Certifications and mandatory training: keep the register without spreadsheets, and face the audit calmly

The register the auditor asks for first

In construction, industry, transport, energy or maintenance, an expired certification stops a worksite or halts a production line. The register of certifications and mandatory training is therefore the most sensitive document in the training department. And in almost every organisation we work with, it lives in a spreadsheet, next to the LMS.

That spreadsheet holds what the tool cannot store: refresher dates, medical fitness, driving authorisations, the supporting documents still missing before the audit, room slots and provider contacts. It is the real management system for regulatory training, except that it is neither shared, nor traceable, nor reliable.

What happens when it breaks

The situations we see most often

Situation	Cause	Consequence
An operator on site with an expired certification	Refresher date tracked in an unshared file	Work stopped, employer liability engaged
Audit or inspection: evidence cannot be found	Certificates scattered across emails, folders and providers	Non-compliance, time lost reconstructing
Session booked, half the trainees already up to date	No view by expiry or by site	Training budget wasted
A training manager leaves	The file and its rules live in their head	Weeks to recover the logic
The training fund claim does not add up	Committed amounts tracked apart from sessions	Funding lost, documents rejected

What a good register contains

No need for a complicated model. A register fits in five columns, provided they are all filled in and kept in one place.

Who: the employee, their position, their site, their manager.
What: the certification or training, with its regulatory reference and validity period.
When: date obtained, expiry date, planned refresher date.
With what evidence: the certificate, attestation or medical opinion, attached and dated.
For which position: the matrix that says which certifications each job and each site requires, without which you cannot tell who is missing what.

The last column turns a list into steering: once the position-certification matrix is written, the gap between required and held calculates itself.

Leaving the spreadsheet in four steps

Write the matrix. By job and by site, the required certifications, their validity period and the notice period for refreshers. Half a day with the health and safety lead and the site managers.
Migrate what exists. The current spreadsheet is imported, cleaned, and every line gets its evidence. The gaps appear immediately: often the most useful moment of the project.
Link to the LMS. The catalogue and completions stay in Cornerstone; the register reads sessions attended and sends back expiries. A completed refresher updates the certification without re-keying.
Automate alerts. At 90, 60 and 30 days, the manager and the training team receive the list of expiries by site, and sessions are scheduled in batches rather than case by case.

Audit day

An auditor asks for three things: the list of exposed people, proof that they are certified, and proof that you track expiries. With a maintained register, the answer is an export by site, dated, with certificates attached. Without one, it is a week of reconstruction, and gaps discovered too late.

That is precisely the need that gave birth to JOY Talents Training Sessions: a Cornerstone add-on that carries certifications, medical checks, sessions, providers and training fund files, synchronised with the LMS. When the need is more specific, a custom register is built on the same principle, as we explain in this article.

Pitfalls to avoid

Tracking training without the matrix. Knowing who attended what does not tell you who is missing what.
Storing evidence away from the line. A certificate in a shared folder ends up untraceable.
Forgetting medical fitness. A certification without a valid medical check is worth nothing in the field.
Chasing too late. A refresher is booked weeks ahead; a 30-day alert is not enough on its own.

What you gain

Frequently asked questions

Can't the LMS manage certifications on its own?

It manages the catalogue, enrolments and completions. It rarely carries the position-certification matrix, medical fitness, external evidence and session logistics. That is the gap the register fills, by reading the LMS rather than replacing it.

Where do we start if our spreadsheet has ten tabs?

With the position-certification matrix, on one page. It says what is required; the rest of the spreadsheet says what is held. Migration then goes line by line, and the gaps appear.

How do we handle temporary staff and subcontractors?

Like employees, with an attachment column: the certification is checked on arrival on site, the evidence is attached, the expiry is tracked for as long as the person works there.

How long does it take to set up a register?

A few weeks: half a day for the matrix, the time to migrate what exists and connect the LMS, then acceptance testing on a pilot site before rolling out.

Where to start

Open your spreadsheet and ask three questions: who is exposed, who is up to date, who expires within 60 days. If any of the three answers takes more than two minutes, the register is in the wrong place. For an outside view on your matrix or on the tool that follows, let's talk.