Preparing for a staff training audit: a practical checklist for managers

A staff training audit shouldn't be the first time you discover that your training records are incomplete.

Yet for many organisations, preparing for an audit means searching through spreadsheets, chasing certificates, checking expiry dates and trying to establish which employees have completed their required training.

The information may exist, but it isn't always organised.

A certificate might be sitting in an employee's inbox. A training record might show a completion date without supporting evidence. An employee may have changed roles without their mandatory training requirements being updated.

Individually, these issues can seem relatively minor.

Together, they can make it difficult to demonstrate that employee training is being managed effectively.

The organisations best prepared for training audits are not necessarily those delivering the greatest volume of training.

They are those that understand their requirements, maintain accurate records and can demonstrate appropriate oversight.

This guide explains how to prepare for a staff training audit, what evidence may be requested and how to establish a process that keeps your organisation ready throughout the year.

What is a staff training audit?

A staff training audit is a structured review of an organisation's training arrangements, records or compliance with relevant requirements.

The purpose and scope vary considerably.

An audit might examine whether employees have completed required training, whether professional competence is maintained or whether the organisation has appropriate processes for identifying and addressing training needs.

Depending on the organisation, audits may be conducted by:

• Internal quality assurance or compliance teams.
• External auditors.
• Regulatory bodies.
• Professional or accreditation organisations.
• Customers or contractual partners.
• Certification bodies.
• Funding or commissioning organisations.

Not every audit examines the same information.

Some focus specifically on mandatory training completion and verification.

Others may consider training effectiveness, competence, supervision, professional development or organisational learning processes.

Your first task is to understand the audit criteria that actually apply to your organisation.

What do training auditors typically look for?

Although requirements vary, several themes commonly arise in staff training audits.

Area	What may be examined	Potential evidence
Training requirements	Whether required training has been identified for relevant roles	Role-based training matrix, policies, regulatory requirements
Completion records	Whether employees have completed required training	Training records, LMS reports, certificates
Currency	Whether training remains current where renewal is required	Completion dates, renewal dates, refresher records
Verification	Whether completion claims have been appropriately checked	Provider confirmations, manager sign-off, verification records
Employee competence	Whether employees can demonstrate relevant capabilities	Assessments, observations, supervision records
Training management	Whether responsibilities and processes are clear	Training procedures, monitoring reports, escalation records
Development needs	Whether learning needs are identified and addressed	Skills assessments, development plans, appraisal records
Training effectiveness	Whether learning has supported the intended outcomes	Evaluations, observed practice, performance evidence

These are potential areas of review, not a universal audit standard.

For example, an audit of a specific mandatory training requirement may not examine wider professional development activity.

Likewise, a course completion certificate may demonstrate attendance or completion without necessarily proving practical competence.

The relevant audit criteria should determine which evidence you prepare.

The 12-point staff training audit readiness checklist

Use this checklist to review your organisation's training arrangements.

1. Identify your mandatory training requirements

Start by establishing which training activities are genuinely required.

Requirements may arise from:

• Legislation or regulation.
• Professional registration conditions.
• Industry standards.
• Contractual obligations.
• Organisational risk assessments.
• Internal policies.
• Specific job responsibilities.

Avoid assuming that every employee requires the same training.

For example, an employee working in a specialist technical role may need additional competence training that is not relevant to an administrative employee.

Equally, training described as mandatory under an internal policy is not necessarily a universal legal requirement.

What to check

• Is there an up-to-date list of required training?
• Are requirements linked to specific roles?
• Is the reason for each requirement documented?
• Are relevant renewal requirements identified?
• Who is responsible for reviewing the requirements?

Evidence to prepare: Role-based mandatory training matrix and relevant supporting policies or standards.

2. Review your staff training matrix

A training matrix provides an overview of employees and their required learning.

It can help managers identify completed, outstanding and upcoming requirements.

For example:

Employee	Role	Training requirement	Status	Renewal
Employee A	Team leader	Information security awareness	Complete	March 2027
Employee B	Support worker	Role-specific safeguarding training	Overdue	September 2026
Employee C	Administrator	Workplace induction	Complete	No scheduled renewal
Employee D	Supervisor	Required operational safety training	Due soon	November 2026

Illustrative example only. Actual requirements and renewal periods must be established by the organisation.

A useful training matrix should be current, accurate and appropriate to the organisation's size and responsibilities.

What to check

• Are all relevant employees included?
• Are role changes reflected?
• Have leavers been handled appropriately?
• Are requirements assigned correctly?
• Can managers identify outstanding training easily?

Evidence to prepare: Current training matrix or equivalent compliance report.

3. Calculate your current compliance position

Once the training requirements are established, review completion status.

