Why training records alone are not enough

Training attendance, course completion certificates, and professional qualifications are useful administrative records. They show what people have been taught or which external credentials they hold. They do not, however, automatically prove that an individual can consistently perform a particular task to the organisation’s required standard.

Key reasons training records fall short:

• Attendance ≠ ability: Someone can attend a course without mastering practical skills needed for on-the-job performance.
• Course content vs local practice: External training may be generic and not aligned with organisation-specific procedures, equipment, or customer requirements.
• Lack of observable evidence: Certificates rarely document supervised practical demonstrations, sample outputs, or the evaluator’s judgement.
• Role changes and procedure updates: Historic records do not confirm competence for new responsibilities or revised processes.

An effective competence management approach pairs training records with observable, assessed performance and decision-ready evidence that competence was evaluated, approved, and remains valid for the current scope of work.

Defining competence requirements by role

Competence requirements must be defined according to what the work actually demands. A clear, proportionate description enables targeted development, objective evaluation, and defensible records.

Consider these input factors when defining competence:

• Assigned activities: List specific tasks the role is expected to perform (e.g., goods receiving, temperature monitoring, exception handling).
• Process complexity: More complex processes require stronger assessment and evidence (e.g., multi-step thermal-control logistics vs basic stacking).
• Operational risks: Higher safety, quality, environmental, or legal risks require higher assurance of competence.
• Applicable legal or contractual requirements: Some customers or regulations may require documented competency for particular duties.
• Equipment and technology: New machinery or digital tools can introduce task-specific competence needs.
• Management system responsibilities: Tasks that enforce or verify ISO-related controls should have traceable competence proof.
• Procedure changes: Revisions to operational instructions may trigger reassessment.
• Customer-specific obligations: Special handling or reporting requirements must be reflected in competence statements.

Document the minimum acceptable capability for each role and classify the required level of evidence proportionally to risk and significance. For example, a fork-lift operator requires demonstrated practical ability and authorization; a general administrative assistant may require documented awareness and knowledge checks.

Building an effective training and competence record

A pragmatic record connects people, roles, required capabilities, assessment methods, and supporting evidence. Suggested fields for each competence record include:

• Employee or authorised worker identifier (name, staff ID)
• Department or organisational unit
• Role or assigned responsibility (specific task list)
• Required competence or skill (concise description)
• Relevant process or procedure (reference and revision)
• Applicable qualification or training activity (course or credential)
• Training or assessment date(s)
• Training provider or evaluator (internal or external)
• Assessment method (observation, test, simulation)
• Assessment result (pass/qualified; evidence summary)
• Supporting evidence reference (photos, signed observation sheet, work samples)
• Responsible supervisor or approver (name and signature/date)
• Applicable authorisation status (allowed to perform task: yes/no)
• Expiry or reassessment date, where relevant
• Identified competence gap (if any)
• Required development action (training, mentoring, supervised practice)
• Follow-up evaluation status (scheduled/completed)

These fields are a recommended organisational template, not a mandated ISO form. Keep records concise and focused on evidence that links directly to operational expectations.

Using a role-based competence matrix

A role-based competence matrix is a simple way to map roles to required skills and spot gaps. It need not be complex: a spreadsheet or simple database can provide immediate value.

Example matrix (illustrative):

Suggested internal status categories:

• REQUIRED — Competence has been defined for the role (but not yet met by the person).
• DEVELOPING — Training or supervised practice is underway.
• DEMONSTRATED — Competence has been evaluated by an appropriate method.
• REASSESSMENT REQUIRED — Triggered by change or review rule.
• GAP IDENTIFIED — Person does not meet the required competence criteria.

Note: This is a management aid, not an ISO-prescribed format. Tailor categories and visual cues to your organisation’s conventions.

Evaluating training effectiveness: prove competence, not just attendance

The choice of evaluation method should reflect task importance and the nature of the required skill. Possible methods include:

• Practical demonstrations (performing the task under observation).
• Supervisor observations with standard checklists.
• Work-sample reviews (inspecting completed outputs).
• Scenario-based assessments (simulated exceptions or emergencies).
• Knowledge tests (targeted short quizzes on procedure specifics).
• Structured interviews or oral questioning.
• Follow-up reviews after supervised practice (evidence of independent performance).

