COR certification in Ontario

Ontario is the simplest province to explain and the easiest to get wrong. One authority, one standard, and one very expensive misunderstanding that comes up over and over.

IHSA is the only body that certifies COR in Ontario

IHSA certifies COR in Ontario. Its COR coverage spans construction, electrical utilities, transportation, aggregates, ready mix concrete and natural gas. If your company works in one of those sectors, IHSA is who you talk to.

That is unusual for this country. In Alberta and British Columbia (BC), several certifying partners split the work by industry, so a company's first job is working out which one it belongs to. In Ontario there is one door.

Now the correction, and it is the most useful thing on this page.

WSPS and Workplace Safety North do not certify COR. Both are Ontario health and safety associations doing legitimate work: training, consulting and sector specific guidance for the industries they serve. They are simply not COR certifying bodies, because in Ontario that role sits with IHSA.

I raise it because I have watched companies lose months here. Somebody hears the name of a health and safety association, reasonably assumes any of them can certify COR, and starts a conversation that was never going to end in a certificate. Then the prequalification deadline arrives.

What COR 2020 is

COR 2020 is the current version of the Ontario standard.

That sounds like a detail for a filing cabinet, and it is not. Audit protocols change between versions. Elements get renamed, regrouped and reworded, and the scoring rules move with them. A company preparing against an older protocol can do months of genuine, careful work and still be building toward the wrong target.

It happens most often when a company works from documents somebody brought from a previous employer, or a template pack bought years ago. The work looks right. It maps to a version nobody audits against any more.

So before you write a single procedure, get the current COR 2020 protocol and the scoring rules from IHSA in writing. Then build your program against your certifying partner's audit elements as they are defined today, not as they were defined in whatever document you inherited.

Any guide promising a fixed number of audit elements is describing one protocol at one moment and presenting it as permanent. Work from the document IHSA hands you.

What the audit involves

An external audit gathers evidence three ways, and the three have to agree with each other.

Documentation review. The auditor reads your program and samples records across the whole audit period: policy, roles and responsibilities, hazard assessments, safe work practices, training records, inspections, incident investigations, emergency plans and management reviews.

Interviews. Senior management, supervisors and workers, selected by the auditor rather than by you.

Site observation. Whether the controls your documents describe are the controls actually in use.

Interviews are where a program that exists only on paper comes apart. The documents say hazard assessments are done every morning. The auditor asks the crew what they did that morning, and the answers do not match the binder. You cannot brief your way out of that in the week before the audit, because the auditor is not asking about the week before the audit.

If you want to see the same ground an auditor walks, the COR audit readiness checklist covers it, and the documents auditors ask for covers what gets requested first and what a strong answer looks like.

Does Ontario COR transfer from another province?

Honestly: sometimes, partly, and never assume it.

There is no national COR body. Each province owns its own program, sets its own audit protocol and issues its own certificate. A certificate earned in Alberta was earned against Alberta's protocol under an Alberta certifying partner, not against COR 2020 under IHSA.

Reciprocity arrangements do exist between some programs and are worth asking about, but they are not automatic, not universal, and the terms can carry conditions.

If your company is expanding into Ontario with a certificate from somewhere else, ask IHSA directly what it recognizes and under what conditions. Get the answer before you bid the work. For the wider picture on how the provinces differ, see the guide to COR certification in Canada.

Premium incentives

Here is where I have to tell you what I do not know.

Our sources confirm two provincial premium incentives tied to COR: the WCB Alberta Partnerships in Injury Reduction program, and the WorkSafeBC COR incentive. They do not cover an Ontario equivalent.

So I cannot tell you whether holding COR in Ontario reduces what you pay, and I am not going to invent a figure to make this page look complete. Ask the WSIB and IHSA directly, and get the answer in writing before it goes in a business case.

The grants and premium incentives page covers the Alberta and BC programs we have verified, with the actual percentages and eligibility rules.

Keeping it between audits

The certificate is not the finish line. It depends on producing roughly three years of audit evidence on demand. That is a rolling obligation: the system has to keep generating records in the quiet months when nobody is thinking about an audit.

The failure points are the same everywhere, and they are boring:

• Evidence gaps mid period. A month with no inspections because the supervisor who did them left.
• Corrective actions that never closed. Found, written down, assigned, and then nothing. This is the most common finding I see.
• Expired tickets in active use. Nobody was watching the dates.
• Documents that stopped matching the work. You added a service line and the hazard assessments never caught up.
• A program that lives with one person. They leave, and it turns out nothing was written down anywhere anybody else could find it.

The defence is to make record keeping a by product of doing the work rather than a separate office task. If a supervisor has to remember to file something, it will not survive a busy August.

Where to start

1. Get the current COR 2020 protocol and scoring rules from IHSA in writing. Everything else depends on this, and building against an old version is the expensive mistake.
2. Confirm IHSA covers your classification. If your sector is not obviously one of those listed above, ask rather than assume.
3. Confirm which stream applies at your headcount, because a smaller employer may face a different process. If you have a small crew, COR for small companies is the place to start.
4. Run an honest gap analysis against the current protocol, and fix the documentation gaps first, because they close slower than site conditions.
5. Start generating evidence now. Whatever your audit period turns out to be, it is already running.

You can work through most of this without paying anybody. The checklist below walks the same ground an auditor walks, and the free safety document templates cover the forms that generate most of your audit evidence.