VCA requirements: the checklist explained

The VCA checklist is the heart of the certification. It is a structured overview of the requirements your company must meet to be certified. The checklist is publicly available via the Stichting Samenwerken Voor Veiligheid (SSVV, the foundation that manages the VCA scheme)  and is revised periodically to stay current.

The current version is VCA 2026/6.1, which applies from 1 July 2026 and replaces the previous version 2017/6.0. The VCA standard describes the full scheme: its structure, version history and the difference between must questions and additional requirements. The checklist is made up of chapters that each cover one aspect of safety management. Which chapters apply to you depends on your VCA level: VCA* tests less than VCA**.

Some of the requirements follow directly from the law, such as the mandatory risk inventory and evaluation under the Arbowet (Dutch Working Conditions Act) on wetten.overheid.nl . During the VCA audit, the auditor checks whether you comply with these requirements in practice.

The structure of the VCA checklist

The VCA checklist consists of seven chapters, each with its own focus. The chapters build on each other: the first chapters cover the basics, and the later chapters cover more advanced management aspects.

VCA* focuses on operational aspects: diplomas, safety awareness and direct working practices. VCA** adds the management layer: policy, planning and systematic improvement.

Chapter 1: VGM policy and organisation

This chapter covers the organisational basis for safety. It asks whether safety is embedded in the organisation and whether responsibilities are clear.

VGM policy

For VCA**, you must have a written VGM policy (safety, health and environment policy) that is signed by management. This policy describes your organisation’s principles on safety, health and the environment.

The policy does not need to be a long document. One page with the key points is enough, as long as it is concrete. Avoid vague wording such as “we strive for safety”. Describe what your organisation does and how.

A good VGM policy contains:

• The commitment of management to safety
• The main VGM objectives
• How the organisation ensures safety
• What is expected of employees
• The date and signature of the director responsible

For VCA*, a formal policy is not a requirement, but it is advisable. It helps to have the principles clear.

VGM organisation

It must be clear who is responsible for what in terms of VGM. For VCA**, this must be recorded in an organisation chart or job descriptions.

Name who is ultimately responsible for VGM (usually management), who does the day-to-day coordination (often a KAM coordinator or prevention officer), and who is responsible for implementation on the shop floor (managers).

Management involvement

For VCA**, management must be demonstrably involved in VGM. This does not mean the director stands on the construction site wearing a safety helmet every day, but VGM should appear on the agenda regularly.

Evidence of management involvement can be:

• Minutes of management meetings where VGM is discussed
• Management attendance at VGM meetings
• Management review of VGM performance
• Signing of policy and important documents

VGM objectives

For VCA**, you must have measurable objectives in the field of VGM. Think of:

• Number of incidents and near misses
• Percentage of employees with a valid diploma
• Number of toolbox meetings per period
• Results of workplace inspections

The objectives must be monitored and evaluated. If you miss an objective, analyse why and adjust your approach.

Chapter 2: VGM risk management

This chapter is about identifying and controlling risks. The foundation is the risk inventory and evaluation (RI&E), supplemented by specific risk assessments for projects and activities.

RI&E

Every employer in the Netherlands is legally required to have an RI&E. This follows from the Arbowet . For VCA, the RI&E is also a requirement, for both VCA* and VCA**.

The RI&E must inventory the risks of your work, evaluate how serious the risks are, and describe measures to control them. The RI&E must be up to date. If your work changes, the RI&E must be updated.

For companies with up to 25 employees, a recognised sector RI&E tool can often be used. The Inspectie SZW (Dutch Labour Inspectorate)  maintains a list of recognised tools .

Task risk analyses (TRA)

For work with risks that are not covered in your general RI&E, you make specific task risk analyses (TRAs). This is a must question for all VCA levels. A TRA goes deeper into the risks of a specific task than the general RI&E. A worked example is on the task risk analysis (TRA) page.

A TRA describes the task step by step, identifies the risks at each step, assesses how serious the risks are, and describes the measures to work safely. TRAs are often made for work such as working at height, working in confined spaces, lifting operations and working with dangerous substances.

Last minute risk analysis (LMRA)

The last minute risk analysis (LMRA) is a short check just before you start work. The aim is to check whether the situation is still safe and whether new risks have arisen.

The LMRA is standard practice with many clients in industry. Employees are trained to pause before starting work, consider the risks and check that everything is in order.

