ISO 9001 Training Records for UK Manufacturers: What Auditors Expect

For UK manufacturers working toward or maintaining BS EN ISO 9001:2015 certification, training records sit at the centre of the competence requirements. Clause 7.2 and Clause 7.5 together create the obligation: define what competence each role needs, make sure people have it, and keep the evidence. In practice, training records are one of the most audited areas — and one of the most common sources of findings.

This guide covers exactly what records UK manufacturers need to keep, what UKAS-accredited auditors look for during surveillance and recertification visits, and the most common gaps that result in nonconformances.

What BS EN ISO 9001:2015 Actually Requires

The BS EN ISO 9001:2015 standard — the UK-adopted designation of the international standard — sets out two interlocking requirements for training records:

The key phrase in 7.2 is documented information as evidence of competence. Not evidence of attendance. Not evidence of a training session taking place. Evidence that the person is actually competent to do the work. That distinction matters to auditors.

The Four Things Every Training Record Must Show

ISO 9001 does not prescribe a specific format for training records — paper, spreadsheet, and software are all acceptable. But whatever format you use, each record should capture four things:

• What: The specific document, procedure, or work instruction the training covered, including the revision level. Training someone on Revision B of a procedure when the current version is Revision D is a compliance gap — and auditors will check this.
• Who: The employee's name and role. For larger sites, a unique employee identifier helps trace records quickly during an audit.
• When: The date training was completed. This establishes currency — records need to be current, not from two certification cycles ago.
• Did it work: Evidence of competence verification. A quiz score, a supervisor sign-off, a practical assessment result, or a pass/fail outcome. Read-and-sign records alone satisfy awareness (Clause 7.3) but are often insufficient to demonstrate competence under 7.2 for technical roles.

What UKAS-Accredited Auditors Check

In the UK, ISO 9001 certification bodies — BSI, Lloyd's Register, SGS, Bureau Veritas, Intertek, and others — are accredited by UKAS (United Kingdom Accreditation Service). While each certification body has its own audit style, the competence sampling process follows a consistent pattern.

During a stage 2 audit or a surveillance visit, expect the auditor to:

1. Ask to see your training matrix. This is the document — whether a spreadsheet, a software report, or a formal procedure — that maps roles to required training. Auditors use this to understand what your organisation believes each person needs to be competent. If you do not have one, this is often an immediate finding.
2. Select two or three employees at random. They may choose people from the shop floor, the inspection area, or quality-adjacent roles. They want a cross-section, not just the quality manager's records.
3. Trace training records against requirements. For each selected employee, the auditor checks the training matrix to see what training is required for their role, then asks for the training records to confirm completion. Gaps are noted immediately.
4. Check document version alignment. Training records that reference an old revision of a procedure — because the procedure was updated but retraining was not triggered — are one of the most common findings in UK manufacturing audits.
5. Ask how competence was verified. If your records show attendance but no assessment, the auditor may probe further. "How do you know this person understood the procedure?" is a question you should be ready to answer with evidence.

Common UK Audit Findings for Training Records

Based on recurring patterns in ISO 9001 audit reports, these are the findings that UK manufacturers most frequently receive:

• Missing retraining records after document revisions. A work instruction is updated — perhaps to reflect a new machine or process change — but training records still show the old revision. Nobody was formally retrained on the change. This is the single most common training-related finding in manufacturing environments.
• Incomplete records for new starters. An employee who joined three months ago has no documented training records, or only informal notes. New starters are a common sampling target because their records are most likely to be incomplete.
• No training matrix or competence framework. Training is happening, but there is no document that defines what training is required for each role. Auditors cannot verify completeness without it — and neither can your quality team.
• No evidence of effectiveness evaluation. Records confirm people attended training but contain no assessment. For technical procedures, particularly those affecting product quality or safety, read-and-sign alone may not satisfy the "evaluate effectiveness" requirement of Clause 7.2(c).
• Records not retrievable during the audit. Training records exist somewhere — in a filing cabinet, on a network drive, in an email thread — but cannot be produced quickly when the auditor asks. Retrievability is not just a convenience; it is part of the requirement under Clause 7.5.3.

Retraining When Documents Change

For UK manufacturers with active document control processes, the biggest ongoing training records challenge is keeping pace with document revisions. When a controlled procedure, work instruction, or policy is updated, the training obligation does not reset — it adds a new requirement: everyone who works to that document needs to be retrained on the changes, and that retraining needs to be recorded.

In practice, many organisations manage this manually. Someone updates a procedure, sends an email notifying affected employees, collects signatures, and files them. This works until it does not — a busy period, a staff change, or a procedure update that gets lost in inboxes. The audit finding follows.

The more reliable approach is to link training assignments directly to document versions. When a document is revised, affected employees are automatically flagged for retraining, and the training record is not marked complete until the new version is confirmed. This is what automatic retraining looks like in practice.

The Training Matrix: Showing the Full Picture

A training matrix — sometimes called a skills matrix — is the document auditors use as a starting point for evaluating your competence system. It shows, for each role or individual, which documents or procedures they are required to be trained on and their current status.

A useful training matrix for a UK manufacturer includes:

• Employee names (or roles) as rows
• Required documents or training topics as columns
• Completion status per cell — including the document revision trained on
• Due dates for retraining where documents have been recently updated
• An overall compliance percentage per employee and per department

If your matrix is a spreadsheet, maintaining it as documents change is a significant manual overhead. If it is generated automatically from your training management system, the audit conversation becomes straightforward: you open the screen, the auditor sees current status across all employees, and sampling can happen in minutes rather than hours.

How Long to Keep Training Records

ISO 9001 does not specify a retention period for training records — that is left to the organisation to define as part of its documented information controls. In practice, most UK manufacturers retain training records for a minimum of three years, covering the current three-year certification cycle. This ensures records are available for every surveillance visit and recertification audit.

For roles in regulated sectors — aerospace (AS9100), medical devices (ISO 13485), or food safety (BRCGS, FSSC 22000) — your sector-specific standard may impose longer retention requirements. Check those requirements alongside ISO 9001 when defining your retention policy.

Making Training Records Audit-Ready

Whether you use paper, spreadsheets, or software, the goal is the same: when an auditor asks for training evidence, you can produce it in minutes, not hours, and it demonstrates competence rather than just attendance.

A practical checklist for UK manufacturers:

1. Define required training for each role in a training matrix or equivalent document
2. Ensure training records capture the document title, revision level, date, and competence verification method
3. Set up a process to trigger retraining when controlled documents are revised
4. Verify that new starters are onboarded with full training records before working unsupervised
5. Define and document your training record retention period
6. Test retrievability: can you pull up any employee's full training history within two minutes?

How Training Tiger Supports UK ISO 9001 Compliance

Training Tiger was built around the requirements of Clause 7.2. When a controlled document is uploaded and assigned to employees by role, the platform handles delivery, generates comprehension quizzes using AI, records completion with timestamps and version tracking, and automatically flags retraining when documents are revised.

The training matrix view shows real-time compliance status across your entire team — completed, pending, overdue, and awaiting certification — so you are not assembling a picture from spreadsheets the week before an audit. Every training record an auditor might request is immediately retrievable, tied to the correct document version, and includes quiz results as competence evidence.

For more on how this fits into your wider ISO 9001 strategy, see our guide to Clause 7.2 competence requirements and our overview of tracking employee training for ISO 9001.