RTO Self-Assurance Evidence — What ASQA Expects

• What Evidence Does ASQA Expect for RTO Self-Assurance? ASQA expects RTO self-assurance evidence to demonstrate that the organisation actively monitors, evaluates, and improves its own performance — not just that policies and processes exist on paper. Under the Standards for RTOs 2025 (Outcome Standards F2025L00354), self-assurance evidence falls into four categories: performance monitoring data, internal audit and review records, continuous improvement documentation, and governance oversight records. If an auditor cannot see all four working together as a system, the evidence will not satisfy the Standards — regardless of how polished individual documents look. This guide sets out exactly what evidence belongs in each category, what ASQA auditors look for when they examine it, and the gaps most commonly found in RTOs that thought they were ready.

• Why Evidence Is the Whole Point Self-assurance evidence is the proof that a self-assurance system exists and is functioning. The distinction matters because many RTOs have self-assurance policies and continuous improvement registers that look correct on paper but contain no meaningful evidence of the system operating in practice. As Angela Connell-Richards, Founder of Vivacity Coaching & Consulting, explains: "The question ASQA is asking isn't 'do you have a self-assurance policy?' — it's 'can you show me your self-assurance system working?' Those are completely different questions, and most RTOs are only prepared to answer the first one." ASQA's regulatory approach under the 2025 Standards is outcomes-focused. Auditors are trained to distinguish between an organisation that performs compliance and one that practises it. Evidence is how that distinction becomes visible. According to ASQA's published regulatory data, governance and self-assurance failures consistently appear among the most common non-compliance findings — making this the area where thorough evidence documentation pays the highest return.

• Category 1 — Performance Monitoring Evidence Performance monitoring evidence is the data and records that show the RTO is actively tracking how well it is delivering training and assessment. This category should include: Student outcome data • Completion and withdrawal rates by qualification and cohort, reviewed at regular intervals • Records showing when the data was reviewed, by whom, and what observations were made • Evidence that trends (not just individual data points) are being tracked over time Student satisfaction data • Survey results from students, collected at a frequency that allows meaningful analysis • Records showing that results were reviewed and any concerns were identified and acted on • Aggregate trend data, not just individual survey responses filed away Assessment outcome data • Competency achievement rates by unit and qualification • Records of any patterns — unusually high or low competency rates that prompted investigation • Validation outcomes and whether they confirmed assessment tools are fit for purpose Complaints and appeals data • A complaints and appeals register showing every complaint received, its resolution, and any systemic pattern identified • Records showing the register was reviewed at governance level What ASQA looks for: Not just the existence of data, but evidence that someone read it, considered what it meant, and did something with it. A spreadsheet of student satisfaction scores filed in a folder is not self-assurance evidence. A review record noting that satisfaction in one qualification dropped and identifying the cause is.

• Category 2 — Internal Audit and Review Evidence Internal audit and review evidence is the documentation of planned, systematic reviews of the RTO's operations against the Standards for RTOs 2025. This category should include: Internal audit schedule • A documented plan showing what will be reviewed, when, and by whom • Evidence the schedule is being followed — completed reviews should be traceable to the plan TAS review records • Documented reviews of each Training and Assessment Strategy against actual delivery • Records showing who conducted the review, what was found, and what was changed as a result Assessment tool review records • Evidence that assessment tools have been reviewed for validity, reliability, and currency • Validation records are distinct from — but connected to — internal reviews Trainer and assessor compliance checks • Records confirming each trainer and assessor holds the required qualifications and currency • Evidence these records were reviewed at regular intervals, not just at initial engagement Student records compliance checks • Internal audits of student files to confirm completeness and accuracy • Records of any deficiencies found and corrective actions taken What ASQA looks for: A review schedule that exists and is being followed. Completed reviews with findings documented. Evidence that findings from internal reviews fed into the continuous improvement system — there should be a traceable path from "we found a gap in internal review" to "we recorded it in the improvement register" to "we fixed it and checked the fix worked."

