations.
• Plant and Mechanical Safety: Guardrails around rotating parts, tested limit switches on winches/hoists, reverse alarms, and daily plant pre-operation logs.
• Housekeeping and Occupational Welfare: Dust suppression, unblocked emergency egress paths, accessible first-aid facilities, fire prevention equipment, vector control, and complete personal protective equipment (PPE) compliance.

Component 3: Employee Interviews & Surveys (20% Weightage)

Assessors cross-examine safety culture through independent, closed-door interviews with randomly selected workers and supervisors:

• Managerial Personnel (Category A): Project Directors and Site Agents are evaluated on safety budget allocations, legal accountability under Act 514, and corrective action turnaround times.
• Supervisory Personnel (Category B): Engineers, trade foremen, and sub-contractor leads are vetted on daily toolbox talk delivery, permit-to-work (PTW) enforcement, and stop-work authority application.
• Direct Labor Force (Category C): On-ground general and trade workers are quizzed on evacuation routes, emergency assembly protocols, primary hazard awareness, and the right to refuse imminently dangerous assignments.

4. SHASSIC Weightage and Star Rating Classification

Following audit completion, raw scores from the three components are weighted to produce an aggregate percentage score out of 100%. CIDB assigns a standardized Star Rating based on the overall performance tier:

5. Integrating Site Safety with Structural Integrity and Dilapidation

While SHASSIC measures active site OSH protocols, job-site safety cannot be viewed in isolation from comprehensive engineering health and adjacent structural stability. Ground disturbance, heavy piling, dewatering, and vibration during early-phase civil works routinely introduce structural stresses to surrounding assets.

Before mobilizing high-tonnage machinery or commencing blasting and sheet-piling, engaging a certified dilapidation survey protects developers and contractors against unjustified third-party damage claims by establishing pre-construction baseline condition records. Similarly, as high-rise superstructures advance toward roof capping and glazing, undertaking a façade and roof inspection using drones provides high-definition thermal and visual envelope data without deploying workers into perilous high-altitude positions.

Where load-bearing elements, basement retaining walls, or post-tensioned slabs exhibit early signs of settlement, micro-cracking, or honeycombing, securing an independent structural repair consultancy ensures that remedial designs conform to the Uniform Building By-Laws (UBBL 1984) and technical standards. Finally, as practical completion nears, engineering rigor transitions directly into client handover verification, where an exhaustive property defect inspection during DLP ensures the finished structure is safe, compliant, and free of latent architectural or structural defects.

Frequently Asked Questions (FAQ)

Is a CIDB SHASSIC assessment mandatory for construction projects in Malaysia?

SHASSIC assessments are mandatory for all public sector projects with a contract value exceeding RM20 million, as stipulated under government procurement circulars. In the private sector, institutional developers, multinational corporations, and joint-venture projects frequently require a minimum 4-star or 5-star SHASSIC rating as a contractual pre-requisite during tender evaluation and award.

What is the optimal project stage to schedule a SHASSIC audit?

The standard audit window is between 25% and 75% physical site completion. Applying when the project is near 50% completion is ideal, as this period typically exhibits concurrent operations across structural framing, earth retaining, heavy lifting, MEP rough-ins, and high-altitude exterior works.

What is the difference between CIDB QLASSIC and SHASSIC?

While both are national assessment frameworks established by CIDB Malaysia, their engineering focus differs fundamentally. QLASSIC (CIS 7) measures the quality of workmanship and architectural finishes of a completed building against design tolerances. In contrast, SHASSIC (CIS 10) independently evaluates occupational safety, health systems, and physical hazard management on the active job site during the construction phase.

How long is a SHASSIC Star Rating certificate valid?

A SHASSIC certificate is site- and project-specific. The star rating reflects the safety management performance demonstrated on that particular site throughout the audit assessment period and remains valid for the official duration of the audited project contract.