COR for a company with 5 to 15 people
Last updated: Written by Blake Cowan, NCSO
Most COR guidance assumes you have a safety department. At eight or twelve people you do not. This is written for that situation.
The short answer
Yes, a small company can get COR, and small employers are much of who these programs serve. Several provinces run a small employer stream with a different process, often a self assessment rather than a full external audit. Alberta's is commonly called SECOR. Ask your certifying partner which stream applies at your headcount before you start building.
Most COR guidance is written as though you have a safety department. At eight or twelve people you do not. You have an owner who is also the estimator, and a foreman who is also the most experienced hand on the tools.
This page is written for that situation.
First, work out whether you actually need it
Before anything else, because the answer changes what you should do next.
Nobody is legally required to hold COR. It is a commercial requirement that clients impose, and a premium incentive that the workers compensation board offers. So ask two questions.
Who is asking for it? If a prime contractor or an owner has made COR a condition of prequalification, you need it to bid that work, and the deadline is theirs rather than yours. Get from them, in writing, exactly what they will accept. This matters more than it sounds, because some clients specify full COR and will not accept a small employer certificate. Finding that out after you have built toward the wrong one is the most expensive mistake available here.
What is your premium worth? Take your annual workers compensation premium and work out the refund. In Alberta, the COR portion of Partnerships in Injury Reduction is a 10 percent refund in the first year, then 5 percent annually while COR is maintained, within a program that refunds up to 20 percent across three measures. In British Columbia, the WorkSafeBC incentive is 10 percent of base assessment premiums per classification unit included in the certificate, with a minimum of the lesser of $1,000 or 75 percent of premiums paid.
If nobody has asked and your premium is small, the honest answer may be that you do not need this yet. Nobody else in this market will tell you that, and it is sometimes true. Full detail on grants and premium incentives.
Ask about the small employer stream before you build anything
This is the single most useful thing on this page.
Several provinces run a small employer stream, typically built around a self assessment the employer completes rather than a full external audit by an independent auditor. Alberta's version is commonly called SECOR. It exists precisely because a full external audit is disproportionate for a company of eight people.
Three things to confirm with your certifying partner, in writing, before you spend a dollar:
- Which stream applies at your headcount. The thresholds and the process are set by your certifying partner and your provincial workers compensation board. We are not going to publish a number, because it varies and a wrong number here costs you months.
- How the premium refund applies to that stream. Confirm this with the workers compensation board directly rather than assuming it matches the full COR treatment.
- Whether your client accepts it. Back to the first section. The client drives this.
SECOR compared with full COR goes into the difference properly.
What is genuinely lighter, and what is not
Worth being straight about, because the small employer stream is often oversold as a shortcut.
| Lighter for a small company | Not lighter at all | |
|---|---|---|
| Volume of records | Yes. Fewer workers, fewer sites, fewer forms | |
| How you are assessed | Often yes, if a self assessment stream applies | |
| The program itself | You still need a policy, hazard assessments for your tasks, orientation, inspections, incident investigation, emergency planning and corrective actions | |
| Formal hazard assessments | One per task you perform. A company of eight doing varied work can have as many tasks as a company of forty | |
| Consistency over time | The evidence still has to cover the whole period with no gaps, and this is harder with fewer people, not easier | |
| Somebody owning it | Hardest part at this size. There is no spare person |
Scroll the table sideways to see every column. The first column stays in place.
The pattern: the number of records scales with your crew, but the program does not. That is the real reason small companies find this hard, and it is not a failing on their part.
The two failure modes at this size
I see these constantly, and they are both avoidable.
The binder from a previous employer. Somebody arrives with a program from a bigger company, or buys a generic one, and it names tasks the company does not perform and omits the ones it does. An auditor identifies this immediately, because the participant lists are empty and the task names do not match the invoices. Worse, the crew knows it is not about their work, so they stop taking any of it seriously.
The program that lives in one head. The owner knows how everything is done, and none of it is written where anybody else can find it. This passes an audit if the owner is in the room and collapses the moment they are not. It is also the reason certifications lapse: one person leaves and the whole thing stops generating records.
The defence against both is the same. Write the assessments for the work you actually do, with the people who do it, and make the record a by product of the work rather than an evening admin task.
What a realistic small company program looks like
Not the enterprise version. The version that survives a busy August.
- A health and safety policy, one page, signed and dated by the owner. Not by a consultant.
- Written responsibilities for the owner, the foreman and the crew. Specific duties, three or four each, not slogans.
- A formal hazard assessment for each task you actually perform. Start with the highest risk three or four rather than trying to write twenty. Involve the crew, and put their names on it.
- A field level hazard assessment card the crew completes before work starts, short enough that they will actually finish it, referencing the formal assessment. How to fill one out properly.
- An orientation record for every new hire and every new site, covering the actual hazards of the actual work rather than a signature under the words "orientation completed".
- A training matrix, which at this size can be one spreadsheet: who holds what, and what expires when. Check it weekly. Expired tickets in active use are the easiest finding in the world to hand an auditor.
- Inspections at a frequency you will actually meet. If your program says monthly and you manage eight in a year, your own document has created the finding. Write down a frequency you can hit.
- One corrective action register, from every source, with a name, a date and a verification column. This is the document that most often decides whether an audit goes well.
- An emergency plan per site, including what happens where there is no cell coverage, and a working alone check in that a named person actually monitors.
- An annual review of the whole thing, written down, even in the years nothing changed.
That is a real program. It is not a small one, but every item on it is something you can produce in an afternoon except the ones that need time to accumulate.
The honest cost, in the currency that actually binds
The money is usually not the problem at this size. The time is.
The build is a defined piece of work, and once it exists the ongoing cost is small. What kills small company programs is the accumulation phase: months where somebody has to keep generating records while also running the business. There is no way to buy your way past that, because you cannot manufacture a record of an inspection that never happened.
Which leads to the only piece of scheduling advice that matters: start generating evidence now, before you have decided anything about certification, streams, software or consultants. Your audit period is already running. Every week you spend deciding is a week of evidence you do not have.
The audit readiness checklist is free, needs no email, and will tell you in an afternoon how far you actually are.
Free templates sized for this
All ten are ungated direct downloads, in print ready PDF and editable DOCX so you can put your own company name on them.
COR audit readiness checklist
Walk your own program the way an auditor will, before the auditor does it for you.
Direct download. No email, no signup, no form.
Field level hazard assessment (FLHA) card
A one page card a crew will actually finish at the tailgate, before the work starts.
Direct download. No email, no signup, no form.
Worker orientation checklist
A specific orientation record rather than a signature on a generic page, which is what auditors look for.
Direct download. No email, no signup, no form.
The full library has the formal hazard assessment worksheet, incident report, corrective action tracker, inspection form, toolbox talks, equipment pre use inspection and the National Safety Code trip inspection reference.
If you would rather not do it yourself
Plenty of companies at this size do it themselves with the templates, and that is a completely respectable answer. If you would rather have the program written and mapped to your certifying partner's audit elements, that is what a build engagement is, and what it costs explains the shape of it. Bring whatever you have, even if it is three photocopied forms.
And if the honest conclusion of a call is that you do not need this yet, we will tell you that.
Questions people actually ask
Can a company with 10 employees get COR?
Do I actually need COR?
How long does it take a small company?
Who does the safety paperwork when there are only eight of us?
Is the paperwork burden smaller for a small company?
Is it worth the money at our size?
Next step
Take the templates and use them, whether or not you ever talk to us. If you would rather not build the program yourself, we will build it inside the app and keep it current.