Build UK has published Version 6 of the Common Assessment Standard (CAS), introducing important changes to how construction companies demonstrate their competence, building safety arrangements, information security and organisational governance.
Effective from 1 November 2026, the revised standard reflects developments in legislation, industry guidance and client expectations. For contractors and suppliers, the changes could mean reviewing existing policies, management systems and supporting evidence before their next assessment.
What is the Common Assessment Standard?
Developed by Build UK in 2019, the Common Assessment Standard provides a consistent approach to supplier pre-qualification across the UK construction industry.
It enables contractors and suppliers to demonstrate their organisational capability through an assessment conducted by a Recognised Assessment Body, such as Constructionline, CHAS or Achilles.
With more than 26,000 companies certified, CAS helps reduce duplicated assessments and provides clients with greater confidence in their supply chains.
What Has Changed in Version 6?
1. Building Safety Requirements Are Now Opt-Out
Previously, companies could choose to complete the Building Safety section. Under Version 6, suppliers must now complete it unless they provide a statement confirming that they do not undertake building work regulated by the Building Regulations.
The revised requirements also clarify that scaffolding and temporary works generally fall outside the scope of regulated building work unless they form part of the completed structure.
What this means: Contractors should review their activities to establish whether the Building Safety requirements apply. Those undertaking regulated building work will need appropriate evidence of their organisational capability and arrangements for fulfilling relevant dutyholder responsibilities.
2. Competence Requirements Now Apply to All Suppliers
Questions relating to organisational competence have moved from the Building Safety section into the Quality section, making them applicable to all suppliers.
This reinforces the importance of demonstrating how employees and subcontractors are trained, supervised and assessed as competent to undertake their work.
What this means: Businesses should review their competence management arrangements, including training records, competency assessments and processes for maintaining relevant skills and knowledge.
3. ISO 27001 Receives Greater Recognition
One of the most significant changes concerns Information Security.
Previously, companies holding Cyber Essentials Plus could be exempt from completing the CAS Information Security section. This exemption has now been removed.
Under Version 6, only companies holding ISO 27001 certification qualify for the stated exemption.
What this means: Businesses relying on Cyber Essentials Plus will now need to complete the Information Security questions. Although Cyber Essentials Plus remains a valuable cybersecurity certification, ISO 27001 provides a broader framework for managing information security risks and may offer additional benefits during supplier pre-qualification.
4. Additional Governance Requirements Become Mandatory
Version 6 also introduces mandatory questions for all suppliers covering fraud prevention, the appointment of a dedicated person responsible for quality, and a Drugs and Alcohol Policy.
These changes demonstrate the increasing importance placed on effective governance, accountability and documented management arrangements throughout construction supply chains.
What this means: Organisations should check that their policies, assigned responsibilities and supporting procedures are documented, implemented and appropriate to their activities.
What Should Construction Companies Do Next?
Companies preparing for their next Common Assessment Standard assessment should review the revised requirements and undertake a gap analysis against their existing management systems.
Particular attention should be given to building safety responsibilities, competence management, information security and corporate governance.
For organisations already operating management systems aligned with ISO 9001, ISO 27001 or ISO 45001, existing processes and records may provide useful evidence to support their CAS assessment. However, ISO certification does not automatically satisfy every CAS requirement.
The revised question set applies to companies undergoing CAS certification or reassessment from 1 November 2026.
You might also benefit from BS 99001, the quality management system for construction.
How Assent Risk Management Can Help
At Assent Risk Management, we support organisations across the construction supply chain with management systems, compliance assessments, internal audits and preparation for third-party certification.
Our consultants can help businesses review their arrangements against the updated Common Assessment Standard, identify gaps and strengthen their management systems, including those aligned with ISO 9001, ISO 27001 and ISO 45001.
Need help preparing for Common Assessment Standard Version 6?
Contact Assent Risk Management to discuss how our consultants can support your compliance and certification objectives.
