Audit · 3 min read
During an inspection it isn’t enough to say training has taken place: you have to prove it. A practical guide to the evidence you should keep and the mistakes that make it hard to find.
Auditors, certification bodies, regulators and key customers are increasingly asking to verify staff training. The question isn’t whether the company has run courses, but whether the right people received the right training at the right time, and whether they understood it.
Answering with a sign-in sheet and a slide deck is no longer enough. What’s needed is a consistent, interlinked set of evidence that is easy to extract.
The first piece of evidence is the content. You need to be able to show what was taught, in the version in force at the time of training. If a course is updated, the previous version must be kept, along with a record of who completed it.
The second is participation: who took the course, when and for how long. The third is the assessment result, which demonstrates understanding rather than mere attendance. The fourth is the link to the requirement: why that person had to take that course, based on their role or a specific policy. Without this link, even a complete register is hard for an auditor to make sense of.
There is often a fifth, less obvious piece of evidence: how open cases are handled. Who failed to complete the course by the deadline, which reminders they received, what action was taken. An auditor will think more highly of a delay handled transparently than of a register that looks flawless.
The evidence that counts
The first mistake is fragmentation. Certificates saved in personal folders, quiz results exported to different spreadsheets, content on one platform and signatures on another. Every piece exists, but putting them together takes days.
The second is the lack of versioning. The current course is kept but not the one taken a year earlier, making it impossible to prove that someone knew the rule in force at that time. The third is confusing attendance with understanding: a session everyone attended but with no assessment leaves the most important question unanswered.
A fourth mistake concerns external courses. Certificates issued by training providers arrive in different formats, sometimes only on paper, and end up in separate archives. If they aren’t recorded with the same care as internal courses, they become the weak link in the whole system.
Scattered evidence
Single register
The simplest way to prepare for an audit is to picture the questions you will be asked. Who in the finance department has been trained on the latest version of the anti-money laundering policy? Which safety certificates expire in the next three months? What content was presented to last year’s new hires?
If your records let you answer these questions with a search rather than an investigation, they are well organized. Retention also needs to be defined: training evidence contains personal data and must be handled in line with GDPR, with retention periods that match your obligations and access limited to those who need it.
Your records are well organized if they answer an audit with a search, not an investigation.
The most robust solution is to make sure evidence requires no extra work. In Learning, every course keeps its own versions, every completion records the date, duration and quiz result, and every assignment is linked to the role or policy that triggered it.
When courses are built from the policies managed in Regulate, the link between requirement, content and participation is already in place. When the inspection comes, you export the list required, by department, course or person, and the evidence sits alongside your other compliance controls.
Keep reading
Every company has already written most of its training material, but it sits locked away in manuals and procedures. Here is a practical method for turning those documents into learning paths people actually complete.
Compliance training is often seen as a box to check. Short lessons, built around real cases and spread out over time, change both the experience and the outcome.
Innovaq is a company in its launch phase.