Chapter 3: Training, information and instruction

This chapter covers the competence of employees. It asks whether employees have the knowledge and skills to work safely.

VCA diplomas

The key point of this chapter is that operational employees must hold a valid safety diploma. For operational employees this is the B-VCA diploma; for operational managers it is the VOL-VCA diploma.

The definitions are as follows:

• Operational employee: someone who carries out high-risk work, such as installing, assembling, maintaining or building.
• Operational manager: someone who directly leads operational employees and is responsible for their safety.

Not all employees need a VCA diploma. Office staff who do not carry out high-risk work fall outside the requirement. However, as soon as someone enters a work location where there are risks, a diploma is required.

Diplomas must be valid. VCA diplomas are valid for ten years from the exam date. Check validity regularly and plan retakes in good time.

Diploma percentages

VCA sets requirements for the percentage of employees with a valid diploma. The exact percentages can vary per client, but the standard sets the following:

• At least 90% of operational employees must hold a valid B-VCA diploma
• 100% of operational managers must hold a valid VOL-VCA diploma

It is important to have an up-to-date overview of all employees with their diplomas and expiry dates. The auditor always asks about this.

Professional competence

In addition to VCA diplomas, employees must also be competent for the work they do. An electrician must have the right electrotechnical training. A crane operator must hold a crane certificate. A welder must hold a welding certificate.

VCA checks whether you verify professional competence and whether you record it. It is not enough to assume someone is qualified; you must be able to demonstrate it.

Instruction for new employees

New employees and temporary agency workers must receive instruction on the company’s safety rules before they start work. This covers the general house rules, the specific risks of the work, the use of personal protective equipment, and what to do in emergencies.

Record that the instruction was given and that the employee understood what is expected of them.

Chapter 4: VGM awareness

This chapter is about creating and maintaining safety awareness in the organisation. The aim is for safety to be not just a set of rules, but a shared value.

Toolbox meetings

Toolbox meetings are short gatherings in which a safety topic is discussed. The name comes from the practice of pausing at the toolbox before work begins.

VCA requires regular toolbox meetings. The frequency can vary, but plan for at least one a month. Topics can include: specific risks of the work, lessons from incidents, new procedures, seasonal risks, or current events.

A toolbox does not need to be long; 15 to 30 minutes is often enough. What matters is interaction: not only telling, but also asking questions and listening to employees.

Record each toolbox with date, topic and attendees. The auditor wants to see that toolbox meetings take place regularly and that the topics vary.

Workplace inspections

Workplace inspections are systematic checks of the work environment for safety. This can be a formal inspection with a checklist, or an informal round in which a manager watches for unsafe situations.

VCA requires regular workplace inspections. Record the findings: what was checked, what was in order, and what was not. Address the problems found and record the measures taken. How often this must happen and what a report looks like is explained on the workplace inspection VCA page.

Reporting incidents and near misses

Reporting and recording incidents and near misses is a core VCA requirement. An incident is an event in which damage or injury has occurred. A near miss is an event that could have led to damage or injury, but where this did not happen through luck or chance.

The purpose of reporting is not to find someone to blame, but to learn. Analyse incidents and near misses to understand what went wrong and how to prevent a repeat. How to approach this is covered on the incident investigation and reporting near misses page.

Create a culture in which reporting is normal. If employees are afraid of consequences, they do not report. And if nothing is reported, you cannot learn.

VGM meetings

For VCA**, there must be structured meetings on VGM matters. This can be a separate VGM meeting, or VGM as a fixed part of the regular work meeting.

The meeting must lead to actions and improvements. Record the topics discussed, the conclusions and the agreed actions. Follow up on whether actions are carried out.

Chapter 5: VGM project plan

This chapter only applies to VCA** and covers safety planning for projects.

Project-specific safety planning

For larger projects or projects with specific risks, you must make a VGM project plan. This plan describes the risks of the project, the measures to be taken, the responsibilities, and the agreements with the client. See the VGM plan with example and the difference from the legal V&G plan.

The plan is made before the project starts and is updated during the project if the situation changes. At the end of the project, evaluate how it went and what you can learn for future projects.

Coordination with clients

When working at a client’s location, you must agree on safety. What are the house rules of the location? What risks are there? What permits are needed? How are emergencies handled?

Record the agreements and make sure employees are informed before they enter the location.

