Environmental, Health and Safety News, Resources & Best Practices

Competency Management Software: How EHS Teams Prove Workers Can Do the Job

Written by Christopher Collier | October 26, 2026 at 9:31 PM

Competency management software defines the skills each role requires, records how and when each worker demonstrated those skills to a qualified assessor, and shows who is due for reassessment. Safety training software tracks whether someone finished a course. Competency management tracks whether they can do the work.Consider a new warehouse hire who finishes an online forklift course on Monday. Your training system marks the requirement complete. Under OSHA's powered industrial truck standard, 29 CFR 1910.178, that employee still may not operate a truck except as a trainee under direct supervision, because the training the standard requires includes an evaluation of the operator's performance in the workplace. The course record is real. It does not answer the question an inspector asks next: who evaluated this operator, and when?

Competency management is getting a lot of attention in EHS software, and new modules are launching with promises of a complete view of workforce readiness. Read those promises against the evidence behind them. Software can document requirements, completions, assessments and the moments a qualification stops counting. Deciding what competent means for a task, and judging whether a person meets that standard, stays with you as the employer and the qualified people you designate.

What Is the Difference Between Training and Competency?

Training is the instruction you deliver: a course, a toolbox talk, a video, a written procedure. Competency is the demonstrated ability to perform a specific task safely, verified by someone qualified to judge it. Training is an input. Competency is an outcome you hold evidence for.

The two records answer different audit questions. A sign-in sheet or course completion shows that information was presented. It does not show that a maintenance technician can isolate every energy source on a press, or that an operator can read a truck's capacity plate and keep a load stable on a ramp. Several OSHA standards ask for that second kind of evidence, and they say so in the regulatory text.

  Training Record Competency Record
What it shows Instruction was delivered and completed The worker performed the task to a defined standard
Typical evidence Course completion, test score, attendance Observed assessment against listed tasks, with the assessor's name and date
What triggers a redo A calendar interval or new course content An interval, a failed assessment, an incident, new equipment or a changed procedure


Where OSHA Standards Require More Than a Completion Record

OSHA does not have one standard that requires a competency assessment for every job. Individual standards set their own training content, verification steps and retraining triggers. OSHA's publication Training Requirements in OSHA Standards (OSHA 2254) compiles these provisions by standard and is the right starting point for your requirement list. It was last revised in 2015, so confirm each entry against the current standard on eCFR. Four standards show how differently the obligations are written.

Powered Industrial Trucks (29 CFR 1910.178)

The forklift standard is explicit. The employer must ensure each operator is competent to operate a truck safely, as demonstrated by successful completion of the required training and evaluation. That training combines formal instruction, practical training and an evaluation of the operator's performance in the workplace, and the people who train and evaluate must have the knowledge, training and experience to do so.

  • Evaluation interval: Each operator's performance must be evaluated at least once every three years.
  • Refresher training triggers: Refresher training in relevant topics is required when the operator is observed operating unsafely, is involved in an accident or near-miss incident, receives an evaluation showing unsafe operation, is assigned to a different type of truck, or when a workplace condition changes in a way that could affect safe operation. Refresher training includes an evaluation of its effectiveness.
  • Certification: The employer certifies that each operator has been trained and evaluated. The certification includes the operator's name, the training date, the evaluation date and the identity of the person or people who performed the training or evaluation.

A common misreading treats the three-year interval as a retraining cycle. The standard applies the three-year interval to performance evaluation. Refresher training follows the five triggers above, so an operator involved in a near-miss in month four needs refresher training then, not at the three-year mark.

Lockout/Tagout (29 CFR 1910.147)

OSHA's Control of Hazardous Energy standard requires training that ensures employees understand the purpose and function of the energy control program and acquire the knowledge and skills for the safe application, usage and removal of energy controls. The content differs by role:

  • Authorized employees (those who lock or tag out equipment to service it) are trained to recognize applicable hazardous energy sources, the type and magnitude of energy in the workplace, and the methods and means for energy isolation and control.
  • Affected employees (those who operate or work near the equipment) are instructed in the purpose and use of the energy control procedure.
  • All other employees whose work operations are or may be in an area where energy control procedures are used are instructed about the procedure and the prohibition on restarting or reenergizing locked or tagged equipment.
  • Where tagout is used, training also covers the limitations of tags, such as the fact that a tag is a warning device and does not physically restrain the energy isolating device the way a lock does.

