COR Audit Ontario: Checklist, Interview Questions & Preparation Guide (2026)

a construction site for COR Certification in Ontario

Need Help Preparing for Your COR Audit?

We help Ontario businesses prepare for COR audits through documentation support, internal audits, and readiness assessments. Online support is available to help you prepare for your COR audit with confidence.

Contact: 416-635-7800 | info@stscanada.com

A COR audit is a formal evaluation of an organization’s health and safety management system under the Certificate of Recognition (COR) program. COR stands for Certificate of Recognition. In Ontario, the Infrastructure Health and Safety Association (IHSA) is the relevant COR program delivery partner.

A COR safety audit examines whether workplace health and safety policies, procedures, training, documentation, and practices are implemented effectively. The process may involve reviewing records, interviewing workers, and observing workplace conditions.

This guide explains what a COR audit covers, which documents to prepare, what workers may be asked during interviews, and how employers can get ready for an audit.

What Is a COR Audit?

A COR audit is an evaluation of how an organization manages workplace health and safety. It examines whether safety processes are documented, communicated, implemented, and supported by evidence. The audit is not just a paper review. It verifies that what is written in your safety program matches what actually happens on site.

In Ontario, COR audits are administered through IHSA and must be conducted by a certified COR auditor. Passing the audit is the final and most critical step in achieving or maintaining your COR certification.

For a broader overview of the certification process, see our Mastering COR Certification Guide.

What Does a COR Audit Cover?

A COR audit evaluates an organization’s health and safety management system. The auditor uses the applicable COR audit requirements to assess how the organization manages workplace hazards, communicates safety procedures, trains workers, and monitors its health and safety practices.

Areas that may be reviewed include:

Health and Safety Policy – The organization’s commitment to workplace health and safety and how its policy is communicated.
Responsibility and Accountability – How health and safety responsibilities are assigned to management, supervisors, and workers.
Hazard Identification and Assessment – How workplace hazards are identified, assessed, and controlled.
Hazard Controls – The procedures and controls used to reduce workplace risks.
Workplace Inspections – How inspections are conducted, hazards are documented, and corrective actions are followed up.
Training and Orientation – How workers receive relevant health and safety training and workplace orientation.
Emergency Preparedness – Emergency procedures, responsibilities, and related training.
Incident Investigation – How incidents are reported, investigated, documented, and addressed.
Communication and Worker Participation – How health and safety information is shared and how workers participate in the safety program.
Documentation and Records – Evidence showing that the health and safety management system is being implemented.

These are examples of areas reviewed, not a complete list of the official COR audit elements. Employers should use the applicable IHSA audit documentation to confirm the exact requirements.

COR Audit Checklist

Use this COR audit checklist to identify potential gaps before your audit. The exact documents and evidence required will depend on your organization’s activities and the applicable audit requirements.

Review health and safety policies and procedures.
Check hazard assessments and related control measures.
Review worker orientation and training records.
Check workplace inspection records.
Review incident and investigation records.
Confirm emergency procedures are documented and communicated.
Review applicable health and safety meeting records.
Check corrective-action records and outstanding issues.
Review equipment inspection and maintenance records where applicable.
Confirm workers understand how to report hazards and incidents.
Observe workplace conditions and the use of required personal protective equipment.
Check that written procedures reflect actual workplace practices.

Completing this checklist can help your organization identify missing records, outdated procedures, and areas where workplace practices need improvement. It is a preparation aid, not a replacement for the official audit instrument.

Documents to Prepare for a COR Audit

Organized documentation makes it easier to demonstrate how your health and safety management system works in practice.

Depending on the applicable audit requirements, your COR audit document list may include:

Health and safety policies and procedures
Hazard assessments and safe work procedures
Worker orientation records
Health and safety training records
Workplace inspection reports
Incident and investigation records
Emergency procedures and related records
Health and safety meeting minutes
Corrective-action records
Equipment inspection records, where applicable
Health and safety communication records
Other records required by the applicable COR audit instrument

Make sure documents are current, organized, accessible, and consistent with the way work is actually performed. Simply having a policy or procedure does not demonstrate that it is being followed.

What Happens During Worker Interviews?

Worker interviews help an auditor understand whether employees know about and follow the health and safety procedures relevant to their jobs.

