M&M Compliance Training
Certificates prove attendance. Competence needs evidence. Here is what an audit-ready competence management system actually looks like - and the five artefacts yours should be able to produce on demand.
Every estates leader has lived this moment. An auditor - the Authorising Engineer at annual audit, a CQC inspector, or an HSE investagator after an incident - asks a deceptively simple question: "How do you know this person is competent to do this task?" Afolder of training certificates gets produced. And then the follow-up lands: "That tells me they attended a course. How do you know they're competent?"
The distinction matters because it is exactly the distinction the regulatory framework draws. This article sets out what "evidence of competence" means for NHS estates and technical teams, and the practical artefacts a competence management system (CMS) should generate so that the answer to the auditor's question is never a shrug and a certificate folder.
Three separate strands of the compliance framework converge on the same expectation.
Health and safety law. Under the Health and Safety at Work etc. 1974, employers must provide the information, instruction, training and supervision necessary to ensure, so far as is reasonably practicable, the health and safety of employees. The Management of Health of Health and Safety at Work Regulations 1999 go further: Regulation 7 requires every employer to appoint one or more competent persons to assist with health and safety compliance. Notably, HSE guidance does not prescribe a fixed qualification – competence is judged on sufficient training, experience, knowledge and other qualities. That flexibility cuts both ways: it means a certificate alone was never intended to settle the question.
Healthcare engineering guidance. Health Technical Memorandum 00 (Policies and principles of healthcare engineering 2014 edition) is the umbrella document for the HTM suite in England, and it places competence and the formal appointment of key roles at the centre of safe estates governance. The specialist HTMs — HTM 02-01 for medical gas pipeline systems, HTM 03-01 for specialised ventilation, HTM 04-01 for safe water, HTM 06-02 for low voltage electrical systems — each build on that model, with defined roles such as Authorising Engineer (AE), Authorised Person (AP) and Competent Person (CP) appointed in writing on the basis of assessed competence. (In Scotland, the equivalent Scottish Health Technical Memoranda apply — the governance principle is the same.)
The care regulator. For registered providers in England, Regulation 18 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 requires “sufficient numbers of suitably qualified, competent, skilled and experienced” staff, who receive the training, supervision and appraisal necessary to carry out their role. CQC’s assessment approach looks for evidence that connects training to real practice – not just that a course register exists.
"That tells me they attended a course. How do you know they're competent?" - the audit question every estates team should be able to answer in under five minutes.
Competence is the combination of qualifications, training, experience, and demonstrated ability to apply them to a specific task in a specific environment. Evidence of competence therefore has to connect four things: the role (what tasks and systems this person is responsible for), the requirement (what the relevant HTM, legislation or trust policy says that role must be able to do), the assessment (how the organisation satisfied itself the individual can do it), and the currency (when that judgement was last confirmed, and when it expires).
A training certificate covers, at best, a fragment of the second and third items. It says nothing about scope of appointment, local systems familiarity, supervised experience, or whether knowledge has been refreshed since. That is why an AE conducting an annual audit will ask to see appointment records and assessment evidence — and why "we sent them on the course" is one of the most common findings in estates audits.
Individual competence and organisational capability are different questions. An engineer can be personally competent while the organisation still fails the audit — because it cannot show who appointed them, to what scope, on what evidence, or when reassessment is due. A competence management system is how the organisation answers its half of the question.
Strip away the software and the terminology, and an effective CMS is judged on whether it can produce five things on demand.
For HTM-governed disciplines, key roles should be formally appointed in writing — typically on the recommendation of the relevant Authorising Engineer — with the scope of the appointment stated: which systems, which sites, which permitted activities. An appointment letter that just says “Authorised Person” without scope is a finding waiting to happen.
One page per team, showing every safety-critical role against every required competency: the qualification or training required, the assessment required, and each individual’s current status. This is the document that turns an auditor’s afternoon of questions into ten minutes of confirmation.
Evidence that someone assessed the individual against the requirement: knowledge checks, workplace assessments, supervised task sign-offs, AE interviews. Where training is formally credit-rated or certificated, keep the award evidence — but pair it with the local assessment that confirms application in your environment.
Competence decays and appointments lapse. The CMS should hold expiry and review dates for every appointment, qualification and refresher — with enough forward visibility that reappointment happens before expiry, not after an auditor notices.
No organisation is ever at 100%. What auditors want to see is that you know where the gaps are, that interim risk controls are in place (supervision, restricted scope, contractor cover), and that there is a dated plan to close them. A documented gap with a plan is governance; an undocumented gap is a finding.
The recurring failure patterns are remarkably consistent across trusts and healthcare estates providers: appointments that expired quietly and were never renewed; scope creep, where an AP appointed for one system is de facto covering another; single points of failure, where one individual's absence removes the only appointed person for a critical system; contractor competence taken on trust rather than verified; and training records held in three different spreadsheets that disagree with each other. None of these requires negligence — only the absence of a system that surfaces them.
An audit-ready CMS is ultimately a governance loop, not a filing exercise. The elements that make it durable are ownership at board-reportable level (HTM 00's governance model expects competence to be visible to senior management); the AE audit cycle used as an annual external check rather than an annual scramble; training procured against the competency matrix, so courses are chosen because they close a defined gap; and — where it adds value — formally credit-rated training, which gives awards independent standing and makes evidence portable between employers and auditors.
Teams that already have the matrix, the appointment letters and the calendar in place consistently report the same thing: audits get shorter, findings get smaller, and recruitment and succession planning get easier, because the organisation finally knows what competence it holds and what it is missing.
M&M Compliance Training Services helps NHS trusts and healthcare estates providers build competence management systems that stand up to AE audit and CQC inspection - from competency frameworks and appointment processes to the credit-rated training that close the gaps
Explore our trainingWe’re here to support you. Just fill out the form and one of our team members will be in touch shortly to discuss your requirements.