Retraining is event-triggered. Authorized and affected employees must be retrained when their job assignments change, when machines, equipment or processes change in a way that presents a new hazard, or when the energy control procedures change. Additional retraining is required when a periodic inspection reveals, or you have reason to believe, that there are deviations from or inadequacies in an employee's knowledge or use of the procedures. The standard states that retraining must reestablish employee proficiency.

The periodic inspection of each energy control procedure, required at least annually and performed by an authorized employee other than the ones using the procedure being inspected, works as a built-in competency check. Training certification must contain each employee's name and dates of training.

Process Safety Management (29 CFR 1910.119)

The Process Safety Management (PSM) standard applies only to covered processes: those involving a highly hazardous chemical listed in Appendix A at or above its threshold quantity, or 10,000 pounds or more of a Category 1 flammable gas or a flammable liquid with a flashpoint below 100°F on site in one location, with exceptions the standard lists, such as retail facilities. For employees operating a covered process, initial training covers an overview of the process and its operating procedures. Refresher training is required at least every three years, and more often if necessary, at a frequency you set in consultation with the employees who operate the process.

The documentation requirement is where PSM becomes a competency standard. You must ascertain that each employee involved in operating a process has received and understood the training, and the training record must contain the employee's identity, the date of training and the means used to verify that the employee understood the training. A completion date alone does not satisfy that last element. Under the management of change element, employees whose job tasks are affected by a process change must also be informed of and trained in the change before start-up.

The Construction "Competent Person" (29 CFR 1926.32)

Many of OSHA's construction standards assign duties to a competent person, defined in 29 CFR 1926.32(f) as one who is capable of identifying existing and predictable hazards in the surroundings or working conditions and who has authorization to take prompt corrective measures to eliminate them. The definition has two parts: capability and authority. A course certificate can support the first part. The second depends on the authority you give that person on the job.

A qualified person, defined in 1926.32(m), is someone who has successfully demonstrated the ability to solve or resolve problems relating to the subject matter, the work or the project, either through a recognized degree, certificate or professional standing, or through extensive knowledge, training and experience. Both definitions describe what a person can do, not which courses they completed.

What ISO 45001 Expects

ISO 45001, the international standard for occupational health and safety management systems, is voluntary unless a customer contract or your own certification goal makes it binding. Its competence clause (7.2) expects an organization to determine the competence workers need, including the ability to identify hazards; ensure workers are competent on the basis of appropriate education, training or experience; take action to acquire and maintain that competence where needed; evaluate whether those actions worked; and keep documented information as evidence. Evaluating effectiveness is the step a training-only program has no record for.

What Software Can Document and What Only the Employer Can Establish

The standards above put the judgment on the employer: you decide who is competent, you designate the evaluator, and you certify the result. That gives a defensible competency program three layers.

  1. The system holds the record. Who holds which requirement, what type it is, when it is due, when it was completed, who assessed it, and what has been invalidated or is outstanding.
  2. The employer defines competency. What "qualified to operate" means for a role (the criteria, the field validation and the sign-off) is a management decision, written into policy and validated at the work face by a qualified person.
  3. The two meet in the audit. When an inspector or your own leadership asks whether this person was qualified to do this task on this date, a good system returns a precise answer: the requirement, the completion or invalidation history, and the assessment evidence you defined.

What to Look for in Competency Management Software

Whether a vendor calls it competency management software, skills management or safety training software with assessment features, three questions separate a system that produces evidence an auditor will accept from one that produces a dashboard.

Does the Promise Fit the Evidence?

