The Business Growth Factor
Community Connect Recap
5 min read Workplace Safety

Workplace Safety, COR and SECOR

The shift in responsibility, from employers, to contractors, to the clients hiring them, and what owners should be doing this quarter.

Lyndon Smith Joshua Leyenhorst Elizabeth Lecerf

Hosted by

Lyndon Smith & Joshua Leyenhorst

Featuring guest expert Elizabeth Lecerf

Key takeaways

  • Workplace safety liability is moving upstream: clients hiring contractors are increasingly on the hook for contractor safety records.
  • COR (Certificate of Recognition) and SECOR (for under-10-worker employers) are the Western Canadian certifications most clients now expect before contracting work.
  • The Prime Contractor on a multi-employer site carries overall safety responsibility, which is why clients pre-vet contractor safety records.
  • The due diligence defence after an incident depends on documentation: training records, hazard assessments, inspections, corrective actions. A binder on a shelf does not satisfy the test.
  • Certification takes 12-18 months. If your clients are starting to ask, start now.

For years, the safety conversation in Western Canada stayed mostly inside the employer–employee box. If you ran a small or mid-sized business, you focused on your own people, your own job sites, and your own paperwork. That box is breaking open.

Safety used to be your problem. Now it's the problem of every client who hires you, and they know it.
From the Apr 16 Community Connect session

Our most recent Community Connect session was a deep-dive with workplace safety specialist Elizabeth Lecerf of Safety Comply. The headline takeaway: liability is moving upstream. Clients are increasingly being held accountable for the safety record of the contractors they hire, which means they're starting to demand proof of a real safety program before they'll put you on the work.

That changes the conversation for every SMB that does contract work for larger clients, prime contractors, oil & gas, construction, municipalities, or industrial operators. Here's what we covered.

1

What COR and SECOR actually are

In Alberta and most of Western Canada, the two designations to know are:

  • COR, Certificate of Recognition for employers with 10+ employees. Requires a written health & safety program, an internal audit each year, and an external audit every three years.
  • SECOR, Small Employer Certificate of Recognition for employers with under 10 employees. Same intent, lighter touch, simpler program, simpler audits.

Both are issued through certifying partners (in Alberta: the Alberta Construction Safety Association and similar bodies for other sectors). They're recognized by WCB, by prime contractors, and increasingly by clients writing tenders and RFPs.

2

Why it matters more than it used to

Three forces are converging:

  • Prime contractor obligations have been expanding. If you're the “prime” on a site, you're accountable for the safety of everyone working on it, including subcontractors you hired. Larger clients have figured out that the cleanest way to manage this is to only hire COR/SECOR-certified subcontractors.
  • Pre-qualification platforms like ISN, ComplyWorks, and Avetta have made it easy for clients to check your safety record before awarding work. No paperwork = no shortlist.
  • WCB premium incentives. Certified employers earn rebates of up to 20% on their WCB premiums in many provinces. For SMBs, that's real money.

If your business sells into any of those buyer types, industrial, construction, oil & gas, municipal, large facilities, the absence of COR or SECOR is now an active disqualifier on a growing share of contracts.

3

It isn't just paperwork, it's an operating system

Most owners we work with start with the wrong mental model. They think of a safety program as a binder you produce for audits. Elizabeth's framing was sharper:

A real safety program is the same as a real ops program. It's how work actually gets done.

The components, hazard assessments, job procedures, equipment inspections, near-miss reporting, toolbox talks, incident investigations, are exactly the kind of operating discipline a well-run business uses anyway. The difference is they're written down, reviewed, and lived.

This is why owners who treat the COR/SECOR process seriously usually see the benefit extend well beyond safety: tighter handoffs, fewer rework cycles, clearer accountability, and a workforce that feels seen.

4

The "due diligence" defence

One point Elizabeth emphasized that owners often miss: in the event of a serious incident, regulators and the courts apply a due diligence test. Did the employer take every reasonable step to prevent the incident?

A documented program, with hazard assessments, training records, inspections, and corrective actions, is your evidence that you did. Without it, you're starting the conversation on the back foot, regardless of whether the incident was avoidable.

This isn't fear-mongering. It's the practical reality of operating in any field where a worker could be seriously hurt.

5

COR vs SECOR, which fits your business?

The decision usually comes down to size, client expectations, and the path you're on:

  • Under 10 employees, stable size: SECOR is the right fit. Lower lift, faster to achieve, recognized by most prime contractors.
  • 10+ employees or growing past 10 this year: Skip SECOR and go straight to COR. The audit process is more rigorous but you'll need it anyway, and some clients only accept COR.
  • Selling into oil & gas, major construction, municipal: Confirm what your target clients accept. Some specify COR only.

What to do this week

Whether you're starting from zero or polishing what you have:

  1. 1Audit your client list. Pull your top 10 customers and ask: do any of them require, or prefer, COR/SECOR-certified vendors? If yes, you have your business case.
  2. 2Check your WCB rate. Find your current premium and your industry's certified-employer rebate. Often there's a quick payback case before any new revenue.
  3. 3Talk to a certifying partner. They'll do a gap assessment for free in most cases. You'll get a real read on the lift before you commit.
  4. 4Pick an owner. Safety programs fail when there's no internal champion. It doesn't have to be you, but someone needs to own it.

Workplace safety has always been a moral obligation. What's new is that it's also become a commercial filter. The owners who treat it as both, and build the program to back it up, win on both fronts.

Want the full session?

The recording, Elizabeth's resources, and the live Q&A are in the community.

Members of The Business Growth Factor get every Community Connect session on demand, plus the resources, templates, and slide decks we work through together, and access to peers asking the same questions you are.

Join the Community

Frequently asked

Quick answers

What is COR (Certificate of Recognition)?

COR is a Western Canadian workplace safety certification administered by provincial Certifying Partners and recognized by Workers' Compensation Boards. Many large clients now require COR before contracting work, especially in construction, industrial services, and trades. Certification is typically a 12-18 month process and includes an external audit.

What is the difference between COR and SECOR?

SECOR (Small Employer Certificate of Recognition) is the COR variant designed for small employers, generally fewer than 10 workers. Requirements are scaled down to fit smaller operations while keeping the core safety-management-system principles intact.

Who is the Prime Contractor on a worksite?

Under Western Canadian workplace safety legislation, the Prime Contractor is the party with overall responsibility for safety on a multi-employer worksite. Often the general contractor, but it can also be the client if no general is designated. The trend is for safety liability to flow upward, which means clients now actively vet contractor safety records before hiring.

What is the due diligence defence in workplace safety?

It is the legal test applied to employers after a workplace safety incident: did the employer take every reasonable step to prevent it? Documentation (training records, hazard assessments, inspections, corrective actions) is the difference between a defensible record and a fine. A safety binder that sits on a shelf does not satisfy the test; a documented program that crews actually follow does.

How long does COR certification take?

Typically 12-18 months. The process includes building a documented safety management system, training workers and supervisors, conducting internal audits, and passing an external audit by a certified auditor. If clients are starting to ask, the certification process is faster started than caught up to.

About the guest

Elizabeth Lecerf

Elizabeth Lecerf

Elizabeth is a workplace safety specialist with Safety Comply, who has guided dozens of small and mid-sized employers through COR and SECOR certification across construction, industrial services, and trades. Her work focuses on building safety programs that crews actually use, not binders that sit on a shelf.