COR Audit Preparation in Canada: Documentation and Implementation Evidence

Understand How the Audit Is Scored

To pass a COR audit, it’s important to understand its scoring system in advance. For many COR programs, including Alberta’s standard process, employers need to reach at least 80 percent in total and 50 percent for each audit element. In Alberta, maintenance audits in the two calendar years between certification audits need at least 60 percent overall. Other certifying partners and jurisdictions may use different scoring rules, so confirm the current requirements with your certifying partner.

A strong overall score won’t save you if a single element falls below 50 percent. Solid training logs and inspection reports won’t make up for incomplete incident investigations or outdated hazard assessments.

To prepare for the external audit, it’s best to conduct a gap review using the audit tool first. Instead of asking, “Do we have this document?”, try a different approach. “Can we verify that this is put into practice?” Our free guide on how to prepare for a COR audit walks through each step, from confirming your certifying partner to the 12 months of records auditors sample.

That is the question the auditor will ask.

Build a Practical COR Audit Checklist

A useful COR audit checklist should reflect the audit elements used by your certifying partner, but most employers should review the following areas before audit day:

• Management commitment and safety policy
• Roles and responsibilities
• Hazard assessment and controls
• Safe work practices and procedures
• Training and competency records
• Inspections and preventive maintenance
• Incident reporting and investigations
• Emergency response planning and drills
• Worker participation and communication
• Contractor management, where applicable
• Corrective action tracking

Turn the Checklist Into Action

A checklist only helps if it leads to action. If the checklist identifies missing records, outdated procedures, incomplete inspections, or unclosed corrective actions, assign each item to a responsible person with a due date. Then verify completion before the audit.

The goal is not to create perfect paperwork. The goal is to find weak points early enough to fix them.

Documentation That Shows the System Works

COR documentation requirements vary by certifying partner and industry, but the basic expectation is consistent: employers must show evidence that the health and safety system is active.

Good documentation should answer practical audit questions. Was the hazard assessment completed? Were workers involved? Were controls selected and communicated? Was training provided? Did supervisors inspect the worksite? Were deficiencies corrected? Were incidents investigated? Did management review the system?

Common documentation gaps include unsigned policies, old hazard assessments, missing training records, incomplete inspection follow-up, toolbox meeting records with no attendance, incident forms with no root cause analysis, and corrective actions that were assigned but never closed.

These issues create a clear cause and effect. If the record is missing, the auditor may not be able to verify the activity. If the activity cannot be verified, the score may drop. If any element scores below 50 percent, the audit fails even if the overall score is above 80 percent.

A strong documentation system should be simple enough for supervisors to use. Overly complicated forms often fail because people stop completing them properly. Simple, consistent, well-maintained records usually perform better than polished templates that are ignored in the field.

Internal Audit Preparation Before the External Audit

Internal audit preparation is one of the most effective ways to improve audit readiness. Treat the internal audit as a rehearsal, not a formality.

Start by reviewing the same types of evidence the external auditor will likely examine. Look at records, interview supervisors and workers, and walk through the workplace to confirm that written procedures match actual work practices. This is where many companies find their biggest gaps.

A procedure may say that workers complete hazard assessments before starting non-routine tasks, but field observations may show that forms are rushed or missing. A training matrix may show required courses, but interviews may reveal that workers do not understand key procedures. A corrective action log may exist, but older actions may still be open months later.

Those findings are valuable. They show where the system needs attention before the external audit.

For best results, complete the internal review at least 60 to 90 days before the planned COR audit. That gives the company time to correct records, coach supervisors, update procedures, complete missing training, and close corrective actions.

Safety Program Verification in the Field

Safety program verification is where the audit moves beyond the office. The auditor may look for evidence that safety expectations are visible in daily operations.

This may include whether workers are using required PPE, whether equipment inspections are current, whether emergency equipment is accessible, whether hazardous materials are labelled, whether supervisors are correcting unsafe conditions, and whether workers can explain the hazards and controls for their tasks.

This matters because a safety manual can look strong while the worksite tells a different story. If field conditions do not match the written program, the audit result can suffer. More importantly, the company may be exposed to injuries, stop-work situations, regulatory orders, and client concerns.

Supervisors play a major role here. They translate the program into daily action. If supervisors understand the audit expectations, communicate with workers, correct deficiencies, and maintain records, the company is much more likely to demonstrate a functioning safety system.

COR in Alberta, BC and Saskatchewan

Employers in Alberta, British Columbia, and Saskatchewan should confirm the exact COR process with the applicable certifying partner because requirements can vary by industry, company size, and jurisdiction.

In Alberta, COR is tied to the Partnerships in Injury Reduction system and certifying partners review audits for quality assurance. In BC, WorkSafeBC’s COR program is connected to certifying partners and includes audit, quality assurance, and incentive considerations for eligible employers. In Saskatchewan, construction employers commonly work through the Saskatchewan Construction Safety Association or another applicable safety association depending on the industry.

