Nicky Cheetham-Whitfield LLB (Hons)
Founder of accuSafe & The Compliance & Leadership Collective | Board-Level Health, Safety & Governance Advisor | Strengthening Risk Oversight & Operational Assurance
May 26, 2026
Why Regulators Are Looking Beyond Certificates and Into Leadership Assurance
There’s a dangerous phrase I still hear in organisations of every size:
“We’ve done the training.”
As though attendance alone equals competence. As though a certificate equals control. As though learning automatically becomes safe behaviour.
It doesn’t.
And regulators know it.
Across almost every serious incident investigation, enforcement notice and prosecution review, one issue repeatedly appears beneath the surface:
The organisation confused training delivery with competence assurance.
Those are not the same thing.
In fact, some of the most exposed organisations are the ones with folders full of certificates but very little evidence that people can actually apply knowledge safely, consistently and under pressure.
That distinction matters more than ever.
Because regulators are increasingly asking a deeper question:
“How did leadership assure themselves this person was competent?”
That changes everything.
The Shift Happening Behind the Scenes
Historically, many businesses approached training as an administrative exercise.
Book the course. Get the sign-in sheet. File the certificates. Move on.
But enforcement trends are shifting.
The HSE, insurers, investigators and lawyers are now looking far more closely at:
- How competence is assessed
- How capability is maintained
- How supervision is structured
- How organisations monitor drift over time
- Whether leaders knew where weaknesses existed
- Whether training was actually effective operationally
In simple terms:
Paper compliance is no longer enough.
The Management of Health and Safety at Work Regulations 1999 have always required employers to ensure employees are competent.
Not trained. Competent.
There’s a major difference.
Competence is usually a combination of:
- Knowledge
- Skills
- Experience
- Behaviour
- Supervision
- Decision-making ability
- Understanding of limits
- Ability to apply learning in practice
A person can pass a course and still be unsafe.
A manager can attend leadership training and still fail to challenge poor standards.
A business can invest heavily in learning and still have weak governance.
That’s the uncomfortable truth many organisations are now facing.
The Problem Isn’t Malice. It’s Operational Drift.
Most leaders are not intentionally negligent.
They’re stretched.
Growing businesses move quickly. Managers inherit responsibilities. Operational pressure builds. Processes evolve informally. People become “experienced” by default rather than design.
Then suddenly something happens.
A serious injury. A safeguarding concern. A contractor incident. A stress-related absence. A near miss that should never have occurred.
And the investigation begins.
This is where the pressure changes.
Because investigators rarely stop at the frontline individual.
They move upwards.
Who authorised this? Who supervised it? What training was provided? How was competence assessed? How often was it reviewed? What assurance did leadership have?
That last question catches many organisations off guard.
Because there is often no actual competence framework.
Only fragmented training records.
What Regulators and Investigators Often Find
In practice, there are recurring weaknesses that appear repeatedly across inspections and investigations.
Training matrices with no defined competency standards.
Managers promoted into leadership roles with little understanding of governance or legal accountability.
Risk assessments copied year after year without evidence of a thorough review or that people understand them.
Contractors treated as “competent” because they hold qualifications.
No refresher process linked to operational risk.
No practical observations.
No structured supervision.
No escalation route where someone is technically qualified but behaviourally unsafe.
No mechanism to identify skill fade.
And perhaps most critically:
No evidence that senior leaders had meaningful oversight.
That becomes a governance issue, not just an operational one.
A Real-World Leadership Scenario
Imagine this.
A growing organisation appoints a long-standing employee into an operational management role.
They know the business well. They’re reliable. Technically experienced. Trusted by the team.
So naturally, more responsibility follows.
Health & safety oversight. People management. Contractor coordination. Investigations. Risk ownership.
But nobody formally assesses whether they are actually competent to lead in those areas.
No leadership development. No governance training. No structured mentoring. No defined boundaries of responsibility.
Over time, shortcuts emerge operationally.
Nothing catastrophic initially. Just small compromises.
