SECOR vs COR: which one do you need?

Most people land on this question because a client asked for a certificate and the paperwork looked expensive. That is a fair reason to be here. What follows is the honest version, including the parts we cannot tell you.

The difference that actually matters

Strip away the acronyms and there is one structural difference worth understanding.

A full COR is assessed by an auditor from outside your company. They read your program, interview your people, walk a site, and score you against your certifying partner's audit elements. You are paying for an external audit and you are working to somebody else's calendar.

A small employer stream is typically built around a self assessment the employer completes, rather than a full external audit by an independent auditor. That is generally how small employer streams work, and it is the reason they exist: a smaller company can get recognized without carrying the cost and the scheduling of a full external audit every cycle.

Two honest qualifications on that.

Both routes still require a real safety program. The self assessment is an assessment of something. If the something does not exist, the form is just a list of things you have not done.

The paperwork burden is not proportionally smaller. A small crew still needs hazard assessments for its tasks, orientation records for every worker, inspections at its stated frequency and investigations that close out. A smaller company does not get a smaller obligation, it gets the same obligation with fewer people to carry it.

Cost and privacy are the real reasons people pick SECOR

The honest driver is money, and after money it is privacy. Very few companies choose their stream on the paperwork.

With SECOR you become your own auditor. You take the auditor training course, and each year you complete and submit your own audit. There is no external audit fee, so the running cost is a few hundred dollars a year, in the range of 600 dollars once you count renewing your training every three years or so and your membership with the certifying partner.

Full COR is a different arrangement. An external auditor comes in, reads your files, walks a site and interviews your people, and that audit typically costs somewhere between 2,000 and 3,000 dollars a year. To pass it reliably you also need someone inside the company keeping the program audit ready all year, which is a real cost even though it never shows up as an invoice.

Then there is the part nobody puts in a brochure. A lot of owners simply do not want an outsider going through their records and talking to every employee, and SECOR keeps all of that in house. That preference is legitimate, and in my experience it moves more decisions than the fee does.

Those cost figures are ballparks from experience, and they vary by province, by certifying partner, and by how much of the work you do yourself. Confirm the current numbers with your own partner before you budget around them. What COR certification actually costs breaks the whole picture down, including the training days and travel that catch companies outside the cities.

Which stream you qualify for depends on your province

The employee limit for the small employer stream is set province by province, and it is lower than most people expect. Just as important, the count includes everyone: owners, full time, part time, casual and subcontractors, in the field and in the office. A company that thinks of itself as six people can be over the line once the subs are counted.

Here are the current thresholds, verified against the certifying partners.

Source: Alberta: WCB Alberta Partnerships in Injury Reduction and the certifying partners. British Columbia: go2HR and BCCSA, where the program is called Small COR. Saskatchewan: SCSA. Manitoba: CSAM and the MHCA. Ontario: IHSA COR 2020. Limits verified week of 27 July 2026.

SECOR and full COR, side by side

Source: WCB Alberta, Partnerships in Injury Reduction. Alberta certifying partner list. Cells marked "confirm" are cells our sources do not cover, and we would rather say so than fill them in.

Will your clients accept SECOR?

This is the question that decides everything else, and almost nobody asks it first.

Prime contractors, public owners and large industrial clients set their own prequalification requirements. Some of them specify COR explicitly, by name, in the prequalification package. Some accept a small employer stream. Our sources do not confirm the position of any particular prime contractor or owner, so anybody telling you "everyone accepts SECOR" is guessing on your behalf.

Some of it is not about your size at all, it is about the specific client and the specific work. I have seen a waste hauling operator unable to take City of Edmonton work because that contract accepted full COR only. It did not matter that the company qualified for SECOR on headcount. The client set the bar, and the small employer certificate did not clear it. Whole categories of work are COR only for reasons that have nothing to do with how many people you employ.

So check the work you actually want before you assume SECOR is what you need. The only reliable way to know is to ask the client who is driving the requirement what they will accept, in writing, before you choose a route. An email reply naming the acceptable certificate is enough. Keep it.

Here is the expensive mistake, and I have watched it happen. A company gets told it needs a certificate to keep bidding a particular client's work. It picks the smaller, cheaper route because that is the sensible business decision on the face of it. Months later the prequalification package comes back and it says COR. Now the work is done twice, the deadline has passed, and the bid window closed.

One phone call and one email at the start prevents that entirely. It is the cheapest step in this whole process and it is the one people skip.

