Insights
What Is a GAP Audit?
A GAP audit is a pre-audit health check - the same protocol, the same evidence review, the same on-site observations as a formal COR or SECOR audit, but without the scored submission to your certifying partner. It exists to find the problems in your program while they're still cheap and low-risk to fix.
Published 11 Aug 2026 · The On-Track Team
5 min readKey Takeaways
- A GAP audit uses the same protocol and scoring as a real COR/SECOR audit, but the result is never submitted to your certifying partner - it's for your internal use only.
- It carries zero risk to your official certification record, even if it turns up serious problems.
- Most operators book one two to four months ahead of their real audit, giving enough time to close the gaps it finds.
- It's most valuable for first-time COR applicants, operators recovering from a prior fail, and companies with a new safety officer who haven't verified the program in a while.
.jpg&w=3840&q=95&dpl=dpl_2W11RnjHc3kasS47rHv3rxWiF3Ma)
1. What a GAP audit covers
A GAP audit walks through the full COR or SECOR protocol your operation would be scored against - document review, worker and supervisor interviews, on-site observations - and produces a real, honest score and a corrective-action list, exactly like a formal audit does. The difference is what happens to that result afterward: it stays with you. Nothing is submitted to ACSA, Energy Safety Canada, or any other certifying partner.
2. GAP audit vs the real thing
The short version
That single difference changes the incentive completely. In a formal audit, a company under-prepared for a weak element has every reason to hope the auditor doesn't dig too deep. In a GAP audit, digging deep is the entire point - the whole value is in finding exactly where the program would fail, while there's still time to fix it with no consequence on record.
3. Who should get one
- Companies pursuing COR or SECOR for the first time, with no prior audit to benchmark against.
- Operators who failed, or scored close to the pass line, on a previous audit.
- Companies with a new safety officer, new ownership, or a recent reorganization who haven't independently verified where the program actually stands.
- Any operator whose program hasn't had an outside review in the last year or two - documentation drifts even when nothing has visibly gone wrong.
Our Services
See how a GAP audit fits into your COR audit prep
On-Track runs GAP audits as part of the COR audit service line - same auditors, same protocol, no impact on your official certification timeline.
See GAP audit details4. When to book it
Two to four months ahead of your formal audit is the typical window - enough time to actually close whatever gaps it finds (retraining, rebuilding records, fixing a weak element) without the program having drifted again by the time your real audit happens. Booking one the week before a formal audit finds the same problems, just too late to fix them first.
5. Frequently asked
Does a GAP audit affect my official COR certification timeline or status?
No. A GAP audit is entirely independent of your certification cycle - it isn't submitted to your certifying partner and doesn't get scored against your official record. Findings are for internal use only, so there's no risk of a rough GAP audit result showing up anywhere on your certification history.
How is a GAP audit scored, if it isn't submitted anywhere?
The same protocol, evidence review, and on-site observation process as a real external audit, scored the same way (typically 80% overall and at least 50% per element to represent a passing result), but the score and corrective actions stay with you rather than going to the certifying partner. You get the real number and the real gap list, with none of the downside of an official low score on record.
How soon before my real audit should I book a GAP audit?
Most operators book a GAP audit two to four months ahead of their formal certification or recertification audit - enough runway to actually close the gaps it finds (updating records, retraining, fixing documentation) before the real audit happens, but close enough that the program hasn't drifted again by the time the official audit is on site.
What if the GAP audit finds major problems?
That's the outcome it's designed to catch while it's still cheap to fix. A GAP audit that surfaces serious gaps is the audit doing its job - the alternative is finding those same gaps for the first time during your real, scored audit, where a low element score can fail the entire certification regardless of how strong the rest of the program is.
Who should get a GAP audit rather than going straight to a real audit?
It's most valuable for companies pursuing COR for the first time, companies that failed or scored poorly on a previous audit, companies with a new safety officer or ownership change who haven't verified the current state of the program, and any operator whose safety program hasn't had an outside look in the last year or two even if nothing specific has gone wrong.