Quick answer: A COR certificate is typically valid for three years. It stays valid only if you pass a maintenance audit in years 2 and 3. In year 4, you complete a new external recertification audit, and the cycle starts again. Miss a maintenance audit and your COR can be cancelled before the three years are up.
That makes COR different from a one-time certificate. It is a living certification that you prove every year. This guide explains the cycle, how each province’s certifying body handles maintenance, how COR expires, and how to stay audit-ready. New to COR? Start with what COR certification is.
Keeping COR in Ontario: after IHSA’s external audit, you complete annual internal audits with IHSA’s COR® audit tool in years 2 and 3 to receive a Letter of Good Standing, then recertify in year 4. Keep it current: the City of Toronto, Metrolinx and Infrastructure Ontario require active COR to bid. Read What Is COR Certification in Ontario? or talk to our COR consultants in Ontario.
The 3-Year COR Cycle
| Year | Audit | Who audits | What you receive |
|---|---|---|---|
| Year 1 | Certification audit | External certified auditor (in Ontario, IHSA staff after reviewing your internal audit) | COR certificate |
| Year 2 | Maintenance audit | Usually your own trained internal auditor | Letter of Good Standing |
| Year 3 | Maintenance audit | Usually your own trained internal auditor | Letter of Good Standing |
| Year 4 | Recertification audit | External certified auditor | New COR certificate, and the cycle restarts (then years 7, 10 and so on) |
The annual Letter of Good Standing is what clients and owners ask for to confirm your COR is still active in years 2 and 3.
Maintenance Rules by Province
The cycle is the same everywhere, but the details differ:
| Certifying body | Maintenance requirement |
|---|---|
| IHSA (Ontario) | Annual internal audits in years 2 and 3 using IHSA’s COR® audit tool, to receive a Letter of Good Standing (IHSA) |
| ACSA (Alberta) | Annual internal maintenance audit, or an approved Action Plan, to keep COR and Partnerships in Injury Reduction refund eligibility. Maintenance audits need 60% overall and 12 months of documentation (ACSA 2023 audit requirements) (ACSA) |
| go2HR (BC tourism) | Maintenance audits in years 2 and 3, each within 6–12 months of the previous audit, with no minimum score to pass (go2HR) |
| CSAM (Manitoba) | Valid up to three years, validated annually with a Letter of Good Standing; recertification in years 4, 7, 10 and so on (CSAM) |
Some certifying bodies, such as ACSA and Energy Safety Canada, let eligible companies complete an Action Plan instead of a maintenance audit, usually after at least one full cycle. Always confirm current rules with your own certifying body. For the Ontario specifics, see COR certification in Ontario.
Keeping COR in Ontario: IHSA certification runs on the same three-year cycle. Your internal auditor completes an annual internal audit with IHSA’s COR® audit tool in years 2 and 3 to receive a Letter of Good Standing. Ontario owners such as the City of Toronto may ask for that letter to confirm your COR is active.
Does a COR Certificate Expire?
Yes, in two ways:
- At the end of the cycle: without a successful recertification audit in year 4, your COR lapses.
- Early, if you miss maintenance: certifying bodies can cancel COR mid-cycle. Alberta’s AMTA, for example, cancels SECOR if a maintenance audit is not submitted within the calendar year (AMTA).
Losing COR mid-contract can disqualify you from bids and put existing work at risk. It also ends rebate eligibility in BC and Alberta.
Want COR and WSIB rebates?
We’ve helped 10 of Ontario’s 118 SOSE-accredited employers get recognized.
Why Companies Lose COR
- Missed maintenance audit deadlines
- Failing the recertification audit, including any single element below the minimum (65% in Ontario, 50% in most provinces)
- Unresolved corrective actions from the last audit
- Activities happening but not documented
- Expired training and certifications
- Leadership losing interest after the first certificate
Warning Signs Your COR Is at Risk
Missing inspection records, overdue corrective actions, irregular safety meetings, falling hazard reports, expired training, and a last-minute scramble before every audit. If you see two or more, review your program now, not in audit season.
Preparing for your IHSA audit?
Our clients average 90%+ on external COR audits.
Recertification vs Initial Certification
The recertification audit uses the same method as the first one (documentation, observation and interviews) and the same scoring. The difference is what auditors expect to see:
| Initial certification | Recertification (year 4) | |
|---|---|---|
| Focus | The system is built and in use | The system has worked for three years |
| Records | Recent evidence of implementation | A continuous record over the full cycle |
| Improvement | Gaps closed | Earlier findings resolved, and improvement shown |
| Interviews | Workers know the system | Workers and supervisors use it as routine |
4S clients have a 100% success rate in external COR audits, including recertification, with an average score above 90%.
Year-Round COR Maintenance Checklist
- Policies and procedures reviewed and current
- Scheduled inspections completed, with findings and follow-up documented
- Incidents and near misses investigated, with corrective actions closed
- Training and certifications current, and the training matrix updated
- Safety meetings held, with worker input recorded
- Management review completed and resources allocated
- Maintenance audit booked well before the deadline
- Findings from the last audit resolved
For full audit preparation, see how to prepare for a COR audit.
How 4S Helps You Keep Your COR
Many companies find keeping COR harder than getting it. Our COR certification consultants provide:
- Annual maintenance support: we track deadlines and keep your program current
- Internal audit support for years 2 and 3
- Program updates when work, hazards or regulations change
- Recertification preparation, including mock audits
- 4SafeCom™ to track audit dates, training expiries, inspections and corrective actions all year
Why Ontario employers choose 4S for COR®: 10+ years of COR consulting · 120+ of the 900+ COR-certified employers on IHSA’s list supported by 4S · 100% external audit success, with an average COR audit score above 90% · 10 of Ontario’s 118 SOSE-accredited employers supported by 4S. Figures as of October 2026.
Approaching a maintenance or recertification audit? Request a COR maintenance review.
Get COR® Certified with Ontario's Proven COR Consultants
From your first gap analysis to IHSA’s external audit, 4S builds a COR® 2020 safety system your team can run and auditors will pass. Our clients don’t just get certified. They pass the first time.
A 4S COR consultant will contact you within 1 business day.
10+
Years of COR consulting
120+
IHSA COR-certified clients supported
100%
External audit success
90%+
Average COR audit score
Frequently Asked Questions
How long is a COR certificate valid for?
Three years, provided you pass maintenance audits in years 2 and 3. You recertify in year 4.
Does COR certification expire?
Yes. It lapses without a successful recertification audit, and it can be cancelled early if you miss a maintenance audit.
How often are COR audits required?
Every year. There is an external certification audit in year 1, maintenance audits in years 2 and 3 (usually internal), and an external recertification audit in year 4.
What is a COR Letter of Good Standing?
It is the annual letter your certifying body issues after a successful maintenance audit. It confirms your COR is still active.
What happens if I miss a COR maintenance audit?
Your certifying body can suspend or cancel your COR, and you may need a new certification audit to get it back.
Do I need an external auditor for maintenance audits?
Usually not. Most programs let a trained internal auditor complete maintenance audits. External auditors are required for certification and recertification.
Do COR renewal rules differ by province?
Yes, in the details: maintenance scoring, deadlines and Action Plan options vary. The three-year cycle is common across provinces.
Conclusion
A COR certificate is valid for three years, but you earn it every year. Pass your maintenance audits in years 2 and 3, keep your Letter of Good Standing, and recertify in year 4. Companies that treat COR as a year-round system, not an audit-season project, keep it with far less effort and far less risk to their contracts.
Keep your COR audit-ready year-round. Talk to a COR consultant.