A basic measure is:

Training compliance rate = (completed applicable requirements ÷ total applicable requirements) × 100

For example, if an organisation has 180 applicable training requirements and 162 are complete:

162 ÷ 180 × 100 = 90%

This gives a headline compliance rate of 90%.

However, a single percentage can conceal important risks.

An organisation could have a high overall completion rate while several employees remain overdue for particularly important training.

Consider reviewing:

• Overall completion rates.
• Completion by department.
• Completion by role.
• Overdue requirements.
• Upcoming renewals.
• Training requiring verification.
• High-priority or safety-critical gaps.

The denominator should include only applicable requirements, with exclusions handled consistently and documented.

4. Identify overdue and expiring training

An audit may reveal that an employee completed training several years ago but no longer meets the applicable currency requirements.

Where refresher training or renewal is required, organisations need to monitor relevant dates.

A practical review might identify:

Status	Meaning	Suggested management response
Complete	Current requirement satisfied	Continue routine monitoring
Due soon	Renewal approaching	Arrange appropriate refresher activity
Overdue	Requirement not currently satisfied	Assess risk and take appropriate action
Awaiting verification	Completion claimed but not confirmed	Review supporting evidence
Not applicable	Requirement does not apply to the role	Ensure the exclusion is justified

For operational planning, some organisations use 30-, 60- or 90-day renewal windows.

These are management choices, not universal regulatory deadlines.

Important: Where a training gap creates an immediate safety, regulatory or competence risk, simply booking future training may not be sufficient. The organisation may need to consider interim controls, supervision or restrictions on particular duties.

5. Check supporting evidence

A training record is only as reliable as the information supporting it.

An entry showing that an employee completed a course may not satisfy an auditor if the relevant framework requires independent verification.

Potential evidence includes:

• Completion certificates.
• Learning management system records.
• Attendance confirmations.
• Assessment results.
• Practical competency assessments.
• Provider verification.
• Authorised manager sign-off.
• Relevant professional registration records.

What to check

• Can supporting evidence be located?
• Does it relate to the correct employee?
• Does it identify the relevant training?
• Are completion dates accurate?
• Does it meet the applicable verification standard?
• Is the evidence stored securely?

A certificate is not always sufficient.

For example, a training completion certificate may demonstrate that an employee completed learning but not necessarily that they can perform a particular task competently.

Where competence assessment is required, retain the appropriate evidence.

6. Verify external training

Employees may complete training outside the organisation's primary learning platform.

This could include:

• External professional courses.
• Industry certification programmes.
• Training delivered by another employer.
• Specialist technical instruction.
• Professional body learning activities.

Organisations should establish how external training is reviewed and accepted.

For example, an employee might upload a certificate from an external provider.

Before the organisation treats the requirement as satisfied, an authorised person may need to confirm that the course is relevant, current and meets the applicable standard.

What to check

• Is the provider identifiable?
• Is the course appropriate for the requirement?
• Is the completion evidence authentic and sufficient?
• Is the qualification or certificate current?
• Has an authorised person verified the record?

WorkplaceHero's Passport for Teams model distinguishes employee-submitted external training from verified compliance records, helping organisations maintain appropriate oversight.

7. Review training for new starters and role changes

Training requirements can change when employees join an organisation or move into different responsibilities.

For example, an employee promoted into a supervisory role may need additional training in management responsibilities, safety oversight or organisational procedures.

A reliable process should consider:

• New starter induction.
• Role-specific requirements.
• Internal promotions.
• Transfers between departments.
• Changes to responsibilities.
• Return to work after extended absence, where relevant.
• Changes to legislation, regulation or internal procedures.

What to check

Can you demonstrate that employees receive the training and competence support appropriate to their responsibilities?

A current employee training record should reflect their present role, not simply the training they completed when they joined.

8. Check how training needs are identified

Some audits consider whether organisations have a systematic approach to identifying learning needs.

Training needs may arise from:

• Skills assessments.
• Employee appraisals.
• Manager observations.
• Performance reviews.
• Quality assurance findings.
• Incident investigations.
• Customer feedback.
• Changes to technology or working practices.
• Regulatory developments.

The organisation should be able to explain how relevant training needs are recognised and addressed.

For example, a quality review may identify inconsistent application of a procedure.

The organisation might respond with targeted training, supervision and follow-up evaluation.

This provides a clearer account of why the development activity was needed.

9. Review ongoing professional development

Mandatory training and ongoing professional development serve different purposes.

Mandatory training helps employees meet defined requirements.

Continuing Professional Development (CPD) supports the maintenance and development of professional knowledge and capabilities.

Depending on the audit scope, reviewers may examine whether employees have appropriate opportunities for ongoing development.

Potential evidence includes:

• Individual CPD records.
• Professional qualifications.
• Development plans.
• Mentoring and coaching.
• Relevant workplace learning.
• Appraisal development objectives.
• Records of learning applied in practice.