The trap when you grow past the limit

Here is the part that catches good companies off guard, and I have watched it happen more than once.

In a province like Alberta the limit is 10. A company grows to nine or ten people and is suddenly pushed off SECOR and onto full COR. The cost jumps from a few hundred dollars a year to a few thousand, plus the internal work of staying audit ready.

To cover that jump they raise their prices, and then they lose the bids that were priced to win. So they lay people off, drop back under the limit, and land right back in SECOR.

Nobody warns them the cliff is coming. If you are within a couple of hires of your provincial limit, plan for the jump before it forces the decision for you, because handling it on your own timeline is far cheaper than handling it after you have already grown.

How to move from SECOR to COR properly

If you are growing on purpose, there is a clean way to make the switch, and the timing is the whole thing.

Submit your last maintenance audit showing your true, higher headcount, say 18 or 19. Your certifying partner accepts that as your final SECOR audit and sends you a letter confirming you have to join the COR program, with your first COR audit due a year later. That gives you a full year to get ready for the external audit.

The catch is timing. This only works if you are in a maintenance year and your SECOR audit has not expired. If you let the SECOR audit lapse first, they will not accept it, and you go straight to a COR audit with no grace year. So make the move from a current, valid certificate, not an expired one.

The premium refund applies either way, but confirm the detail

There is real money attached to certification in Alberta, and it changes the arithmetic.

WCB Alberta's Partnerships in Injury Reduction program refunds up to 20 percent of premiums across three measures. For COR specifically, our sources describe a 10 percent refund in the first year, then 5 percent annually while COR is maintained. New registrants get a one year grace period to obtain COR while staying refund eligible.

Read that carefully, because the precision matters. Those figures describe the COR portion. How the refund applies to the small employer stream specifically is not verified in our sources. Confirm the treatment directly with WCB Alberta before you put a number in a budget or repeat one to your owner.

The grants and premium incentives page sets out the verified WCB Alberta and WorkSafeBC figures together, plus the training grants that can offset the cost of building the program.

What both routes require of you

The substance is the same either way. This is the part that does not shrink.

• A documented management system. Policy signed by the most senior person, responsibilities written down for every level, and a review cycle you actually follow.
• Formal hazard assessments for the tasks you really perform. Not a binder inherited from a previous employer. Auditors and reviewers spot borrowed assessments immediately.
• Field level hazard assessments done daily, before work starts, for the real conditions, and linked back to the formal assessment they came from.
• Training and orientation records. Every worker oriented before starting, a matrix showing what each role needs, and nothing expired in current use.
• Inspections at your stated frequency. If your program says monthly, the records have to show monthly. Your own document creates the finding.
• Incident investigation with corrective actions closed and verified. Actions found, assigned, dated, closed, and the closure checked by somebody else. This is the most common weakness I see anywhere.
• Emergency preparedness, including working alone and remote work, with drills recorded.
• Records covering the whole period, with no unexplained gaps of weeks or months.

All of that maps to your certifying partner's audit elements, whichever stream you are in. The COR audit readiness checklist walks the same ground, and the documents auditors ask for covers what gets requested first. Both are free downloads with no email required, along with the field level hazard assessment card and the rest of the template library.

How to choose, in order

1. Ask the client what they accept. Name the certificate in your question and get the answer in writing. This decides the route.
2. Ask your certifying partner which stream you qualify for. Give them your real headcount, including seasonal and casual workers. Ask for the current process document and the assessment or audit protocol.
3. Confirm the refund treatment with WCB Alberta for the stream you are actually in, before it goes in a budget.
4. Then build, starting with the documentation, because documentation takes longer to fix than site conditions.

Notice that the program you build is nearly identical either way. That means starting on the documentation is never wasted work. If step one or step two sends you down the other route, the hazard assessments, orientation records and inspection history you have already generated all still count.

The choice between the two streams is an administrative question with a definite answer, and two calls will get it for you. The work behind the certificate is the same either way, and it is the part that decides whether the certificate survives its first maintenance cycle. If you are at the beginning of this, COR certification in Canada is the overview, COR for small companies covers doing it without a safety department, and COR in Alberta lists the certifying partners and which industries they cover.

Plenty of small employers build the program themselves from the free templates, and that is a completely respectable answer. If you would rather have it written and mapped to your certifying partner's audit elements instead of assembling it yourself, what a build involves explains the shape of it.