During interviews, workers may be asked about:

The hazards associated with their work
How to report workplace hazards and unsafe conditions
The health and safety training they have received
Emergency procedures and responsibilities
How to report an incident or near miss
Where to find relevant health and safety information
The controls used to protect them from workplace hazards
Supervisors and managers may also be asked about their responsibilities, how they communicate safety requirements, how hazards are addressed, and how corrective actions are monitored.

Workers should answer honestly based on their actual knowledge and experience. Employers should focus on ensuring that employees understand safety procedures rather than asking them to memorize scripted answers.

COR Audit Interview Questions: What Workers May Be Asked

The questions asked during a COR audit interview depend on the applicable audit requirements and the employee’s role. The following examples illustrate common health and safety topics; they are not an official IHSA question list.

Hazard Reporting

How do you report a workplace hazard?
What would you do if you noticed an unsafe condition?
Who would you notify about a hazard?

Emergency Procedures

What would you do in an emergency?
Where can you find your workplace emergency procedures?
Do you know where relevant emergency equipment is located?

Training and Competency

What health and safety training have you received?
How were you trained for your current job?
What would you do if you were asked to perform work you had not been trained to do?

Incident Reporting

What would you do if you were injured at work?
How would you report an incident or near miss?
Who would you notify?

Workplace Procedures

What are the main hazards associated with your job?
What controls help protect you from those hazards?
Where can you find the procedures relevant to your work?

Supervisor and Management Questions

How do you ensure workers follow safe work procedures?
What do you do when a worker raises a safety concern?
How are new workers oriented to safety?
How do you handle corrective actions from inspections?
How does management demonstrate commitment to safety?

The best preparation is to make sure workers understand their responsibilities and know how to apply the organization’s health and safety procedures in real workplace situations.

Field Observations During a COR Safety Audit

Field observations help an auditor assess whether the organization’s documented safety procedures are reflected in day-to-day work.

An auditor may observe:

Use of personal protective equipment
Safe work practices
Housekeeping and workplace conditions
Hazard controls
Equipment use
Warning signs and safety procedures
Worker practices and compliance with relevant procedures

Employers should review both their written procedures and their actual workplace practices. If the two do not align, identify the issue and take appropriate corrective action.

How Is a COR Audit Scored?

COR audits are scored across the elements of the COR standard. IHSA sets minimum requirements for the overall score, for each individual element, and for legislated items specifically. Scoring is based on evidence from three sources: documentation review, interviews with workers and management, and workplace observations.

Because the thresholds are updated periodically, confirm the current requirements in IHSA’s COR audit guideline before your audit. What matters most is that your written system matches what actually happens in the field.

What Are the Requirements to Pass a COR Audit?

Passing requirements are set by IHSA and confirmed in the applicable COR audit guideline. The audit assesses whether your health and safety management system meets the standard across all elements, with specific attention to legislated requirements.

Rather than focusing only on a final percentage, employers should make sure their health and safety system works in practice and that identified gaps are addressed. For current criteria, consult IHSA’s official documentation.

What Is a COR Audit Tool?

A COR audit tool is used to assess an organization’s health and safety management system against the requirements of its COR program. Organizations use IHSA’s COR Audit Tool for their internal audit. Use the applicable official audit documentation to understand the criteria and evidence required for your organization. You can find COR program information and audit tool resources through the IHSA website.

COR Audit Preparation: How to Prepare

Effective COR audit preparation involves more than collecting documents. Employers should check that their health and safety processes are understood, followed, and supported by evidence.

Step 1: Review Your Health and Safety Program

Compare your existing policies, procedures, and records with the applicable COR audit requirements. Identify missing information and areas that need attention.

Step 2: Conduct an Internal Review

Review documentation, worker understanding, workplace practices, and outstanding corrective actions before the formal audit.

Step 3: Check Your Records

Review training, inspections, hazard assessments, incident investigations, meeting records, and other relevant documentation.

Step 4: Talk to Workers and Supervisors

Confirm that workers understand the procedures relevant to their jobs and that supervisors understand their health and safety responsibilities.

Step 5: Inspect Your Workplace

Look for hazards, missing controls, outdated information, and differences between written procedures and actual work practices.

Step 6: Document Corrective Actions

Record identified issues, assign responsibility, implement appropriate corrective actions, and verify that the issues have been addressed.

Step 7: Start Early

Begin preparation well before your audit date. The more time you have to close gaps and verify that corrective actions are working, the stronger your audit will be.

Related resource: COR vs SECOR vs ISO 45001 Comparison.

What Happens After a COR Audit?

