COR Audit Preparation: 5 Documentation Gaps That Cost Points

COR is won or lost in the months of documentation before audit day. Here are the five gaps that cost companies points year after year, and how to fix each one.

COR certification is not won or lost on audit day. It is won or lost in the months of documentation that lead up to it. The same documentation gaps appear in audit after audit, regardless of company size, industry, or how long a company has held COR. The good news is that every one of them is fixable before an auditor walks through the door.

Gap 1: the safety manual does not match current operations or legislation

Auditors check whether the safety management system documentation reflects the company's actual scope of work and references current legislation. A manual that cites an outdated OHS Code edition, or that has not been updated for recent amendments, creates an immediate credibility problem. To fix it, run a gap analysis comparing the manual to the activities, equipment, and hazards encountered in the last 12 months, and check the manual against the current OHS regulation for each province of operation.

Gap 2: hazard assessments exist on paper but are not used in the field

Both the formal hazard assessment and the daily field-level hazard assessment must exist - and the FLHA must actually be completed before work begins, not at the end of a shift. Auditors look for evidence that hazard assessment is a living field practice. Review FLHA records from the past six months for consistent pre-task completion, correct identification of conditions, a reference to the applicable formal assessment, and documented corrective actions.

Gap 3: training records exist but competency has not been verified

A record showing a worker completed a course is not the same as evidence the worker is competent to perform the task safely - and competency verification is a distinct audit requirement. Add a competency verification step to the training matrix: for each required item, record the completion date, the date a supervisor verified field competency, and the supervisor's signature.

Gap 4: inspection records exist but corrective actions are not closed out

Auditors look for a closed-loop inspection system - hazards identified, and corrective actions completed, documented, and signed off. An inspection that notes a hydraulic hose in poor condition is not a closed record until someone documents that the hose was replaced, when, and by whom. Review six months of inspection records and confirm every noted deficiency has a corrective action on file with a completion date and sign-off.

Gap 5: management review happens once a year, or not at all

Management review is the formal, documented process by which senior leadership evaluates the safety management system. Auditors look for an appropriate frequency, documented inputs - incident data, audit results, inspection findings, training rates - and documented outputs, with decisions and corrective actions assigned to owners. For higher-hazard companies, quarterly reviews are the standard for a strong COR score. A once-a-year review with no recorded action signals a system going through the motions.

All five gaps are fixable, but they take time, and audit scheduling does not wait. Companies that go into a COR audit without a clear picture of their documentation status often discover too late that a gap they assumed was covered is the one that cost them their score.