ISO 9001 Audit Prep: Training Records Checklist

You have an ISO 9001 audit coming up — surveillance or certification — and training records are on your list. The question isn't whether auditors will check them. They will. The question is whether yours will hold up.

Training records are one of the most common sources of nonconformances in ISO 9001 audits, and the issues are almost always the same: missing retraining records when documents changed, no evidence that training was effective, or a skills matrix that doesn't match current roles.

This guide covers exactly what auditors check, how to recognize and avoid common findings, and how to prepare your records in the weeks before an audit.

Need to build your training tracking system from scratch first? See our step-by-step setup guide →

Clause 7.2 lays out four specific requirements. Auditors work from this list, so it's worth knowing exactly what it says:

1. Determine what competence is needed for each role that affects product or service quality
2. Provide training or take other actions to achieve that competence
3. Evaluate the effectiveness of those actions — did the training work?
4. Retain documented information as evidence of competence

The word that matters most is "evidence." Completing a training session isn't enough — you have to prove it happened and prove it worked.

Auditors approach Clause 7.2 systematically. They'll pick a sample of employees — typically 3–5 — and trace their training history end-to-end: which documents their role requires, whether they were trained, on what version, and whether competence was assessed. If the chain breaks anywhere, that's a finding.

Here are the five specific things an auditor will request during a Clause 7.2 review:

1. Your training matrix. This is the first thing they'll ask for. It shows which roles require training on which documents. If you don't have one — or it's badly out of date — the rest of the conversation gets difficult fast. A current, accurate training matrix is the foundation.
2. Individual training records. For each sampled employee: what were they trained on, at what document revision, and when? Records need to be specific — "trained on QP-001" is not the same as "trained on QP-001 Rev C on March 5, 2025."
3. Effectiveness evaluation. A signature says "I attended." A quiz score or supervisor sign-off says "I understood." Auditors distinguish between attendance records and competence evidence. The method doesn't have to be complex — but it has to exist and be documented.
4. Records for new employees. How was onboarding training handled? Can you show when each new hire was trained on required procedures, and that their competence was verified before they worked independently on quality-affecting tasks?
5. Retraining records for document revisions. When a procedure changed, who was retrained and when? This is where most manual systems fail. Auditors will pull a document with recent revision history and ask to see retraining records for every affected employee. If those records don't exist, that's typically a finding against both Clause 7.2 and Clause 7.5.

Most Clause 7.2 findings fall into one of these categories. Knowing them in advance lets you check your own records before the auditor does.

Minor Nonconformities (Isolated Gaps)

Minors mean the system exists but has lapses. You'll typically get a minor for:

• A few employees with missing or incomplete training records
• Records that reference a document name but not the revision number
• Effectiveness evaluation records missing for some (but not all) training events
• Retraining not completed for a recently revised document, but records exist for the previous version
• An employee who changed roles without receiving training for the new role's requirements

Minors require a corrective action and follow-up at the next audit, but don't typically delay certification or surveillance completion.

Major Nonconformities (Systemic Failures)

Majors mean the system has fundamentally broken down. You're at risk of a major when:

• Employees in quality-critical roles have no training records at all
• There is no training matrix — no documented link between roles and required training
• The organization cannot demonstrate that training effectiveness has ever been evaluated
• Records show training on obsolete document versions with no evidence of retraining on current versions

A major nonconformity requires a CAPA with a defined timeline and verification. It can delay certification or suspension of an existing certificate until resolved. If you get a major on training records, expect it to be the first thing auditors dig into at every future audit.

Audit prep for training records isn't something you can do the week before. Here's a realistic timeline:

• 8+ weeks out: Review your training matrix against current roles and document revisions. Identify gaps. Start remediating — assign any missing training now so employees have time to complete it before the audit.
• 4–6 weeks out: Run a sample audit on yourself. Pick 3–5 employees at random and trace their training records the way an auditor would. If you find gaps, you still have time to fix them.
• 2–3 weeks out: Verify retraining records for any documents revised in the past 12 months. This is the most common gap — prioritize it.
• 1 week out: Compile your audit package. Have training matrix, individual records, and effectiveness evidence ready to present. Don't make auditors hunt for documents.

Use this checklist in the final week before your audit. If you can answer "yes" to all of these, your training records will hold up.

• ☐Training matrix is current and includes all controlled documents with current revision numbers
• ☐All roles in the matrix are accurate and reflect current organizational structure
• ☐Every employee has training records for every document their role requires
• ☐Records specify document title AND revision number (not just "current version")
• ☐Effectiveness evidence exists for all training (quiz scores, supervisor sign-offs, or practical assessments)
• ☐Retraining records exist for all documents revised in the past 12–24 months
• ☐New hires from the past year have complete onboarding training records
• ☐Employees who changed roles have received training for their new role's requirements
• ☐Records are organized and can be retrieved quickly (not scattered across folders, binders, and spreadsheets)
• ☐You can generate a complete training history for any employee in under 5 minutes

If you're running a manual system, the checklist above represents hours of work pulling records together. With Training Tiger, most of it is already done:

1. Training matrix is always current — roles, documents, and revision numbers are maintained automatically as documents are updated
2. Records are auto-generated — every completion is timestamped with document version and quiz score. No manual entry.
3. Effectiveness is built in — AI generates comprehension quizzes from document content. Every completion includes a score.
4. Retraining triggers automatically — when a document is revised, every affected employee is automatically reassigned. No manual tracking required.
5. Audit export in seconds — generate a complete training report for any employee, role, or document. Hand it to an auditor on the spot.

The result: audit prep goes from a full day of pulling records together to reviewing a dashboard and confirming everything is green.