A COR audit does not test whether you can talk about safety. It tests whether your paperwork already proves it, before an auditor asks to see it.
Key takeaways
STEP 01 OF 10
Confirm the rule you are building toward before assigning a single task. Per IHSA, “with one common audit instrument utilized across Canada, the national standard is clear: Minimum 65% in each element and an overall audit score of 80%.” Both conditions apply independently — a strong overall score does not rescue one weak element, and a set of decent elements does not rescue a weak overall average. The worked example below runs the arithmetic.
Confirm which audit instrument version your Certifying Partner currently uses. IHSA's own page notes the programme “was enhanced to COR® 2020,” so a checklist copied from an older cycle may not match the elements actually scored today.
STEP 02 OF 10
COR is “nationally trademarked and endorsed by participating members of the Canadian Federation of Construction Safety Associations (CFCSA)”, but it is not run from one national office. CFCSA's own membership list shows a different Certifying Partner in every province — the Infrastructure Health & Safety Association in Ontario, the Alberta Construction Safety Association in Alberta (running the programme as COR-SECOR), the British Columbia Construction Safety Alliance in BC, and separate organizations again in Saskatchewan, Manitoba and the Atlantic provinces (comparison below).
If your firm bids work in more than one province, confirm early which partner your head-office registration actually sits with, and do not assume a certificate from one province is automatically read the same way by a client requiring COR in another.
STEP 03 OF 10
An auditor is checking for a system, not a memory. Alberta's OHS Code sets a pattern worth building toward everywhere: an employer “must assess a work site and identify existing and potential hazards before work begins” at the site, must prepare a written report of the results and the controls chosen, and must record the date it was prepared or revised — then repeat the assessment “when a new work process is introduced” or before significant additions or alterations to the site.
Whatever your province, an auditor is generally checking the same underlying question three ways: was the hazard identified in writing, was a control chosen and recorded, and was the record updated when the work changed. Build the file to answer all three on every project, not just the ones you remember as risky.
Alberta's Code also sets out the order controls have to be tried in: engineering controls first, then administrative controls, then personal protective equipment, with each later option available only if the one before it is not reasonably practicable. An audit file that jumps straight to “workers wear PPE” without recording why an engineering or administrative control was not practicable first is showing an incomplete hazard assessment, not a complete one that happened to land on PPE.
STEP 04 OF 10
Auditors check governance, not just paperwork volume. CCOHS's cross-Canada table confirms a joint health and safety committee is triggered at 20 or more workers in most jurisdictions — Saskatchewan is the outlier, at 10 — so confirm your own province's threshold before assuming a smaller crew is exempt from every record an auditor expects.
In Ontario specifically, committee certification requires Basic Certification and Workplace-Specific Hazard Training, and refresher training is required every 3 years. Pull the certification dates for both a worker representative and a management representative, not just a list of names.
STEP 05 OF 10
A COR audit checks that your incident response is documented, not just that you had few incidents. Ontario's own rule is a useful template: a critical injury or fatality requires the employer to “immediately notify” the regulator, the JHSC or representative, and the union, then follow up with “a written report within 48 hours.”
Keep every investigation file complete, even for near-misses your own Certifying Partner does not require reported. An auditor reading a thin incident file draws the same conclusion whether the gap is because nothing happened or because nothing was written down.
STEP 06 OF 10
A safety-management audit assumes your compensation coverage is in order — do not let that be the surprise. Ontario's clearance “is valid for up to 90 days,” and a request “arrives within three to five business days.” Book it with enough lead time that it is still current on audit day, not expired the week after.
If your firm operates in BC, note the mechanic is different, not just the name: WorkSafeBC issues a clearance letter rather than the same 90-day Ontario certificate. Confirm the current mechanic for wherever you are actually certifying, rather than assuming Ontario's rule travels.
One more detail worth checking before you book: an Ontario clearance auto-renews only while the account is up to date on both payments and reporting — a firm that is current on premiums but behind on a reporting filing can find its clearance has lapsed anyway, which is a worse discovery on audit-booking day than on any other day of the year.
STEP 07 OF 10
Score your own file honestly against the 65%/80% rule from step one, element by element, using an internal reviewer who has not been writing the file all year. A review that only checks “do we have something for every category” misses exactly the failure mode the real audit is built to catch — a category with something in it that still scores under 65%.
Treat every element that scores close to the floor as a finding, not a pass. The worked example below shows why a comfortable overall average does not protect a single weak element.
