ISO 27001 requires keeping training records from all security trainings. Besides trainings, you can prove competence by showing documents related to experience of your employees.

Examples:
Records of trainings and other records that show competences could include:
- Training certificates
- Training attendance list
- Test results
- Educational diplomas
- CVs
- References
- Records of membership in professional associations