A completed course should prompt a competence evaluation, not replace it. If an evaluation identifies a gap, document the shortcoming, assign a targeted development action (coaching, additional practical sessions, updated guidance), and schedule a reassessment. Where operations carry significant risk, restrict unsupervised task performance until competence is demonstrated and authorised.

Maintaining current competence

Competence is dynamic. Establish triggers and review rules that make reassessment systematic rather than ad hoc. Common triggers:

• Changes in assigned duties (new tasks, promotions, reassignments).
• Updated procedures or work instructions.
• New equipment, software, or production methods.
• Changes in applicable legal or contractual obligations.
• Evidence of performance problems or increased nonconformities.
• Expiration of time-limited certifications or authorisations.
• Introduction of new products or customer-specific handling needs.

Reassessment frequency should be based on operational risk and organisational needs. Do not apply universal fixed rules without considering context; ISO standards emphasise proportionate, evidence-based arrangements. Record reassessment outcomes and any subsequent development actions.

Responsibilities, information control, and data protection

A practical split of responsibilities reduces duplication and clarifies accountability:

• HR: Maintains personnel records, formal qualifications, and training attendance lists.
• Process Owners: Define competence requirements aligned to process risk and objectives.
• Department Managers / Supervisors: Coordinate mentoring, practical training, and on-the-job evaluations.
• Quality / Compliance: Ensures records meet management system needs and supports consistent assessment methods.
• Employees: Participate in assessments and maintain professional development.
• Senior Management: Allocates resources and resolves significant competence gaps.

Protecting employee information is essential:

• Apply role-based access controls to competence records.
• Minimise personal data captured — record assessment outcomes, not sensitive medical details unless required by law.
• Maintain records only as long as legitimately needed, following your organisation’s retention policy.
• Securely handle contractor competence records and ensure they are verifiable before assigning critical tasks.

Practical processes for contractors and temporary workers might include short induction assessments, supervised practice, and time-limited authorisations tied to documented evaluations.

An actionable implementation framework

A pragmatic, stepwise approach helps an SME begin without heavy investment:

STEP 1: Identify critical roles and relevant processes. Focus first on tasks with the highest operational risk.
STEP 2: Define the competence needed for those roles in practical terms. Include performance criteria and acceptable evidence.
STEP 3: Review existing qualifications, training, experience, and assessment evidence. Look for gaps between evidence and role requirements.
STEP 4: Identify genuine competence gaps and prioritise by risk and customer impact.
STEP 5: Plan training, mentoring, supervised practice, or other suitable development actions. Define who will deliver and evaluate.
STEP 6: Evaluate whether the necessary competence has been achieved using appropriate assessment methods. Record results and approvals.
STEP 7: Maintain appropriate supporting records and authorisations; link them to roles and procedures.
STEP 8: Review competence when relevant changes occur (procedures, duties, equipment, performance indicators).

Specialised software can streamline records but is not mandatory. SMEs can begin with controlled spreadsheets, clearly defined responsibilities, and a simple matrix.

Realistic business example: fictional logistics company

Scenario: A logistics company operates two warehouses. HR holds induction attendance records; Warehouse Operations controls task instructions and authorisations; Quality maintains system procedures. An experienced warehouse employee is reassigned to handle temperature-sensitive products and exception handling. Their training history shows induction and internal sessions, but there is no documented assessment proving competence for the new responsibilities.

How the company should respond:

A. Role-specific competence requirements

• Process Owner defines required capabilities: identify temperature deviations, apply temperature-control escalation, accurately record exceptions, recognise when to escalate, and follow the current revision of instructions.

B. Assessment of existing knowledge and experience

• Supervisor conducts a structured interview and reviews past work samples (e.g., prior exception reports) to determine baseline knowledge and relevant experience.