STEP 08 OF 10
An auditor generally wants evidence that gaps get closed, not just found. Document what was missing, what was done about it, and the date it was corrected — the same three-part discipline as the hazard-assessment file in step three. A finding with no closing record reads, on the next cycle, exactly like a finding that was never addressed.
Assign each fix to a named person with a deadline. A corrective-action list with no owner tends to still be open at the next audit.
STEP 09 OF 10
Run the two-floor math from step one against your own current element scores before you assume a comfortable overall number is enough on its own. The worked example below shows exactly how a single weak element can fail an audit that clears 80% overall with room to spare.
If any element sits under 65%, treat step eight's corrective-action trail as the thing standing between you and a failed cycle, not an optional follow-up.
STEP 10 OF 10
No published fee applies across Canada. IHSA's own COR page states plainly, “For information regarding costs, contact cor@ihsa.ca,” and also notes “IHSA requires pre-payment.” Do not budget from a number quoted for a different province or a different year.
The same applies to the maintenance-audit cycle between full recertifications: it is set by the Certifying Partner, not published as one national interval. Get both answers in writing before you commit a date, and calendar the recertification cycle the way you would a licence renewal — not as a task that surfaces itself the month it is due. The same calendar discipline is what keeps a WSIB clearance current for a payroll close that takes an hour and a compulsory-trade certificate from lapsing in building an apprenticeship programme.
Treating the overall average as the only number that matters. An element sitting at 60% is not rescued by strong scores elsewhere — both floors are checked independently.
Copying last cycle's checklist without confirming the audit instrument version. COR was enhanced to COR® 2020; a stale checklist can miss elements the current instrument actually scores.
Assuming one province's certificate satisfies every client's COR requirement. Certifying Partners are province-specific — confirm before bidding work that needs it recognized elsewhere.
Letting WSIB or WorkSafeBC clearance lapse mid-cycle. A 90-day Ontario clearance booked too early is expired again by audit day.
Leaving corrective actions with no owner or deadline. An unassigned finding is still open, unchanged, at the next audit.
Recording a PPE control with no note on why an engineering or administrative control wasn't used first. Alberta's Code sets a specific order for controls — a hazard file that skips straight to PPE reads as incomplete, not as a documented decision.
Step one names two thresholds that apply independently. Here is what that looks like against a real-shaped set of element scores, recomputed in full.
Scenario A. A firm is audited on five elements: Leadership & Administration 91%, PPE 88%, Training 94%, Emergency Preparedness 96%, and Hazard Assessment 64%. The overall average is (91+88+94+96+64) ÷ 5 = 433 ÷ 5 = 86.6% — comfortably above the 80% overall floor. But Hazard Assessment at 64% sits below the 65% per-element floor. The audit fails on that element alone, regardless of the 86.6% overall average.
Scenario B. The same firm closes the corrective action from step eight and brings Hazard Assessment up to 70%. The new average is (91+88+94+96+70) ÷ 5 = 439 ÷ 5 = 87.8%, and every element now clears 65%. Same firm, same four other scores — one element fixed is the entire difference between a failed cycle and a passed one.
The scoring rule is described as national; the office that applies it, the fee it charges, and the maintenance-audit interval between full recertifications are not. CFCSA's member list names the Certifying Partner for every province and territory — confirm all three details directly with whichever partner covers where you actually work.
This matters most for a firm bidding across provincial lines: see hiring and keeping a field crew for how the same multi-province pattern shows up in credential screening.
The audit instrument and the 65%/80% scoring rule are described as a shared national standard by IHSA, but the organization that grants it, and the fee it charges, differ by province — see the comparison above.
That depends on what each client actually requires, and it is not uniformly published — confirm directly with the Certifying Partner in the second province whether they recognize a certificate issued elsewhere, in writing, before you sign a bid that assumes it.
No single figure applies nationally. IHSA's own page for Ontario directs cost questions straight to cor@ihsa.ca — treat any number you have heard quoted as specific to a different province, firm size, or year unless your own Certifying Partner confirms it in writing.
Certifying Partners set a maintenance-audit cycle between full recertification audits; it is not published as one interval nationally. Ask your own Certifying Partner for your firm's specific cycle and calendar it before your current certificate is close to lapsing.
No — the 65% per-element floor and the 80% overall floor are checked independently. The worked example above shows a firm at 86.6% overall still failing on a single 64% element.
A 30-minute call is enough to tell you whether it is worth building.