After a COR audit, the organization can use the results to understand the strengths and weaknesses of its health and safety management system.

The findings may help identify:

Processes that are working well
Documentation that needs improvement
Gaps between written procedures and workplace practices
Corrective actions that need to be addressed
Opportunities to improve worker training and communication

Employers should review the results carefully and follow the applicable program’s instructions for addressing findings and maintaining compliance.

What Happens If Deficiencies Are Found?

If deficiencies are identified during a COR audit, the organization should review the findings and determine what action is required under the applicable COR program.

A corrective action plan can help the organization manage the process by recording:

The issue or deficiency identified
The action needed to address it
The person responsible for completing the action
The target completion date
The evidence showing that the action has been completed

The goal is to address the underlying health and safety issue, not simply to update a document. Follow the instructions provided by the applicable COR program for any required corrective actions and follow-up. For details about correction periods and recertification, see our COR Renewal in Ontario guide.

Internal vs. External COR Audits

Internal Audit

An internal audit or review helps an organization assess its health and safety practices, identify gaps, and address areas for improvement. It can help employers check documentation, review workplace practices, assess worker understanding, and prepare for an external audit.

External Audit

An external audit is conducted by an auditor who meets the requirements of the applicable COR certification program. The auditor evaluates the organization’s health and safety management system against the relevant audit requirements.

What Is a COR Maintenance Audit?

A COR maintenance audit is associated with maintaining certification after the initial certification process. Employers should understand the maintenance requirements that apply to their organization and keep their health and safety system active between formal audits.

For details about maintenance audits, renewal deadlines, pending status, and recertification, read our COR Renewal in Ontario guide.

COR Audit Cycle

COR certification involves ongoing requirements. Organizations must continue to maintain their health and safety management system and complete the audits or reviews required by their applicable program.

The cycle typically includes an internal audit followed by an external certification audit, with ongoing maintenance requirements between formal audits. The audit schedule and maintenance requirements should be confirmed with the relevant COR program.

For more details about maintaining certification, renewal, and recertification, read our COR Renewal in Ontario guide.

Who Can Conduct a COR Audit?

In Ontario, a designated internal auditor conducts internal audits, and a qualified external auditor conducts the external certification audit. External auditors meet IHSA’s requirements and are responsible for evaluating your health and safety management system against the COR standard.

The key difference: external auditors certify; internal auditors maintain compliance.

How Long Does a COR Audit Take?

Audit duration depends on your organization’s size, number of locations, scope of work, and how prepared your documentation is. The audit itself typically involves a documentation review, interviews with workers and management, and a site observation.

The full certification process, from registration to certification, takes longer and depends on your starting point. IHSA can give you a timeline estimate based on your specific circumstances.

How Much Does a COR Audit Cost?

Costs depend on the applicable audit arrangements, your company’s circumstances, and any additional preparation support you use. Additional costs may include training, internal staff time, and consulting support.

For current audit fees, contact IHSA. For a quote on preparation support, contact us.

Frequently Asked Questions About COR Audits

What Is a COR Audit?

A COR audit is an evaluation of an organization’s health and safety management system. It examines whether relevant safety processes are documented, implemented, and supported by evidence.

What Are the Requirements to Pass a COR Audit?

Passing requirements are set by IHSA and confirmed in the applicable COR audit guideline. The audit assesses your health and safety management system across all elements, with specific attention to legislated requirements. Consult IHSA for current criteria.

What Happens If You Fail a COR Audit?

If your audit identifies deficiencies, IHSA provides a written report and a correction period. You’ll need to implement corrective actions and demonstrate they’ve been addressed, often through a re-audit. The specific timeline and process are confirmed in your audit report. See our COR Renewal in Ontario guide for more information.

How Long Does a COR Audit Take?

The time required can vary depending on the organization’s size, activities, locations, documentation, and audit scope. Contact your COR program representative or audit provider for guidance specific to your organization.

How Much Does a COR Audit Cost?

The cost depends on your audit requirements, your organization’s circumstances, and the level of preparation or consulting support needed. Contact us for a quote tailored to your organization’s needs.

How Can a Company Prepare for a COR Audit?

Companies can prepare by reviewing their health and safety program, organizing documentation, checking training and inspection records, speaking with workers and supervisors, reviewing workplace practices, and addressing identified gaps.

Who Can Conduct a COR Audit?

In Ontario, a designated internal auditor conducts internal audits, and a qualified external auditor conducts the external certification audit.