However, a live CPD log is not automatically proof of competence or compliance.

Its value depends on the quality of the records and the requirements being assessed.

Employees should also retain appropriate ownership of their personal professional development records.

WorkplaceHero's individual CPD model is designed to allow professionals to maintain their learning history across employers, while organisational tools support relevant workforce oversight.

10. Check training management responsibilities

Auditors may examine whether the organisation has clear processes for managing training.

For example:

• Who identifies mandatory requirements?
• Who assigns training?
• Who verifies external completion?
• Who monitors overdue requirements?
• Who approves exceptions?
• Who reviews changes to training requirements?
• Who reports compliance risks to leadership?

These responsibilities should be proportionate to the organisation.

A small business may have one person managing several functions.

A larger organisation may divide responsibilities between HR, L&D, compliance teams and operational managers.

What matters is that accountability is clear.

11. Test your ability to retrieve records

One of the most useful preparation activities is to simulate a request for evidence.

Select an employee and attempt to retrieve their relevant training information.

For example:

Scenario: An auditor asks for the training record of a randomly selected employee.

Can you identify:

1. Their current role?
2. The training required for that role?
3. Which requirements have been completed?
4. Which requirements are outstanding?
5. When any relevant training expires?
6. Whether external completion has been verified?
7. Where the supporting evidence is stored?

For a larger organisation, repeat the exercise across different roles and departments.

The aim isn't to meet an arbitrary retrieval time.

It's to confirm that information is accurate, accessible and complete enough to satisfy the relevant requirements.

12. Record and address any gaps

If your review identifies missing evidence, overdue training or unclear responsibilities, document the findings.

A simple action log can help.

Finding	Risk or impact	Action	Owner	Target date
Missing training certificate	Completion cannot be verified	Request appropriate evidence	HR manager	15 October
Overdue refresher training	Requirement not satisfied	Assess risk and arrange training	Department manager	20 October
Outdated training matrix	Incorrect role assignments	Review role requirements	L&D lead	25 October
No external verification process	Unreliable compliance status	Introduce verification procedure	Compliance manager	31 October

Illustrative dates and actions.

Prioritise actions according to risk.

Where an immediate safety or regulatory concern exists, respond promptly rather than waiting for the next scheduled review.

What should be included in a training audit evidence pack?

An audit evidence pack is a structured collection of relevant records.

Its contents should reflect the audit criteria.

A practical pack might include:

Section	Example contents
Training requirements	Mandatory training matrix, relevant policies
Workforce information	Role list, reporting responsibilities
Compliance overview	Completion and overdue reports
Individual training records	Relevant employee training histories
Supporting evidence	Certificates, assessment records, provider confirmations
Verification	External training approvals and relevant sign-off records
Training management	Procedures, responsibilities and review records
Development planning	Skills audits, development plans, where relevant
Improvement actions	Identified gaps, corrective actions and follow-up evidence

Do not provide unnecessary personal information or records outside the legitimate scope of the audit.

Ensure that access, sharing and retention arrangements comply with applicable data protection and confidentiality requirements.

How to prepare when an audit has been announced

If you receive advance notice, use the available time to organise and verify your existing records.

Four weeks before the audit

Where the timetable allows:

• Confirm the scope and criteria.
• Identify relevant training requirements.
• Review your compliance position.
• Check overdue and expiring training.
• Identify missing evidence.
• Assign actions according to risk.

Two weeks before the audit

• Review progress against identified actions.
• Verify external training where required.
• Organise relevant records.
• Check that reporting information is accurate.
• Brief relevant managers on their responsibilities.

One week before the audit

• Test sample employee records.
• Confirm that evidence can be retrieved.
• Review unresolved gaps.
• Ensure relevant staff understand the audit arrangements.
• Prepare accurate explanations for outstanding issues.

On the day

• Provide information that is accurate and relevant.
• Respond clearly to requests.
• Distinguish confirmed facts from matters requiring verification.
• Keep a record of additional information requested.
• Be transparent about outstanding issues and corrective actions.

Never invent training records, alter completion dates or retrospectively claim that training occurred when it did not.

Where gaps exist, explain them accurately and demonstrate what action is being taken.

What if you discover missing training records?

Missing records don't always mean training never happened.

However, they do mean the organisation may be unable to demonstrate completion.

The appropriate response depends on the circumstances.

If the employee completed the training

Try to obtain reliable evidence from the original provider or another authorised source.

Check whether an existing learning management system or training record can confirm completion.

If completion cannot be verified

Do not automatically mark the requirement as satisfied.

Assess whether the available evidence meets the relevant standard.

Where necessary, arrange appropriate training or assessment.

If the training was never completed

Identify the requirement, assess the associated risk and arrange corrective action.

Depending on the circumstances, additional supervision or interim restrictions may be needed.

If records are inconsistent

Investigate the discrepancy and correct the record based on reliable information.

