Guide
How to Prepare Training Records for an Audit
By Keelstar Team · Updated June 1, 2026
The short answer
Before the audit, reconcile your requirements matrix to actual records, close gaps or document remediation plans, and test export of a sample employee's full history including expiration dates and evidence files. Auditors sample people and dates — you must prove credentials were valid on those dates, not just today.
Know the audit scope
Identify which standards apply — state OSHA, HIPAA, Joint Commission, PCI, company SOC 2. Each maps to specific training types and frequencies. Your requirements matrix should mirror the audit checklist language so you do not debate whether a course counts.
Pre-audit reconciliation
Run a deficiency report: required training minus completed training, by person and role. Fix high-risk gaps first — clinical licenses, safety-critical certs. For remaining gaps, document approved remediation with dates. Auditors respect honest corrective action plans.
Assemble the evidence packet
For each sampled employee, be ready to produce: job description or role code, list of required training, completion records with dates, expiration status on the sample date, and certificate PDFs or LMS transcripts. Include policy version if training was tied to a policy acknowledgment.
Point-in-time proof
The hardest question: was this person credentialed on March 15? You need historical expiration data and archived certificates — not a note that they renewed in April. Systems that only store current status fail here.
Dry-run the export
Time how long it takes to produce five complete employee files. If IT must manually gather from three systems, fix integration before auditors arrive. A clean export builds credibility; scrambling destroys it.
Frequently asked questions
- How many records will auditors sample?
- It varies by framework — OSHA, Joint Commission, CMS, SOC 2 each have different methods. Prepare as if they will pull random employees across roles and dates.
- What if we find gaps right before the audit?
- Remediate immediately where possible, document corrective action for the rest, and never backdate records. Falsified completion is worse than a documented gap.
Related guides
Put this into a monitored workflow
Training Record Tracker handles this continuously — with reminders and an audit trail.