What is COR certification?
Last updated: Written by Blake Cowan, NCSO
The short answer, then the detail people need next and the four things COR is regularly confused with.
The short answer
COR stands for Certificate of Recognition. It certifies that a company's health and safety management system has been audited against a standard and met it. It is issued by a certifying partner, usually an industry safety association, under the authority of a provincial workers compensation board. It certifies the management system, not a worksite and not a person.
That is the whole answer. The rest of this page is the detail people need next, and the four things COR regularly gets confused with.
What COR actually certifies
A management system. Not your site on the day somebody visited, and not the competence of any individual worker.
That distinction explains most of what people find surprising about the process. An auditor is not primarily checking whether your site is tidy. They are checking whether your company has a system that identifies hazards, controls them, trains people, catches failures and fixes them, and whether that system produced evidence consistently over the whole audit period rather than in the three weeks before they arrived.
Which is why a company with genuinely safe crews can struggle with the audit, and why a company with beautiful paperwork sometimes should.
Who issues it, and why there is no single answer
There is no national COR body. Each province's workers compensation board owns the programme and delegates auditing and certification to industry safety associations called certifying partners.
Those partners are organised by industry rather than geography. Construction has one, trucking another, energy another. Which one you deal with depends on your industry classification. Alberta alone has nine.
The practical consequence is worth knowing before you read anything else on the subject: audit protocols differ between partners. The number of elements, their names, the scoring and what counts as acceptable evidence all vary. Any guide that promises you a fixed number of audit elements is describing one partner's protocol and presenting it as universal.
Manitoba does not use the name. Its equivalent programme is SAFE Work Certified. If you have been searching for Manitoba COR requirements and finding nothing useful, that is why.
Is it legally required?
No. This is the single most common misunderstanding.
No province requires a company to hold COR. What makes companies pursue it is two things:
- A client demanded it. A prime contractor, public owner or large industrial client made it a condition of prequalification, so there is work you cannot bid without it. This is why most companies start.
- The premium refund. In Alberta, holding COR earns a refund of 10 percent of premiums in the first year and 5 percent annually after that, inside a programme that refunds up to 20 percent across three measures. In British Columbia the WorkSafeBC incentive is 10 percent of base assessment premiums with a floor of the lesser of $1,000 or 75 percent of premiums paid.
So it is a commercial requirement and a financial incentive, not a piece of legislation. If nobody has asked you for it and your premium is small, the honest answer may be that you do not need it yet.
Four things COR is not
This is where most of the confusion actually lives.
| It is not | Because |
|---|---|
| A worker certification | COR belongs to a company. A designation like NCSO belongs to a person. The two are unrelated |
| A prequalification account | Holding COR does not make you compliant on ISNetworld, Avetta, ComplyWorks or Veriforce. Those check your documents against one client's requirements. Plenty of companies need both |
| A one time exam | It is maintained continuously, with maintenance audits between full audits, and it depends on producing roughly three years of evidence on demand |
| A safety guarantee | It certifies that a system exists and ran. It does not certify that nobody will get hurt, and holding one has never stopped an incident on its own |
Scroll the table sideways to see every column. The first column stays in place.
How you get one
The short version, since the full guide covers this properly.
- Find out which certifying partner covers your industry, and get their current audit protocol and scoring rules in writing.
- Confirm which stream applies at your headcount. Small employer streams run from nine to nineteen employees depending on the province, and Ontario and the Atlantic provinces have none. SECOR compared with COR sets out the thresholds.
- Build the programme and start generating evidence, because your audit period is already running and evidence is the one thing you cannot produce retroactively.
- Run an honest self audit before anybody external does. The audit readiness checklist is free and needs no email.
- Then book the audit, which is documentation review, interviews and a site visit.
The part that takes the time is almost never the audit. It is writing the programme and then waiting for real records to accumulate.
What it costs
Briefly, because the full breakdown is here.
A full COR audit by an external auditor typically runs 2,000 to 3,000 dollars a year. A small employer stream where you audit yourself runs a few hundred instead. The courses are cheap, often around 75 dollars, but they consume eight to ten days and sittings are scheduled every few months, so allow two or three months before you can start. The largest cost is usually the internal time to keep the programme current, which never appears on an invoice.
Where to go next
- COR certification in Canada is the full practical guide, including the province by province table of certifying partners.
- What actually happens in a COR audit walks the audit in order.
- How to prepare for a COR audit is the method: run the audit on yourself, on paper and around the table with the crew.
- The free template library has the audit readiness checklist, hazard assessment forms and the rest, no email required.
Questions people actually ask
What is COR certification?
What does COR stand for?
Is COR certification legally required?
Who issues COR certification?
How long does COR certification last?
What is the difference between COR and SECOR?
Next step
Take the templates and use them, whether or not you ever talk to us. If you would rather not build the program yourself, we will build it inside the app and keep it current.