Back to InsightsCompetence Management

Does your organisation need a Competence Management System?

Many organisations in regulated industries have some form of training or assessment process in place — but that is not the same as a Competence Management System. This guide sets out the questions you should be asking to find out whether your current approach is sufficient.

Ashley Haslettcompetence management system, CMS, self-assessment, regulatory compliance

This article is available as a downloadable PDF guide.

Download Guide

Most organisations in high-hazard industries would say they take competence seriously. They run induction programmes. They send people on training courses. They keep records. But when regulators or incident investigators look more closely, they often find something quite different from a functioning Competence Management System — and the gap between the two can have serious consequences.

So how do you know whether what you have is genuinely a CMS, or simply a collection of training activities that has never been properly structured or tested?

What a CMS actually requires

A Competence Management System is not a training programme. It is a structured framework that identifies the competence requirements for each role, provides a means of assessing individuals against those requirements, addresses gaps through targeted development, and maintains ongoing assurance that competence is sustained over time.

Each of those elements matters. An organisation that trains people but does not assess them has no way of knowing whether the training has produced competence. An organisation that assesses people but does not maintain records has no way of demonstrating competence to a regulator. An organisation that does all of the above but treats it as a one-time exercise rather than an ongoing process will find that competence drifts as procedures change, equipment is modified, and personnel move on.

The diagnostic questions

The following questions are a useful starting point for any organisation trying to assess the adequacy of its current approach.

Can you identify, for every safety-critical role in your organisation, the specific competences required to perform that role safely? Not just the qualifications or training courses associated with the role, but the actual tasks, the standards to which they must be performed, and the conditions under which they are likely to be carried out — including abnormal and emergency situations?

Do you have a systematic process for assessing individuals against those requirements — one that uses appropriate assessment methods, is carried out by assessors who are themselves competent to assess, and produces records that can be produced to a regulator on request?

When an assessment identifies a gap, do you have a defined process for addressing it — one that goes beyond simply sending the individual on a training course and includes reassessment to confirm that the gap has been closed?

Do you have a process for maintaining competence over time — including periodic reassessment, competence checks following significant absence, and review of competence requirements when procedures or equipment change?

Is your system integrated with your wider management processes — including HR, operations, and safety management — rather than sitting in isolation as a separate administrative function?

What the answers tell you

If you can answer yes to all of those questions, and if you can demonstrate that the processes you have described are actually functioning in practice rather than existing only on paper, you have the foundations of a CMS. If you cannot, you have work to do — and the nature of that work will depend on where the gaps are.

Some organisations have good competence frameworks on paper but poor implementation. Others have reasonable assessment processes but no systematic approach to identifying what competence is required in the first place. Others have both but have allowed their systems to drift out of alignment with operational reality as the business has changed.

The regulatory perspective

Regulators in the UK's major hazard sectors are increasingly sophisticated in their assessment of competence management. They are not looking for a particular system or a particular set of documents — they are looking for evidence that the organisation understands what competence is required, has a systematic means of assuring itself that it is present, and can demonstrate that the system is working in practice.

An organisation that cannot answer the diagnostic questions above with confidence is not well placed to respond to that scrutiny. Download the full guide for a structured self-assessment framework and guidance on the steps to take if your current approach falls short.

Download this guide

Save a copy of this article as a PDF for future reference.

Download Guide

Related articles

Competence Management

Competence — The Golden Thread

Competence is not a box to tick or a record to file — it is the thread that runs through every element of a safe, well-run organisation. This guide explores what it means for competence to be genuinely embedded, and why that matters for regulators, leaders, and the workforce alike.

competencegolden threadsafety assurance
Competence Management

Why is Competence Important?

Competence is not a bureaucratic checkbox — it is the foundation on which safe operations, regulatory compliance, and organisational resilience are built. This guide sets out the business, legal, and human case for taking competence seriously.

competencesafetyregulatory compliance
Competence Management

Competence: Who Needs It?

Competence is a legal and regulatory requirement across every major high-hazard industry — but what does it actually mean, who is responsible for it, and what happens when it breaks down? This guide cuts through the jargon and sets out the foundations every organisation needs to understand.

competenceCMSregulatory compliance