Audits in hazardous area industries are not box-ticking exercises. When a regulatory body, a major client, or an internal safety team reviews your hazardous area operations, they are looking for evidence that your workforce is genuinely competent — not just that certificates exist somewhere in a filing cabinet.
Compex certification is one of the most widely recognised tools for demonstrating that competence. But having Compex-qualified workers and being audit-ready are two different things. Audit readiness means having a system — one that connects your workforce competence records to your operational processes and your risk management framework.
This guide explains what that system looks like and how to build it.
What Auditors Actually Look For
Many employers prepare for audits by gathering certificates and hoping for the best. Auditors are experienced enough to see through that approach quickly. What they are looking for is not a stack of documents — it is evidence that a functioning competence management system exists.
In a hazardous area context, that typically means they will examine:
- Your hazardous area zone classification records and whether they are current
- How you have identified which roles require Ex competence and at what level
- Whether your workforce records match those requirements — employees and contractors
- How you verify that the competence each worker holds is appropriate for the actual tasks they perform
- What your process is for managing certificate expiry and refresher training
- How contractor competence is verified before site access is granted
- What supervision arrangements exist for workers operating at the limits of their certification
- Whether managers and supervisors understand the competence requirements for their teams
Notice that very few of these questions are answered by producing a certificate. They are answered by describing a system and showing evidence that the system works. Compex certification gives you the standard to build that system around.
The Workforce Register: Your Primary Audit Evidence
If there is one tool that does more for audit readiness than any other, it is a well-maintained workforce competence register.
The register is a live record of every person who works in or is responsible for your hazardous areas, what Compex qualification they hold, when it expires, and what evidence you have on file to support it.
A complete register entry includes:
- Worker name and employer or contractor company
- Job title and role category (e.g., electrical technician, instrumentation engineer, maintenance supervisor)
- Hazardous area access and zone exposure level
- Compex module(s) held
- Certificate issue date and expiry or refresher due date
- Evidence file location
- Any restrictions, supervision notes, or work scope limitations
The register needs to be live — updated when people join or leave, when certificates are renewed, when roles change, and when contractors are mobilised or demobilised. A register that was accurate six months ago but has not been updated is worse than no register at all in an audit context, because it suggests your system has broken down.
Assign clear ownership. The HSE manager typically owns the register, but operations, HR, and procurement all need access for their own purposes. When operations issues a permit for Ex work, they should be checking the register. When procurement onboards a new contractor, they should be recording the contractor’s Compex evidence in the same system.
Common Audit Gaps and How to Prevent Them
Understanding where audits commonly find gaps is useful for building a system that prevents those gaps from forming in the first place.
Expired certificates on site: This is the most common finding. A certificate was valid when the worker started, but no one tracked the expiry date and no refresher was planned. The worker continued working in hazardous areas with an invalid qualification.
Prevention: Set automatic alerts in your register for certificates expiring within 90 days. Assign someone to review and act on those alerts. Schedule refreshers well before expiry, not when the certificate has already lapsed.
Module mismatch: A worker holds a Compex certificate, but the module does not match the work they are doing. An Ex Awareness certificate does not qualify someone for hands-on Ex equipment installation. A gas and vapour module does not cover dust environments.
Prevention: When you assign a worker to a role or task, cross-reference the Compex module they hold against the specific requirement for that task. The role matrix is the tool that makes this systematic rather than relying on individual memory.
Contractors not included in the system: Employers often have solid records for their own staff but no equivalent system for contractors. Auditors check both.
Prevention: Extend your competence register to cover every person working under your permit-to-work system in a hazardous area, regardless of employment status.
No evidence for supervisors and managers: Workers who hold hands-on Compex certification are usually well-documented. Supervisors who manage hazardous area operations but hold only awareness-level training are often overlooked. Auditors will ask whether your managers understand the competence requirements of the people they supervise.
Prevention: Include supervisors and area managers in your Compex training plan. Ex Awareness (Ex A) is the appropriate starting point for those who do not carry out Ex work themselves.
Training records held locally, not centrally: Some sites keep training records in departmental files rather than a central register. When an auditor asks for the competence records of a contractor who worked on site three months ago, the answer “the supervisor might have that somewhere” is not acceptable.
Prevention: Centralise all Compex records in one register, regardless of who holds the certificate or who trained them.
Linking Compex to Your Permit-to-Work System
One of the most effective ways to embed Compex competence checks into daily operations is to link them directly to your permit-to-work (PTW) system. This means that before any Ex work permit is issued, the permit controller verifies that every worker named on the permit holds a current, appropriate Compex certificate for the specific task.
This does two things. First, it creates a consistent point at which competence is verified, removing reliance on individual judgment or memory. Second, it generates an automatic audit trail — every permit that has been issued is evidence that a competence check was carried out at that point.
This integration does not require a complex system. It can be as simple as a field on the permit form where the permit controller records the Compex module held by each worker and confirms that a certificate has been sighted. In more sophisticated operations, this can be automated through a digital PTW system linked directly to the competence register.
Running a Quarterly Internal Audit
Audit readiness should not be something you achieve in the weeks before an external audit. It should be the normal state of your site. Running a quarterly internal review of your competence management system is the most effective way to maintain that state.
A quarterly review should cover:
- Checking for certificates that have expired or will expire in the next 90 days
- Reviewing whether any role changes have occurred that affect competence requirements
- Confirming that contractor records are current for any contractors currently on site
- Reviewing permit-to-work records to check whether competence checks are being consistently applied
- Checking whether any new hazardous areas have been identified or zone classifications have changed
Address anything you find before an external auditor does. This approach turns audit preparation from a reactive scramble into a routine operational activity.
Using Compex to Demonstrate a Safety Culture
Beyond the mechanics of compliance, there is a broader point worth making. Regulators and major clients are increasingly interested in safety culture, not just compliance documentation. Audit teams are trained to look beyond the paperwork and assess whether the people they speak to on site actually understand what the competence requirements are and why they matter.
A workforce that has genuinely gone through Compex training understands hazardous area risk at a practical level. They know why certain tasks require certain qualifications. They understand the consequences of getting it wrong. That understanding is visible to auditors in the way workers talk about their roles and the way supervisors describe their responsibilities.
Building a Compex-verified workforce is not just a compliance exercise. It creates a team that genuinely understands what it is doing and why. That is the foundation of a real safety culture, and it is what the strongest operators in hazardous area industries have in common.