Ask what data a vendor's readiness view is built from. If the answer is course completions, the promise is bigger than the data. Look for:

  • Separate records for knowledge and demonstrated skill. A course completion and an observed assessment are different evidence. The system should store both and show which training a person needs before they are assessed.
  • Defined assessment criteria. Each skill should list the tasks an assessor observes and the reference documents they assess against, so two assessors at two sites judge the same thing.
  • Assessor identity and dates on every record. The forklift certification has to identify who performed the training or evaluation. Your system should capture who assessed, when, and the result.

Does the System Handle the Ugly Moments?

Readiness is tested by incidents, lapses and revoked qualifications, not by the happy path. Look for:

  • Calendar intervals and event triggers handled separately. Expiration periods cover requirements like the forklift evaluation interval. Event triggers, such as an incident or a failed assessment, need a way to move a person out of qualified status right away.
  • An audit trail when a qualification stops counting. When retraining is required, the earlier completion should stop counting toward status while staying in the person's history, and a report should show when it was invalidated.
  • A link to incidents and corrective actions. When an investigation finds a knowledge or skill gap, the remedial training should trace back to the corrective action that required it.

Does It Keep the Employer in Charge?

The system should document what happened and leave the judgment about what competence means, and who verifies it, with you. Look for:

  • A role-based requirement matrix you configure. Requirements attach to positions, sites and groups you define, so a new hire or transfer picks up the right requirements without someone rebuilding a spreadsheet.
  • Forecasting and roll-ups. Supervisors need to see who expires in the next 30, 60 or 90 days and where each site, position and requirement stands today.
  • Field-ready assessment. Assessments happen at the truck, the press and the panel. Mobile capture and a quick way to verify a worker's status at the point of work matter as much as the admin console.

How EHS Insight Supports Competency Management

EHS Insight splits this work across two connected modules. The Training Management module manages training requirements, delivery and records. The Skills Management module, which requires Training Management to be enabled, documents on-the-job proficiency through structured skill assessments.

Training Requirements and Remedial Training

  • Build a training matrix. Training Requirements can be classified by type (for example, course, certification, license or online), designated mandatory or recommended, and assigned to audiences with due dates and recurring schedules.
  • Match the schedule to the requirement. Schedule types include completion-based expiration, which renews licenses and certifications on each person's own timeline, and recurring due dates that align everyone to a shared calendar.
  • Document supervised testing. Training Test Sessions record scheduled assessments for multiple employees taken together under supervision.
  • Assign remedial training without disrupting the schedule. One-Off Training Assignments require training outside the regular cadence after an incident or unsafe observation, and you can create them from a CAPA form or worksheet so the training links back to the corrective action. When the related site setting is enabled, a one-off assignment can invalidate prior completions. The person's status on the original requirement changes to Invalidated on reports and their My Training dashboard, the earlier completion stays in their history without counting toward status, and the status returns to Current only when they complete the retraining. The One-Off Training Invalidation Log report lists each invalidation with its invalidation date and the completion date it invalidated.
  • Capture attendance at the session. A QR Code Session on the Training Record form lets attendees add and complete their own attendance by scanning a QR code or following a shared link.
  • See expirations coming. The Training Expiration Forecast report lists requirements that are expired or will expire in the next 30, 60 or 90 days, and expiry emails can go to individuals and supervisors when enabled.

Skill Requirements and Assessments

  • Define what competent means for each role. Skill Requirements are assigned by Business Entity, Position, Position Family or Training Group to form a Skill Matrix. Each one can include assessment tasks, prerequisites (training or skill requirements the person should complete first) and assessment guidelines from attachments or the Document Library.
  • Record the assessment. The Skill Assessment form documents an employee's proficiency for a specific requirement, with an Assessor field and a record date. Employees request assessments from the My Skills Dashboard.
  • Keep status honest. Skill Requirements can expire after a set period, and grace periods can set the first due date for new hires and position changes. With the Failed Assessments Apply Immediately setting enabled, a failed assessment invalidates previously passed assessments even if they have not expired.
  • Report readiness. Reports show skill status (such as Current, Missing and Expired) by Business Entity, Person, Position and Requirement, and the Skill Supervisory Forecast projects status 30, 60 and 90 days ahead.
  • Assess in the field. Skills can be requested and assessed on a mobile device that syncs when a connection is available, and a user's skill records can be checked by scanning their QR code.