Chapter 6: Environmental management

VCA stands for safety, health and environment. This chapter covers the environmental aspects, although the emphasis in VCA remains primarily on safety and health.

Waste separation and disposal

You must separate and dispose of waste in a responsible way. This is partly a legal requirement, but VCA checks whether you actually do it.

At work locations, you must separate waste according to the location’s rules. Hazardous waste must be collected separately and disposed of through recognised channels.

Environmental incidents

As with safety incidents, environmental incidents must also be reported and recorded. Think of leaks, spills of dangerous substances, or unintended discharges.

Environmental permits

If your activities require an environmental permit, you must hold the right permits. VCA checks whether you know which permits you need and whether you have them.

Chapter 7: Purchasing and inspection of materials

This chapter covers the checking of materials, tools and equipment.

Inspection of work equipment

Work equipment such as ladders, scaffolding, lifting equipment and electrical tools must be inspected regularly. The inspection frequency depends on the type of equipment and how it is used. For electrical tools and fixed installations, NEN 3140 is the common approach, with periodic NEN 3140 inspection of the installation.

Record the inspections and make sure only approved equipment is used. Rejected equipment must be taken out of use and repaired or replaced.

Personal protective equipment

Personal protective equipment (PPE) such as helmets, safety goggles, hearing protection and safety shoes must be available and used correctly.

Check the condition of PPE and replace it when necessary. Instruct employees on correct use and maintenance.

Purchasing services

For VCA**, you must also consider safety in purchased services. If you use subcontractors, check that they meet the safety requirements. Are they VCA certified too? Do their employees hold the right diplomas?

Record the requirements for subcontractors and check that they are followed.

Must, should and additional requirements

The VCA checklist distinguishes between different types of requirements:

Must requirements are hard requirements. If you do not meet a must requirement, you cannot be certified. These requirements are marked with “M” in the checklist.

Should requirements are important requirements that you should in principle meet, but from which you can, in exceptional cases, deviate with a justification. These are marked with “S”.

Additional requirements are requirements that contribute to a higher safety level, but are not strictly required for certification. These are marked with “A”.

How many must questions are there?

The number of must questions differs per level:

You must answer all must questions positively to pass. One must question not met? Then no certificate.

Accident frequency index (IF)

In addition to the checklist, the auditor also looks at your accident figures. Your accident frequency index (IF) may not be higher than 40.

What is the IF?

The IF shows how often accidents with absence occur per million hours worked. The lower the number, the better.

The formula:

IF = (number of accidents with absence × 1,000,000) / total hours worked

A worked example

You have 15 employees who each work 1,800 hours a year. That is 27,000 hours in total. There was 1 accident with absence.

IF = (1 × 1,000,000) / 27,000 = 37

This is below 40, so you meet the requirement.

What if your IF is too high?

If your IF is above 40, you cannot be certified. You must first work on reducing accidents. This may mean:

• Extra toolbox meetings on specific risks
• More workplace inspections
• Better PPE or stricter checks on use
• Training and awareness

Only when your IF falls below 40 can you start the certification process.

Differences in VCA requirements per level

The table at the start of this article gives an overview, but it is good to understand the nuances.

VCA* primarily tests:

• Safety diplomas of employees
• Basic records (toolbox meetings, incidents, inspections)
• Use of PPE and safe working methods
• Inspection of work equipment

VCA** adds to this:

• A written and signed VGM policy
• Measurable objectives and monitoring
• Systematic risk management with TRAs
• Management involvement and review
• VGM project plans for projects
• Requirements for subcontractors

VCA Petrochemie adds further requirements specific to the petrochemical sector.

Preparing for the VCA audit

The best preparation is to go through the checklist point by point and check for each point whether you meet it. Gather the evidence: the documents, the records, the diplomas.

Make sure you comply not only on paper but also in practice. The auditor will not only check documents, but will also visit the work location and speak to employees.

Read more about the audit process and how to prepare.

More information

• The VCA standard – Scheme, versions and structure of the checklist
• Toolbox meeting – Frequency, topics and records
• LMRA – The last minute risk analysis explained
• VCA levels – Detailed comparison of VCA*, VCA** and Petrochemie
• Step-by-step plan – From start to certificate
• The audit process – What can you expect at the audit?
• Recent changes – What changes in 2025/2026?
• VCA internationally – Working abroad
• Frequently asked questions – Answers to practical questions