Retain an appropriate audit trail of changes where required.

How to maintain audit readiness throughout the year

Audit preparation becomes much easier when training oversight is part of routine management.

A simple schedule can help.

Frequency	Suggested activity
Weekly	Review urgent overdue requirements and immediate compliance risks
Monthly	Check upcoming renewals, incomplete records and verification requests
Quarterly	Review training requirements, completion trends and development needs
Annually	Review training policies, role requirements and overall management arrangements
When circumstances change	Update requirements following role changes, regulatory updates or new risks

This is an illustrative management routine.

Organisations should adapt it to their size, sector, risks and obligations.

Make responsibilities clear

Employees can maintain records of their own learning.

Managers can review relevant development activity and identify support needs.

HR, L&D or compliance teams can oversee mandatory requirements and verification processes.

The objective is to avoid placing every administrative responsibility on one person.

Use training information to make decisions

A training dashboard should help managers identify where attention is needed.

Useful measures may include:

• Percentage of applicable training requirements completed.
• Number of overdue requirements.
• Requirements approaching renewal.
• External training awaiting verification.
• Completion trends by department.
• Recurring training gaps.

However, a high completion rate is not a substitute for evaluating competence where competence assessment is required.

Why spreadsheets can make training audits harder

Spreadsheets can work well for simple training records.

However, they can become difficult to maintain as organisations grow.

Common challenges include:

• Manual updates.
• Inconsistent data entry.
• Missing supporting evidence.
• Multiple versions of the same file.
• Limited visibility for managers.
• Difficulty distinguishing verified and unverified completion.
• Time-consuming reporting.

For example, a spreadsheet may show that an employee completed training on a particular date.

But the certificate might be stored elsewhere, the renewal date may not have been updated and the completion may never have been verified.

The spreadsheet isn't necessarily incorrect.

It simply may not provide the full information needed.

Organisations should evaluate whether their existing process can reliably support their responsibilities.

How WorkplaceHero supports training oversight

WorkplaceHero's Passport for Teams is designed to help organisations manage workforce training and development more consistently.

Its organisational tools include role-based mandatory training requirements, compliance oversight and processes for verifying external training.

This helps distinguish between learning that an employee has recorded and training that the organisation has confirmed for compliance purposes.

WorkplaceHero also connects individual professional development with relevant organisational processes through its PassportPro and Passport for Teams ecosystem.

The objective is to make workforce development and compliance easier to manage throughout the year rather than only when a review or audit is approaching.

Explore WorkplaceHero's team training and compliance tools

Frequently asked questions

What is a staff training audit?

A staff training audit is a review of an organisation's training requirements, records, management arrangements or related compliance.

Its scope depends on the relevant standards and purpose.

What documents are needed for a training audit?

Documents may include training matrices, completion records, certificates, competency assessments, verification records and relevant policies.

The precise evidence depends on the audit criteria.

How do you calculate training compliance?

One common measure is the percentage of applicable training requirements that have been completed.

However, organisations should also consider overdue high-priority requirements and whether completion has been appropriately verified.

Do all employees need the same mandatory training?

No. Requirements may vary according to role, responsibilities, sector and applicable obligations.

Are training certificates enough for an audit?

Sometimes, but not always.

Where practical competence or independent verification is required, additional evidence may be necessary.

How often should training records be reviewed?

Review frequency should reflect organisational risk and applicable requirements.

Regular monitoring of overdue and upcoming training is generally more useful than relying solely on an annual review.

Can an organisation fail an audit because of missing certificates?

Missing evidence can lead to findings where the relevant criteria require verifiable completion.

The consequences depend on the audit framework and the significance of the gap.

Does CPD count as mandatory training?

Not automatically.

A CPD activity may satisfy a mandatory requirement if it meets the relevant criteria and is appropriately verified.

How long should staff training records be retained?

Retention periods depend on the type of record, applicable legislation, professional standards, contractual obligations and organisational policies.

There is no universal retention period covering every training record.

Final thoughts: audit readiness is a management habit

A staff training audit should not require an organisation to reconstruct months or years of training activity.

When requirements are clear, records are maintained consistently and supporting evidence is accessible, audits become easier to manage.

Start by identifying the training required for each role.

Check completion and renewal status.

Verify supporting evidence.

Review gaps regularly and take appropriate corrective action.

Most importantly, establish clear responsibilities so that training oversight becomes part of normal organisational management.

The goal isn't simply to be ready for an auditor. It's to have reliable information about whether your workforce has the training and capabilities it needs.

Explore WorkplaceHero's training compliance and workforce development tools

Related reading

• Why spreadsheet-based training records fail (and what to use instead)
• How to run a skills audit for your team (with template steps)
• How long should you keep CPD records?
• Surviving your first CPD audit: a step-by-step guide