For companies working across provincial borders, the key issue is not just whether they have COR somewhere. It is whether the COR is accepted for the jurisdiction, client, project, or prequalification process involved. Employers working in multiple provinces should confirm equivalency, reciprocity, and client-specific requirements before assuming their existing certificate will be enough.

This is especially important for contractors bidding on work. A missed COR requirement can delay prequalification, weaken a bid, or prevent the company from starting work.

When to Bring In Outside Help

Many employers prepare for COR on their own, and some do it well. Outside support is most useful when:

• You are preparing for your first COR audit
• Your last audit score was low or close to the minimum
• You are expanding into a new province or a new type of work
• You have had recent incidents or near misses that point to program gaps
• Your documents look complete, but field practice is inconsistent

Internal teams often get too close to their own systems. Gaps stop standing out because the process feels normal. A consultant brings a fresh, objective view and can usually find the weak points quickly, which gives you time to fix them before the audit that counts.

Know who can audit you

Decide early what kind of help you need, because it affects who can do your audit. In Alberta, a consultant who helped develop your health and safety management system can’t carry out your audit. If a consultant builds your program, runs a gap review or a mock audit, or helps maintain your system, plan on a different, independent auditor for the audit itself. Certifying partners set their own independence rules, so confirm the details with yours.

Get the most from every audit

The audit report is only valuable if it changes something. Treat audits as part of your management system, not a one-time event:

• Run internal audits or pre-audit reviews before external audits
• Track corrective actions and verify that each one is actually complete
• Involve supervisors in the audit process so they understand what is expected
• Use the findings to drive improvements year over year

In Alberta, your COR stays valid for three years if you complete a maintenance audit in each of the two calendar years after certification. Maintenance audits can be done by a qualified internal or external auditor recognized by your certifying partner, which makes them a good opportunity to check that last year’s fixes have held.

Business Impact and Risk Considerations

Failing to prepare for a COR audit creates business risk, not just safety risk. The cause is usually weak implementation: missing records, poor follow-up, outdated hazard assessments, incomplete training, or supervisors who do not understand the program. The effect is reduced audit confidence and lower scores. The consequence can include failed certification, delayed contract approval, lost bidding opportunities, increased client scrutiny, and more exposure during regulatory inspections.

The financial impact can also be significant. A failed audit may require additional consulting time, auditor time, corrective action work, retraining, administrative rework, and delayed mobilization. For contractors, even a short delay on a client-required COR condition can affect scheduling, revenue, and workforce planning. Where incidents occur, poor documentation can also make WCB claim management, due diligence defence, and regulatory response more difficult.

Measurable performance should be tracked before the audit. Practical indicators include the percentage of required training completed, the number of overdue corrective actions, the percentage of inspections completed on schedule, the percentage of incident investigations closed within the company’s target timeframe, and the internal audit score by element. These measures are defensible because they come from the employer’s own records and can be verified during an audit.

A realistic target before an external COR audit would be 100 percent completion of required worker orientation records, 90 percent or better completion of scheduled inspections, zero overdue high-risk corrective actions, and an internal audit result that exceeds the minimum passing score with enough margin to account for external auditor findings.

Example situation: A mid-sized contractor preparing for COR had a safety manual, but its records were scattered across binders, email folders, and supervisor notebooks. Training was mostly complete, but several workers were missing documented orientation refreshers, and corrective actions from inspections were not consistently closed.

Action: The company completed a pre-audit gap review, rebuilt the training matrix, closed overdue corrective actions, updated hazard assessments, completed supervisor coaching, and organized records by audit element.

Result: By the time the external audit occurred, the company could show clear evidence for each major program area. Supervisors were better prepared for interviews, workers understood the main safety expectations, and the company had a stronger basis for audit scoring and future client prequalification.

If you're the person running the audit, our step-by-step guide on how to conduct a COR audit walks through the core steps.

Final thoughts

Learning how to pass a COR audit is really about learning how to prove that your safety system works. The audit is not just looking for policies. It is looking for evidence.

If your documents are current, your workers understand the program, your supervisors apply the requirements, your hazards are controlled, and your corrective actions are closed, you are in a much stronger position. More importantly, you are building a safer and more reliable operation.

Do not wait until the auditor is booked to start preparing. Review the system early, verify the field conditions, fix the weak points, and make sure the records tell the same story as the worksite.

About the author

John Duplessis, B.Sc., CRSP

President and Principal Health & Safety Consultant

John Duplessis is a Canadian Registered Safety Professional with more than 30 years of occupational health and safety experience in oil and gas, construction, green energy, midstream operations, and industrial project work.

Meet our team