Most contracting companies track credentials in one list called tickets. It is a reasonable word — everybody on site uses it — and it is the reason the tracking usually goes wrong.
Because what sits in that list is four different kinds of thing, renewed by four different bodies, on four different clocks.
Four categories that behave differently
High risk work licences. Issued by the state regulator. Five years. Renewed through the regulator — not the RTO that assessed you, which is where most people go first and lose a fortnight. Nationally recognised. Let one lapse far enough and you may be re-sitting the assessment rather than filling in a form.
Statements of attainment. Working at heights, confined space, first aid, plant units. Issued by an RTO. They do not expire. A statement of attainment is a permanent record that you were assessed as competent on a date. What expires is the currency period somebody imposed on it — your policy, or a client's requirement, or an industry convention. Two clients can require a working at heights refresher on two different schedules and both be right.
Health assessments. The coal mine workers' health assessment (formerly known as the coal board medical), and whatever else a client requires. Arranged through an employer-appointed doctor from an approved list. Five years for the Coal Mine Workers' Health Scheme, longest lead time of anything on this page, and the thing most likely to leave somebody off a roster for weeks.
Site inductions. Issued by the operator, for their site only. Typically twelve months. Not portable in any direction.
Four categories. Four renewal paths. Four realistic lead times. One list.
The consequence is that any single alert setting will be wrong for most of them. Thirty days is too much notice for an online refresher, so people learn to dismiss the alerts. It is nowhere near enough for a medical.
The multiplication nobody costs
The load is not the number of workers. It is workers multiplied by sites multiplied by requirements.
Twelve people and one client is a manageable list. Twelve people and four clients, each with its own induction, its own VOC currency period and its own extra requirements, is roughly four times the tracking and considerably more than four times the reconciliation — because now you also have to know which combination applies to which job.
That is the point where a spreadsheet stops being a reasonable tool, and it typically arrives somewhere around thirty workers and three clients. Not because thirty is a magic number, but because that is where the cells outgrow anybody's ability to hold the picture.
The question the list cannot answer
Here is the test worth running on whatever you use now. Time yourself.
For a named client site, on a named date, which of our people and which of our machines are fully compliant — and for the rest, what specifically is missing?
Not "is Dave compliant". Can Dave go to Blackwater on Tuesday, and if not, what one thing is stopping him.
A list of tickets cannot answer that, because it does not know what Blackwater requires. Answering it means holding the requirements against the site and comparing, which is a different data structure from a list of credentials against people.
If the answer takes an afternoon, that is your real position — not the one the folder implies.
The single point of failure
There is a version of this question that matters more than the timing.
Who else can answer it?
Almost every contracting business we talk to has one person who genuinely understands the compliance picture. They are usually excellent. They are also the reason the answer exists.
When they take leave, the business does not become non-compliant. It becomes unable to demonstrate that it is compliant, which in front of a client is nearly the same thing — and the request always seems to arrive in that week.
If the answer to "who else can produce this" is nobody, you do not have a system. You have a person, and a risk you have not written down anywhere.
What good looks like
Not more discipline. Fewer things to remember.
Every credential as a dated record against the person or the machine it belongs to, with the kind of credential recorded — because that is what determines the renewal path and the lead time.
Lead times per type, set from how long the renewal actually takes where your people live. Twelve weeks for an Emerald medical. Two for an online refresher.
Requirements held per client site, so compliance is computed rather than remembered, and "compliant" means compliant for the site they are actually travelling to.
Plant on the same footing as people. A cleared operator with a machine overdue for service is still a turnaround, and it is the second most common cause of one.
A view that survives one person being away. That is not a nice-to-have. On the day it matters, it is the only thing that matters.
None of that is exotic. It is what the four categories were always going to require once the business had more than one client — and the reason it feels hard is that the tool most people start with was designed for a business with one.

