Skip to content

What is COR certification?

Last updated: Written by Blake Cowan, NCSO

The short answer, then the detail people need next and the four things COR is regularly confused with.

The short answer

COR stands for Certificate of Recognition. It certifies that a company's health and safety management system has been audited against a standard and met it. It is issued by a certifying partner, usually an industry safety association, under the authority of a provincial workers compensation board. It certifies the management system, not a worksite and not a person.

That is the whole answer. The rest of this page is the detail people need next, and the four things COR regularly gets confused with.

What COR actually certifies

A management system. Not your site on the day somebody visited, and not the competence of any individual worker.

That distinction explains most of what people find surprising about the process. An auditor is not primarily checking whether your site is tidy. They are checking whether your company has a system that identifies hazards, controls them, trains people, catches failures and fixes them, and whether that system produced evidence consistently over the whole audit period rather than in the three weeks before they arrived.

Which is why a company with genuinely safe crews can struggle with the audit, and why a company with beautiful paperwork sometimes should.

Who issues it, and why there is no single answer

There is no national COR body. Each province's workers compensation board owns the programme and delegates auditing and certification to industry safety associations called certifying partners.

Those partners are organised by industry rather than geography. Construction has one, trucking another, energy another. Which one you deal with depends on your industry classification. Alberta alone has nine.

The practical consequence is worth knowing before you read anything else on the subject: audit protocols differ between partners. The number of elements, their names, the scoring and what counts as acceptable evidence all vary. Any guide that promises you a fixed number of audit elements is describing one partner's protocol and presenting it as universal.

Manitoba does not use the name. Its equivalent programme is SAFE Work Certified. If you have been searching for Manitoba COR requirements and finding nothing useful, that is why.

Is it legally required?

No. This is the single most common misunderstanding.

No province requires a company to hold COR. What makes companies pursue it is two things:

  1. A client demanded it. A prime contractor, public owner or large industrial client made it a condition of prequalification, so there is work you cannot bid without it. This is why most companies start.
  2. The premium refund. In Alberta, holding COR earns a refund of 10 percent of premiums in the first year and 5 percent annually after that, inside a programme that refunds up to 20 percent across three measures. In British Columbia the WorkSafeBC incentive is 10 percent of base assessment premiums with a floor of the lesser of $1,000 or 75 percent of premiums paid.

So it is a commercial requirement and a financial incentive, not a piece of legislation. If nobody has asked you for it and your premium is small, the honest answer may be that you do not need it yet.

Four things COR is not

This is where most of the confusion actually lives.

Comparison table.
It is notBecause
A worker certificationCOR belongs to a company. A designation like NCSO belongs to a person. The two are unrelated
A prequalification accountHolding COR does not make you compliant on ISNetworld, Avetta, ComplyWorks or Veriforce. Those check your documents against one client's requirements. Plenty of companies need both
A one time examIt is maintained continuously, with maintenance audits between full audits, and it depends on producing roughly three years of evidence on demand
A safety guaranteeIt certifies that a system exists and ran. It does not certify that nobody will get hurt, and holding one has never stopped an incident on its own

Scroll the table sideways to see every column. The first column stays in place.

How you get one

The short version, since the full guide covers this properly.

  1. Find out which certifying partner covers your industry, and get their current audit protocol and scoring rules in writing.
  2. Confirm which stream applies at your headcount. Small employer streams run from nine to nineteen employees depending on the province, and Ontario and the Atlantic provinces have none. SECOR compared with COR sets out the thresholds.
  3. Build the programme and start generating evidence, because your audit period is already running and evidence is the one thing you cannot produce retroactively.
  4. Run an honest self audit before anybody external does. The audit readiness checklist is free and needs no email.
  5. Then book the audit, which is documentation review, interviews and a site visit.

The part that takes the time is almost never the audit. It is writing the programme and then waiting for real records to accumulate.

What it costs

Briefly, because the full breakdown is here.

A full COR audit by an external auditor typically runs 2,000 to 3,000 dollars a year. A small employer stream where you audit yourself runs a few hundred instead. The courses are cheap, often around 75 dollars, but they consume eight to ten days and sittings are scheduled every few months, so allow two or three months before you can start. The largest cost is usually the internal time to keep the programme current, which never appears on an invoice.

Where to go next

Questions people actually ask

What is COR certification?
COR stands for Certificate of Recognition. It certifies that a company's health and safety management system has been audited against a standard and was found to meet it. It is issued by a certifying partner, normally an industry safety association, working under the authority of a provincial workers compensation board. It certifies the management system, not a worksite and not an individual worker.
What does COR stand for?
Certificate of Recognition. In Alberta the small employer version is commonly called SECOR, for Small Employer Certificate of Recognition. Manitoba does not use the COR name at all, and its equivalent programme is called SAFE Work Certified, which is why searching for Manitoba COR requirements returns so little.
Is COR certification legally required?
No. No province requires a company to hold COR. It is a commercial requirement that clients impose, most often as a condition of prequalification, and a financial incentive offered by the workers compensation board through premium refunds. If a client has made it a condition of bidding then you need it to do that work, but the obligation comes from the contract rather than from legislation.
Who issues COR certification?
A certifying partner, which is normally an industry safety association, working under the authority of the provincial workers compensation board. There is no national COR body. Each province runs its own programme with its own partners and its own audit protocol, so the number of audit elements, what they are called and what counts as evidence all vary. Alberta alone has nine certifying partners, organised by industry rather than by region.
How long does COR certification last?
It is maintained rather than held. Certification runs on a cycle set by your certifying partner, typically with a full external audit every three years and maintenance audits in the years between. Your certificate also depends on being able to produce roughly three years of audit evidence on demand, so it is a rolling obligation rather than something you pass once.
What is the difference between COR and SECOR?
Employer size and audit type. SECOR is a small employer stream where you take the training, become your own auditor and submit your own audit each year. Full COR brings in an external auditor who reads your files, interviews your people and walks a site. The employee limit runs from nine to nineteen depending on the province, and Ontario and the Atlantic provinces have no small employer stream at all.

Next step

Take the templates and use them, whether or not you ever talk to us. If you would rather not build the program yourself, we will build it inside the app and keep it current.