Insights
Difference between COR and SECOR across Canada
COR (Certificate of Recognition) is the full audit program designed for medium and large employers. SECOR (Small Employer Certificate of Recognition) is the lighter program designed for small operators, typically under 10 workers (up to 19 in British Columbia's Small COR program). Both certify the same idea - that the company has a written safety program and runs it on the worksite - but the audit scope, evidence depth, worker thresholds, and recognition by prime contractors vary meaningfully by program and by province.
Published 12 May 2026 · Updated 13 May 2026 · The On-Track Team
6 min readKey Takeaways
- COR requires 10 or more workers in Alberta and Saskatchewan; SECOR applies to smaller employers below that threshold.
- Both COR and SECOR audit the same occupational health and safety management system elements -- the difference is scope and evidence depth.
- SECOR uses a simplified audit tool and smaller worker sample; COR uses a full external audit for initial and recertification.
- Not all prime contractors accept SECOR -- confirm with your top hiring clients before choosing a certification stream.
- When a SECOR-certified company outgrows the threshold, the first COR audit is treated as an initial certification, not a renewal.
- British Columbia calls its small-employer program Small COR, not SECOR -- the threshold is 19 or fewer workers.
Decision tool
Which one fits the operation?
1. What COR is
The Certificate of Recognition (COR) is a verification that an employer has built and is running an occupational health and safety management system that meets a defined audit protocol. The protocol covers policy, hazard assessment and control, safe work practices and procedures, training, inspection, investigation, emergency response, records, and program review. The audit is conducted by an accredited certifying partner; the certificate itself is issued by the provincial Workers' Compensation Board.
COR is designed for medium and large employers. The audit is two to three days on site plus five to seven business days for the scored report. The certificate runs on a three-year cycle: initial certification audit, two maintenance audits, then full recertification. Most public-sector prime contractors and major project owners across Canada require COR as a prequalification condition. Full COR explainer.
2. What SECOR is
The Small Employer Certificate of Recognition (SECOR) is the same idea, scaled down for small operators. SECOR was introduced because COR's evidence depth and three-year audit cycle were impractical for operations with one to ten workers - the program existed but few small employers could meet it. SECOR scopes the safety program to fit a small operation while still proving the company is documenting hazards, controlling them, training workers, and investigating incidents.
SECOR's audit is a self-audit format with certifying-partner oversight - the small employer scores their own program against the SECOR protocol, supported by training and guidance from the certifying partner. In Alberta, the most common SECOR certifying partners are AASP (for non-construction industries) and ACSA (for construction). The SECOR certificate carries the same three-year cycle as COR but with a smaller maintenance burden.
3. Side by side
The structural differences in one view.
| Dimension | COR | SECOR |
|---|---|---|
| Target operator | Medium to large; typically 10+ employees | Small; typically under 10 employees |
| Audit format | External auditor on initial + recertification; internal maintenance audits in between | Self-audit with certifying-partner oversight |
| On-site days | 2 to 3 days plus 5 to 7 business days for the report | Roughly 20 hours of structured work, no full on-site week |
| Evidence depth | Full element protocol, worker + supervisor interviews, worksite observations | Scoped to small-operator scale, lighter documentation expectations |
| Cycle | Three-year: initial + 2 maintenance + recertification | Three-year: lighter maintenance, same renewal cadence |
| Prime contractor acceptance | Universally accepted where COR is required | Accepted by many primes; some require COR specifically |
| Cost profile | Varies by partner, scope, travel, multi-province | Quoted to your operations - smaller scope than COR, typically a fraction of the cost |
4. Worker thresholds by province
Worker counts that separate COR from SECOR vary across Canada. Alberta and Saskatchewan use 10 workers as the line. British Columbia runs Small COR up to 19 workers (BCCSA's label, not "SECOR"). Manitoba offers both programs at all sizes. Ontario, the Atlantic provinces, and the territories run COR at all sizes with no separate SECOR program. We support the nine provinces below; Quebec runs its own CNESST-based regime and does not participate in COR.
| Province | COR threshold | SECOR / Small COR | Note |
|---|---|---|---|
| Alberta | 10 or more workers | 10 or fewer (SECOR) | Deepest market - 13 certifying partners including AASP, ACSA, ESC, AMTA, AMHSA. |
| British Columbia | 20 or more workers | 19 or fewer (Small COR) | BCCSA uses the 'Small COR' label rather than SECOR. ESC also operates here for oil and gas. |
| Saskatchewan | 10 or more workers | 9 or fewer (SECOR) | SCSA and HCSAS dominate; ESC available for oil and gas. |
| Manitoba | All sizes (COR and SECOR) | All sizes (SECOR) | SAFE Work Manitoba umbrella program through CSAM, MHCA WORKSAFELY, and sector partners. |
| Ontario | All sizes | Not available | IHSA is the sole COR authority. Ontario does not run a SECOR equivalent. |
| New Brunswick | All sizes | Not available | NBCSA dominates; construction-industry focus. |
| Nova Scotia | All sizes | Not available | Westray-driven safety culture, OH&S Act compliance heavily weighted. |
| PEI | All sizes | Not available | Small market - typically folded into Atlantic Canada certifying partner coverage. |
| Newfoundland and Labrador | All sizes | Not available | NLCSA dominates onshore; offshore (C-NLOPB) has its own regime. |
The thresholds above are the standard worker counts each certifying partner uses. They are defaults; a prime contractor requirement overrides them. Even a four-person operation may need COR specifically if a prime contractor demands it on their work.
