Syon Safety Ltd

COR certification in Ontario: how it works and what it takes

Written for Ontario employers. Reviewed September 18, 2026.

How do I get COR certified in Ontario?

In Ontario, COR™ is granted by the Infrastructure Health and Safety Association, which is the Authority having Jurisdiction for the programme in the province. An employer applies to the IHSA, completes the mandatory COR training, builds a health and safety management system, passes an internal audit against the IHSA COR Audit Tool, and then passes an external audit by a third-party auditor. The certificate is valid for three years, with maintenance audits in the second and third years.

Who actually grants COR in Ontario

COR™ — the Certificate of Recognition — is a national programme held under the Canadian Federation of Construction Safety Associations, and each province has its own member association that runs it. In Ontario that is the Infrastructure Health and Safety Association, which describes itself as the Authority having Jurisdiction to grant COR® in the province.

That matters when you are choosing who to work with. Consultants, associations and training providers can prepare you for COR and can supply the auditor, but the certificate itself comes from the IHSA. Anyone who offers to sell you a COR certificate directly is describing something that does not exist.

Other industry bodies recognise COR without issuing it. The Ontario General Contractors Association, for example, recognises certified members and points firms to the IHSA to register — recognition and certification are different things.

The four steps, in order

  1. Apply. Submit the COR® Application Form to the IHSA to register for the programme.
  2. Train. A senior management representative completes COR® Essentials. A full-time permanent employee — the person who will run your internal audits — completes four courses: COR® Essentials, Basic Auditing Principles, COR® Internal Auditor, and Introduction to Hazard and Risk Management.
  3. Build and self-audit. Put the health and safety management system in place, then audit it yourself against the IHSA COR® Audit Tool, with documentation supporting every element.
  4. External audit. A third-party external audit confirms the system does what your internal audit says it does. Passing it is what earns the certificate.
  5. Most of the elapsed time sits in step three. Applying and training are scheduling problems; building a management system that can survive an external audit is the actual work, and it is the part employers consistently underestimate.

The numbers that decide whether you pass

The IHSA COR® Audit Tool is built around 14 elements, and the scoring is a floor-and-average arrangement rather than a single pass mark. You need a minimum in every element AND an overall score — a strong showing in twelve elements does not carry two weak ones.

COR in Ontario, at a glance

Elements in the audit tool
14
Minimum score in each element
65%
Minimum overall audit score
80%
Certificate validity
3 years
Years 2 and 3
Internal maintenance audit each year
Issued annually on success
Letter of Good Standing
Year 4
Re-apply and undergo a re-validation audit

Is COR actually required?

Usually not by law — by customers. COR is a procurement requirement rather than a regulatory one, and whether you need it depends entirely on who you want to work for.

Some municipalities and owners expect contractors to hold COR in order to qualify to bid, and the City of Toronto moved to require it for contractors bidding on municipal construction work. Plenty of other public and private buyers use it as a pre-qualification. Plenty do not.

So the honest answer to "do I need COR" is: look at the tender documents for the work you actually want. If the buyers in your market ask for it, it is a gate and no amount of safety performance substitutes for the certificate. If they do not, COR is a genuine improvement to your safety system that will not by itself win you work.

If you are a small employer

The programme is scaled to firms of any size, and the IHSA publishes material aimed specifically at small businesses pursuing COR. The requirement that catches small employers is not the audit score — it is step two: you need a full-time permanent employee trained as an internal auditor, and in a company of a dozen people that is a real commitment of one person’s time, not a form to sign.

One caution if you are reading around the subject: SECOR, the small-employer variant you will see referenced in Alberta and some other provinces, is not the Ontario programme. Do not assume its requirements transfer.

Where the authority sits. Syon Safety is not a certifying body and does not issue COR™ certificates. COR™ is granted in Ontario by the Infrastructure Health and Safety Association, which sets the audit tool, the scoring and the maintenance requirements described above. What Syon Safety provides is the management system, the documentation and the audit preparation that get an employer through the IHSA’s process.

Frequently asked questions

How long does COR certification take in Ontario?

There is no fixed duration, because the elapsed time is dominated by how long it takes to build and document a health and safety management system that can pass an audit. Applying and completing the mandatory training are scheduling exercises; an employer starting from little documented system should plan in quarters rather than weeks.

How long is a COR certificate valid?

Three years, conditional on successful internal maintenance audits in the second and third years. A Letter of Good Standing is issued annually when those are passed. In the fourth year the employer re-applies and undergoes a re-validation audit.

What score do you need to pass a COR audit?

A minimum of 65% in each individual element of the audit, and a minimum overall audit score of 80%. Both thresholds have to be met — a high overall score does not rescue an element that scored below 65%.

Is COR required to bid on public work in Ontario?

Not universally. It is a pre-qualification requirement for some owners and municipalities — the City of Toronto moved to require it for contractors bidding on municipal construction work — but it is not a province-wide legal requirement. Check the tender documents for the work you want.

Can a consultant issue a COR certificate?

No. In Ontario the certificate is granted by the Infrastructure Health and Safety Association. A consultant can prepare your management system, run readiness reviews and support you through the audit process, but cannot issue the certificate.

Sources

Every regulatory claim above is taken from the body that sets the requirement, listed here so you can check it yourself rather than take our word for it.

How Syon Safety helps

End-to-end guidance through COR™, ISO 45001 and ISO 9001, from readiness review to audit.

COR, ISO 45001 and ISO 9001 Certification Support →

Related guides