One configuration detail to plan for: prerequisites display to the employee and the assessor on the assessment form, but depending on your configuration they may not block an assessment automatically. Decide whether your process relies on the assessor to confirm prerequisites before signing off.

Example: Setting Up a Forklift Operator Requirement

Here is how the pieces fit for the forklift scenario at the start of this article. Assign the formal instruction as a Training Requirement to the PIT Operator position. Create a Skill Requirement for the same position with assessment tasks such as pre-operation inspection, truck operation and motorized pallet truck use, list the training as a prerequisite, and set the requirement to expire after three years so the evaluation interval appears in forecasts. If an operator is involved in a near-miss or a property-damage incident and the investigation calls for retraining, assign the refresher as a one-off from the corrective action with invalidation turned on. The operator's earlier completion stops counting, their status shows Invalidated until the refresher is done, and you record a new assessment before they return to the truck. The content of the evaluation and your certification remain your responsibility. The system keeps the records, assessors and dates in one place so you can produce them on request.

How to Start a Competency Program

  1. List the tasks where a standard asks for evaluation or verification. Use OSHA 2254 and the standards that apply to your operations. Start with powered industrial trucks, lockout/tagout and PSM where they apply, then add tasks your incident history points to.
  2. Write observable criteria for each task. "Understands lockout" is not assessable. "Identifies every energy source on Press 4 and verifies isolation before starting work" is.
  3. Qualify and name your assessors. The forklift standard requires trainers and evaluators with the knowledge, training and experience to evaluate competence. Many companies apply the same bar to every assessor as a matter of practice.
  4. Set intervals and triggers separately. Put fixed intervals on an expiration schedule, and write down the events that force reassessment for each task.
  5. Close the loop from incidents. When an investigation points to a skill gap, assign remedial training and a new assessment from the corrective action, and confirm the person is qualified again before they return to the task.

Frequently Asked Questions

What Is Competency Management Software?

Competency management software defines the skills each role requires, records each worker's demonstrated proficiency against those requirements, including who assessed them and when, and tracks expirations and reassessments. A learning management system focuses on delivering and tracking courses; competency management adds the evidence that a person can perform the task.

Is Safety Training Software the Same as Competency Management Software?

No. Safety training software assigns, delivers and tracks training completion. Competency management adds observed skill assessments, assessor records and a status that changes when a person fails an assessment or needs retraining after an incident. Some EHS platforms provide both in connected modules.

Does OSHA Require Competency Assessments?

Not for every job. OSHA has no single standard that requires competency assessment across the board, but specific standards do. The powered industrial truck standard (29 CFR 1910.178) requires a workplace performance evaluation before an operator works without supervision and at least once every three years. The PSM standard (29 CFR 1910.119) requires the training record for covered processes to show the means used to verify each employee understood the training. The lockout/tagout standard (29 CFR 1910.147) requires retraining that reestablishes proficiency when an inspection or other information reveals gaps.

How Often Do Forklift Operators Need to Be Evaluated?

At least once every three years under 29 CFR 1910.178(l)(4)(iii). Refresher training, which includes an evaluation of its effectiveness, is required sooner if the operator is observed operating unsafely, is involved in an accident or near-miss, receives an evaluation showing unsafe operation, is assigned to a different type of truck, or a workplace condition changes in a way that could affect safe operation.

What Is an OSHA Competent Person?

Under 29 CFR 1926.32(f), a competent person is capable of identifying existing and predictable hazards in the surroundings or working conditions and has authorization to take prompt corrective measures to eliminate them. The term comes from OSHA's construction standards, and the definition requires both the capability and the authority.

Is a Training Certificate Proof of Competency?

Not by itself where a standard requires evaluation or verification. A certificate shows a course was completed. For forklifts, OSHA requires an evaluation of the operator's performance in the workplace and an employer certification that identifies who performed the training or evaluation, and a course certificate does not replace either one.

See Training and Skills Management Together

Explore the Training Management module to see how training requirements, records and remedial assignments come together, and the Skills Management module for structured on-the-job assessments that show who is qualified for each task.