5. Who needs COR
Choose COR if the operation has roughly 10 or more workers, is bidding into public-sector contracts, or works under a tier-one prime contractor (most provincial government, major municipal, and large private prime contractors write COR into their prequalification criteria - SECOR may not be accepted there). Choose COR if the operation has multiple sites, multi-province scope, or work that lasts long enough that an external auditor can observe meaningful activity on site.
Construction operators that pre-qualify on ISN, ComplyWorks, Avetta, CanQualify, or ContractorCheck almost always need COR. Upstream oil and gas operators auditing through Energy Safety Canada are exclusively in COR territory. Multi-trade general contractors hiring sub-trades into COR-required worksites need COR themselves to compete.
Confirm acceptance before choosing a program
6. Who needs SECOR
Choose SECOR if the operation has fewer than 10 workers, is not bidding into public-sector contracts where COR is written into the prequal, and the relevant prime contractors accept SECOR. Sole-proprietor trades, two-to-five person service operators, and small specialty subs are the typical SECOR fit. Confirm with the top three to five prime contractors the operation works with that SECOR is accepted on their work; if any of them require COR specifically, plan for COR from the start instead.
SECOR is also the right starting point when an operator is brand new to the certification path. The lighter audit and smaller documentation scope let a small operator build a defensible safety program at a sustainable pace, then transition to COR when the company outgrows the small-employer threshold.
7. Outgrowing SECOR
Two events typically push a SECOR operator into the COR program. The first is worker count - once the operation consistently runs above roughly 10 workers, SECOR's small-employer scope no longer matches the actual operation. The second is a prime contractor demand - even a small operator may need COR to bid on a specific project owner's work. When either happens, the safety program needs to expand to meet COR's deeper evidence requirements before the initial COR audit can succeed.
The typical transition is six to twelve months. The existing SECOR documentation provides a solid spine; what it needs is broader policy coverage, a fuller hazard library, deeper training records, more inspection cadence, and operating history that the COR audit can observe on site. The first COR audit is an initial certification audit, not a renewal, and the certifying partner does not assume any credit from the prior SECOR status.
Planning the SECOR or COR move? The audit-prep workspace, certificate tracker, and audit cycle tracker inside the On-Track Compliance Members Portal are built for this exact transition. See COR audit details or see SECOR audit details.
Our Services
Not sure whether COR or SECOR applies to your operation?
We can help you scope the right certification stream based on your worker count, province, and the prime contractor platforms you work with.
See COR audit details8. Frequently asked
Is SECOR easier than COR?
SECOR has a smaller documentation scope, a shorter audit, and accepts a self-audit format with certifying-partner oversight. It is structurally lighter than COR but it is not a shortcut to the same recognition. Some prime contractors and project owners accept SECOR as equivalent to COR; others specifically require COR. Confirm what the operator's prime contractors accept before choosing.
Can I switch from SECOR to COR later?
Yes. Operators that outgrow SECOR (typically when worker count crosses roughly 10 or when a prime contractor requires COR) transition to the full COR program. The first COR audit is an initial certification audit, not a renewal, and the safety program documentation usually needs expansion to meet COR's deeper evidence requirements. Plan for six to twelve months to build the additional documentation and operating history before the COR audit.
How much does a SECOR audit cost compared to a COR audit?
SECOR audits are quoted to your operations - smaller scope than COR, typically a fraction of the cost. COR audits are quoted based on certifying partner, audit scope (single province vs multi-province), on-site days, travel, and worker sample size, so the price varies more. For the smallest operators, SECOR is materially cheaper; for larger operators, the SECOR program does not apply. Contact us for a quote.
Does SECOR require the same kind of safety manual as COR?
Both require a written occupational health and safety program covering policy, hazard assessment, safe work practices, training, inspections, investigations, emergency response, and program administration. SECOR's evidence depth on each element is smaller and the formatting expectation is lighter, but the structural elements are the same. A safety manual built for SECOR will pass a SECOR audit; it generally needs expansion to pass a COR audit.
Which certifying partner audits SECOR in Alberta?
Multiple certifying partners audit SECOR in Alberta. ACSA audits SECOR for construction-sector operators. AASP (Alberta Association for Safety Partnerships) audits SECOR across a broad range of non-construction industries and is the most common SECOR certifying partner for service-sector small employers. Other partners cover their respective industry sectors. The right SECOR certifying partner is determined by industry and which platform the operator is registered with.
If a prime contractor accepts only COR, can I still bid with SECOR?
No. If the prime contractor or project owner explicitly requires COR, SECOR will not be accepted. This is the most common reason small operators move from SECOR to COR before they have grown out of the worker-count threshold. Before pursuing SECOR, confirm with the operator's top three to five prime contractors that SECOR is accepted on their work; if any of them require COR, plan for COR from the start.