Near misses go unreported. Training becomes inconsistent. Contractors sign RAMS nobody reviews or challenges properly. Concerns are handled informally. Incidents are “dealt with internally.”
Then eventually, something serious happens.
At that point, investigators do not simply ask whether the manager attended training.
They ask:
Why did the organisation believe this individual was competent to discharge these responsibilities?
That is a completely different level of scrutiny.
Competence Is a Leadership System
The strongest organisations understand something important:
Competence is not owned solely by HR or Health & Safety.
It is a leadership assurance system.
A proper competence framework should define:
- What good actually looks like
- What specific roles require
- What knowledge is mandatory
- What behaviours are expected
- What supervision is necessary
- What authority limits exist
- How capability is assessed
- How refresher needs are identified
- How concerns are escalated
- How leadership receives assurance
Critically, it should also distinguish between:
Being qualified. Being experienced. Being genuinely competent.
Those are not interchangeable.
The HR and Employment Law Angle Leaders Miss
This is not purely a safety issue.
Weak competence systems frequently become HR and employment problems too.
Especially where:
- Managers are promoted without support (the good ‘ole accidental leader)
- Expectations are unclear
- Accountability is inconsistent
- Poor performance is tolerated informally
- Staff are afraid to admit capability gaps
- Training is delivered but not embedded
This creates organisational vulnerability.
Because psychologically unsafe cultures often drive operational silence.
Employees stop speaking up. Managers avoid escalation. Leaders assume everything is under control because nobody raises concerns.
Until somebody external arrives and starts asking questions.
The organisations that manage this best create environments where saying:
“I’m not confident in this” or “I need support here” is viewed as professional maturity, not weakness.
That matters enormously.
Particularly for accidental leaders carrying responsibilities they were never formally prepared for.
Competence Frameworks Create Defensibility
One of the biggest misunderstandings around compliance is this idea that regulators expect perfection.
They don’t.
What they often look for is evidence of reasonable, structured, proactive control.
Can you demonstrate:
- You identified competency requirements?
- You assessed capability properly?
- You recognised limitations?
- You provided support?
- You reviewed performance?
- You acted on concerns?
- Leadership maintained oversight?
- The organisation learned and adapted?
That is where defensibility begins.
Not in a certificate folder.
But in evidence of thoughtful leadership and active assurance.
The Businesses Handling Scrutiny Best
The organisations that tend to perform strongest under scrutiny usually have several things in common.
Leadership visibility. Clear operational standards. Defined accountability. Structured supervision. Competency reviews. Learning cultures. Open reporting. Practical assurance systems.
Importantly, they do not rely purely on paperwork to tell them everything is fine.
They actively test whether systems are working in reality.
That distinction is massive.
Because the gap between policy and operational practice is where many serious failures live.
Practical Questions Every Leadership Team Should Be Asking
If you’re a director, owner, HR leader or operational lead, ask yourself honestly:
Do we actually have a competence framework? Or just training records?
Can we define what competence looks like role by role?
How do we assess understanding practically?
How do we identify skill fade?
How do we know managers are capable of discharging their responsibilities?
Would our supervisors feel safe admitting they need support?
What evidence would we provide regulators tomorrow if something serious happened today?
Those questions matter more than most organisations realise.
Final Reflection
Training matters.
But training alone is not assurance.
Competence is not a one-day course. It is not a certificate. And it is certainly not a spreadsheet.
It is an ongoing leadership responsibility.
The organisations that understand this early are usually the ones far better positioned when regulators, insurers or investigators begin looking deeper.
Because when scrutiny arrives, the question is rarely:
“Did you deliver training?”
The real question is:
“How did you know your people were genuinely competent?”
Let’s Continue the Conversation
I’m seeing more organisations beginning to recognise the gap between training compliance and true competence assurance, particularly in growing businesses where operational pressure often outpaces governance maturity.
How is your organisation currently assessing competence beyond attendance records and certificates?
And do leaders genuinely have visibility of where the risks sit?
