COR audit preparation in Canada: evidence, interviews and site checks

Prepare for a Certificate of Recognition (COR) audit by working from the current audit tool of your province's certifying partner, testing whether your safety management system actually operates, and closing gaps before the auditor samples documents, interviews workers and observes work. A binder of policies is not enough if site practice contradicts it. The exact audit standard, auditor eligibility, scoring, schedule and certificate rules vary by province, partner, employer size and audit type. Do not use a national checklist as a substitute for the selected partner's current requirements.

This guide addresses the operational audit-preparation task. The existing Complys COR overview owns the broader “what is COR and how do I get it?” question. It also contains broad claims about national recognition, external audits and incentive effects that need province-specific review; do not copy those claims here as universal facts. The Complys CA tools page publicly lists an unofficial COR readiness checker. Its score is an internal preparation estimate, not a certifying-partner audit result or certificate. The planned /ca/cor-certification-software money page was not independently verified live; this draft does not link to it.

Start with the correct scheme and audit type

Before organising files, confirm:

For example, Alberta's COR guidance says an employer seeking an initial COR hires an external auditor and has the audit reviewed by its Certifying Partner. Its maintenance/renewal page describes two maintenance-audit years during a three-year cycle and different scoring criteria for maintenance and renewal. WorkSafeBC's quality-assurance guidance also describes certification, maintenance and re-certification audits, but distinguishes internal-auditor eligibility by employer size and partner rules. Ontario's IHSA COR 2020 pathway includes an initial internal audit followed by an external audit. These examples show why “book an external audit every year” is not a safe Canadian instruction.

COR is a program/scheme and may be required by a particular buyer or contract; it is not automatically a statutory certification every Canadian employer must hold. Check the tender, partner and province. An audit score does not replace compliance with occupational health and safety legislation.

Build an evidence map from the official audit tool

Take the partner's current elements and map each question to a document, a person who can explain the practice, and a site where the practice can be observed. This three-way test is more useful than collecting every PDF in a shared drive.

The specific elements and weighting come from the applicable partner. IHSA's COR 2020 standard and Ontario audit resources show that Ontario has its own audit tool, evidence, interview and scoring rules. WorkSafeBC explains that BC certifying partners provide industry-appropriate audit tools. Use the current partner version, not a downloaded example from another province.

Example: the policy says supervisors review job hazard assessments daily. The document folder contains assessments for the month, but workers cannot identify the current one and the workface has changed. The issue is not that a folder is missing. The process needs a current assessment, consultation, a field control check and evidence that a changed hazard was acted on. Fix the practice, then collect the evidence.

Test the system as an auditor would

Documents: are they current and connected?

Check approved policies, hazard assessments, safe-work procedures, legal/contract obligations, training records, inspection reports, incident investigations, emergency plans, worker consultation and management reviews against the audit tool. Look for dates, owners, revisions and closeout. A blank template or a signed form with no site match may be weaker evidence than a short record showing the hazard, action and follow-up. Keep personal information secure and limit access to what the auditor needs.

Do not create backdated records or have a supervisor sign for a worker. If a process was not operating, document the gap and correct it honestly. An audit should test whether the system works over time. Fabricating a spotless history makes the risk and credibility worse.

Interviews: can people explain the actual process?

Auditors may speak to management, supervisors and workers. Ask workers open questions during internal checks: What hazards are present today? How do you report a near miss? Who stops work? What changed after the last incident or inspection? What is the emergency plan at this site? The goal is to find confusion early, not coach identical scripted answers. If the safety program is written in terms workers cannot use, simplify it and retrain on the real task.

Site observation: does the work match the documents?

Walk more than one representative jobsite or department if the audit scope includes them. Compare planned controls with actual plant condition, access, housekeeping, traffic separation, hazardous-product labelling, emergency equipment and contractor coordination. Ask whether documented inspection defects were fixed and whether a hazard assessment changed when the work changed. If an immediate danger is found, protect people and correct it now; do not wait for the COR audit.

Run an internal gap-closing cycle

1. Freeze the current tool and scope. Record the partner's tool version, audit type, worksite sample and submission deadline.
2. Assign an evidence owner for every element. One person should know where the authoritative record lives; a second should be able to test it.
3. Sample, do not cherry-pick. Review recent ordinary work, different crews and both closed and open corrective actions.
4. Interview and observe. Compare documents to what workers say and what the site shows.
5. Rank gaps by safety and audit consequence. Immediate hazards get immediate controls. Administrative weaknesses get owners and dates.
6. Close and verify. Record the correction, who checked effectiveness and whether the procedure/training changed.
7. Brief people on the real system. Tell them what records and practices changed; do not teach a script for the auditor.
8. Recheck close to the audit. Expiring training, new contractors, site moves and incidents may change the evidence after the first check.

The difference between a corrected system and a tidied filing cabinet is verification. For instance, adding a missing inspection form is only a first step. The equipment must be inspected at the appropriate frequency, defects fixed, workers informed and the process checked again. Keep both the original finding and the closeout; an auditor can then see learning rather than an implausibly perfect record.

Province examples: avoid a borrowed score or timetable

Alberta. The government's maintenance and renewal guidance says a standard COR is valid for three years if maintenance obligations are met. Maintenance audits occur in each of the two calendar years after certification, with a qualified auditor recognized by the Certifying Partner. Renewal uses an external audit and the published scoring requirements. A one-year COR exists in some circumstances for newer systems. Use the current Alberta and partner instructions for the particular employer.

British Columbia. WorkSafeBC's COR quality-assurance page describes one audit each year in a three-year cycle, certifying-partner review and different internal/external auditor eligibility depending on employer size and audit type. The partner's approved audit tool and timing govern. A small employer's option does not automatically apply to a larger one.

Ontario. The IHSA COR 2020 pathway describes training, an initial internal audit and an external audit. Its standard is Ontario-specific. A company cannot replace the current COR 2020 audit with a BC or Alberta checklist and assume the result transfers.

For other provinces and territories, identify the authorized program and certifying partner first. This article does not invent rules for jurisdictions it has not separately verified.

After the audit

The auditor and certifying partner determine the formal result under the program. Review the findings without defending every weakness, assign corrective actions, notify affected workers and test whether changes work. Keep the certification/maintenance schedule visible so improvement does not stop after an audit visit. If the audit reveals a legal violation or immediate hazard, address it under the applicable safety law regardless of the COR score.

If a customer asks for COR, supply the current certificate and check whether it covers the relevant legal entity and work. Do not call a readiness checker, draft program or self-assessment a COR. Certification is awarded through the scheme's process.

Where Complys may fit

The Complys Canadian tools page advertises an unofficial COR readiness checker, and the existing COR overview is a related explainer. A record system can help a team assign evidence owners and monitor gaps if those workflows actually exist in the product. It cannot conduct the partner's audit, award a certificate, predict the final score or certify legal compliance. Before a product CTA is added, verify the real Canadian implementation and the exact /ca/cor-certification-software destination; that proposed money-page route was not independently confirmed live on 5 October 2026.

The next step is to download your certifying partner's current audit tool, fill the evidence map for one representative worksite and run a document/interview/site sample before booking or submitting the formal audit.

Source and claim register — writer review 5 October 2026