C. Targeted training or mentoring plan

• Assign short, focused training on temperature-sensitive handling and a mentoring period with an experienced colleague.

D. Practical competence evaluation

• Require a supervised practical demonstration: the employee performs receiving and temperature-check procedures while a qualified observer completes a checklist.

E. Supervisor approval or task authorisation

• Supervisor documents the evaluation outcome and, if satisfactory, signs a task authorisation allowing independent work; if not, records development plan.

F. Supporting records linked to responsibilities

• Create a competence record entry referencing the process, assessment method, evidence (signed checklist, dated observation), and authorisation status.

G. Review triggers

• Set reassessment triggers: procedure revision, upgrade of temperature-control monitoring equipment, or evidence of nonconformance such as misrecorded exceptions.

H. Restrictions until competence demonstrated

• Apply supervised-only status for temperature-sensitive tasks until sign-off; document the restriction and monitor compliance.

This fictional example demonstrates how even when training attendance exists, targeted assessment and documented approval are needed to establish operational confidence.

Practical checklist: training and competence management

Use this checklist to adapt a system to your organisation:

• [ ] Are essential role requirements defined and documented?
• [ ] Has each critical role got clear performance criteria?
• [ ] Have existing competencies been evaluated against role requirements?
• [ ] Are training activities linked directly to identified gaps?
• [ ] Is supporting evidence retained (checklists, observations, work samples)?
• [ ] Are assessment results recorded and approved by a named supervisor?
• [ ] Are re-assessment triggers and expiry dates recorded where relevant?
• [ ] Are responsible people identified for maintaining competence records?
• [ ] Do unresolved gaps have documented development plans and follow-up dates?
• [ ] Are access controls and data protection measures applied to personnel records?

Suggested management indicators

Meaningful indicators help management focus on unresolved risks:

• Percentage of critical roles with defined competence requirements.
• Number of unresolved competence gaps affecting priority activities.
• Percentage of planned competence assessments completed on schedule.
• Number of overdue reassessments.
• Percentage of required task authorisations currently valid.
• Number of development actions awaiting effectiveness verification.

These are internal measures to help governance; they are not mandatory ISO KPIs.

Standards and regulatory context

Relevant standards as of 3 November 2026:

• ISO 9001:2026 — Quality management systems — Requirements.
• ISO 14001:2026 — Environmental management systems — Requirements with guidance for use.
• ISO 45001:2018 (including applicable amendments) — Occupational health and safety management systems.
• ISO 10015:2019 — Quality management — Guidelines for competence management and people development.

ISO 10015 provides guidance; it is helpful but not an additional mandatory certification requirement. Organisations certified to earlier editions of ISO 9001 or ISO 14001 should review transition arrangements where relevant.

Conclusion

Training records are necessary but insufficient on their own. An effective training and competence records system explicitly defines what people need to know and do, evaluates whether they can perform those tasks, and retains concise evidence that competence was assessed, authorised, and remains applicable. By linking role requirements, proportionate assessment methods, practical evidence, and scheduled reviews, organisations can reduce operational risk without creating unnecessary bureaucracy. The goal is reasonable confidence in people’s ability to deliver safe, consistent, and compliant performance — supported by clear ownership, controlled information, and continuous review.

FAQs

Q: What is the difference between a training record and a competence record?
A: A training record documents participation in development activities (e.g., course attendance, certificates). A competence record documents demonstrated ability to perform specific tasks to organisational standards, including the assessment method, evidence, and approval that the individual is authorised to perform the task.

Q: Do ISO standards require a competence matrix?
A: ISO standards (e.g., ISO 9001:2026, ISO 14001:2026) require organisations to ensure personnel are competent but do not mandate a specific format such as a matrix. A role-based competence matrix is a recommended management tool for clarity and gap identification, not a prescribed ISO requirement.

Q: How should contractors’ competence be recorded?
A: Treat contractors proportionally: verify relevant qualifications, conduct brief site-specific induction, observe or assess practical skills when necessary, and record authorisations and limitations. Keep contractor evidence separate or clearly marked in your competence records and control access according to data protection rules.