CRICOS Compliance Essentials
Key takeaways
- 1The **ESOS Act 2000**, which governs provider obligations
- 2The **National Code of Practice 2018**, which outlines 11 key standards
- 3The **Standards for RTOs 2025**, which define quality and outcomes for all VET delivery
- 4Courses and delivery locations must be correctly listed on PRISMS
- 5Any change requires prior approval
Understanding CRICOS compliance
Operating as a CRICOS-registered provider brings opportunity and responsibility. CRICOS compliance ensures the safety, quality, and integrity of international education in Australia.
Since 1 July 2025, CRICOS-registered RTOs must align both with the Standards for RTOs 2025 and the National Code 2018, under the ESOS Framework.
Strong CRICOS compliance is not about paperwork — it's about protecting students and upholding Australia's international education reputation.
Understanding the ESOS Framework
The Education Services for Overseas Students (ESOS) Framework sets the legal foundation for all CRICOS providers. It covers:
- The ESOS Act 2000, which governs provider obligations
- The National Code of Practice 2018, which outlines 11 key standards
- The Standards for RTOs 2025, which define quality and outcomes for all VET delivery
Together, they ensure every international student receives quality training, transparent information, and genuine support.
Core CRICOS compliance requirements
1. Accurate course registration
- Courses and delivery locations must be correctly listed on PRISMS
- Any change requires prior approval
2. Student support and welfare
- Providers must demonstrate active support for students' academic and personal wellbeing
- Standard 6 of the National Code links directly to Outcome Standard 2 of the RTO Standards
3. Marketing and recruitment integrity
- Information must be accurate, complete, and transparent before enrolment
- Avoid misleading claims about outcomes or migration pathways
4. Monitoring attendance and course progress
- Use documented systems for intervention and support
- Keep accurate records for each student
5. Staff and agent management
- CRICOS providers must monitor education agents and trainer qualifications
- Maintain signed agent agreements and review agent performance regularly
Governance and accountability
Under the Standards for RTOs 2025, governance must now include CRICOS risk oversight.
Leadership teams are expected to review international operations as part of their regular governance cycle.
Add CRICOS to your Governance Register and ensure:
- Risks related to visa breaches, attendance, and student welfare are recorded
- Complaints and feedback from international students are reviewed monthly
- Marketing and PRISMS data match current delivery scope
Managing risk in CRICOS operations
CRICOS operations carry higher regulatory risk because of student visas and welfare obligations.
Effective risk management should include:
- A live CRICOS risk register
- Quarterly reviews of student progression and intervention reports
- Documented procedures for agent management and homestay checks
- Staff PD on ESOS and CRICOS standards
Continuous improvement for CRICOS providers
Continuous improvement is now a compliance requirement, not a suggestion.
CRICOS RTOs must demonstrate:
- Regular review of international student outcomes
- Actions logged in a continuous improvement register
- Integration with governance meeting agendas
These reviews must show how the RTO responds to emerging risks like visa conditions, student support, and agent quality.
Common CRICOS non-compliances
Vivacity's CRICOS audits since July 2025 show recurring issues:
- PRISMS data not matching actual delivery
- No documented student intervention policy
- Agents not monitored for compliance
- Poor evidence of student support systems
Fixing these gaps protects both your registration and your students.
Staying audit-ready
CRICOS audits now follow a self-assurance model.
Be prepared to demonstrate:
- Evidence of risk management and student support systems
- Documented communication with education agents
- Governance oversight of CRICOS delivery
- Continuous improvement actions with outcomes tracked
Tools like ComplyHub can streamline this by linking CRICOS evidence, risk, and improvement activities into one compliance system.
Final thought
CRICOS compliance isn't just a requirement — it's your licence to deliver quality international education.
When governance, risk management, and continuous improvement align, CRICOS compliance becomes simple to maintain.
Build systems that prove integrity, protect students, and support outcomes. That's the essence of compliance under the ESOS Framework.
Book a Compliance Clarity Call to review your CRICOS compliance systems.
Upskill your team
Access structured PD programs designed specifically for VET trainers and compliance staff.
"Compliance has never been so clear and easy to understand. Highly recommend Vivacity."