• Category 3 — Continuous Improvement Evidence Continuous improvement evidence is the documentation that shows identified issues are being acted on, tracked to completion, and evaluated for effectiveness. The centrepiece of this category is the continuous improvement register. A register that satisfies the 2025 Standards should show — for every entry: • Source of identification — where the issue came from (internal audit, validation, student feedback, complaint, governance review, self-assessment) • Description of the issue — what was found and why it matters • Proposed action — what will be done to address it • Responsible person — who is accountable for completing the action • Target date — when the action will be completed • Completion date — when it was actually completed • Outcome evaluation — evidence that the action was implemented and that it worked The last two columns are where most RTOs fall short. Actions are recorded and ticked off, but there is no evaluation of whether the action resolved the issue. ASQA auditors look specifically for this closure loop. Additional continuous improvement evidence: • Evidence that completed improvement actions were verified — not just marked as done • Records showing improvements were communicated to relevant staff • Evidence the register is a live document — entries from recent months, not just historical ones What ASQA looks for: A register that is actively used, with entries across multiple sources (not just internal audits), actions that are closed with documented evaluations, and a date pattern that shows consistent activity rather than a flurry before audit.

• Category 4 — Governance Oversight Evidence Governance oversight evidence is the documentation that shows Governing Persons are actively engaged with the self-assurance system — not just receiving reports, but scrutinising them and responding to what they show. This category should include: Governance meeting minutes • Minutes from every governance meeting, showing self-assurance as a standing agenda item • Records of what was reported, what questions were asked, and what decisions or directions were made • Evidence that Governing Persons reviewed and responded to performance data — not just received it • Action items arising from governance discussion, with responsible persons and timeframes Self-assurance reporting to the governing body • Written reports presented to Governing Persons at each meeting, covering: o Key performance indicators and trend data o Internal audit and review findings o Continuous improvement progress o Emerging risks and how they are being managed • Evidence the reports were discussed, not just noted Governing Person engagement records • Attendance records for governance meetings confirming quorum • Signed fit and proper declarations for each Governing Person • Records of any conflicts of interest declared and how they were managed What ASQA looks for: Minutes that demonstrate genuine discussion — questions asked, challenges raised, directions given. A one-page compliance report marked "noted" and signed tells ASQA the governing body is passive. Detailed minutes showing the governing body engaged with what the data showed tells ASQA the governance function is real.

• How the Four Categories Connect The self-assurance evidence categories are not independent. ASQA auditors look for the connections between them — the flow of information through the system. The path should be visible:

Performance monitoring data surfaces a concern
The concern is investigated through internal review
The finding is recorded in the continuous improvement register with an action plan
The governing body receives a report on the finding and the proposed action
The action is completed, evaluated, and closed in the register
The governing body receives confirmation the issue has been resolved An RTO that has all four categories of evidence but cannot demonstrate these connections has documentation, not a system. ASQA's outcomes-focused approach is designed specifically to distinguish between the two.

• The Most Common Evidence Gaps Based on audit preparation work across hundreds of Australian RTOs, the evidence gaps most commonly found are: Gap 1 — Data without analysis. Performance data exists but there are no records showing it was reviewed, interpreted, or acted on. The data is collected; the thinking about what it means is not documented. Gap 2 — Reviews without findings. Internal audit records confirm a review took place but record no findings. An internal audit that finds nothing to improve is almost never credible — ASQA will question whether the review was genuine. Gap 3 — Improvement actions without evaluations. The continuous improvement register has actions marked complete but no evaluation of whether the action worked. The closure loop is missing. Gap 4 — Governance minutes that note without engaging. Minutes record that a compliance report was received and noted but show no evidence of discussion, questioning, or direction from Governing Persons. Gap 5 — Evidence that stops before the audit. A sudden burst of review activity and register entries in the months immediately before an audit — with little activity in the period before that — is a pattern ASQA auditors recognise. Consistent, dated evidence across the full period is what counts.

• Organising Your Self-Assurance Evidence A well-organised evidence base makes both day-to-day self-assurance management and audit preparation significantly easier. A practical structure: Folder or system structure: • Performance Monitoring → sub-folders by data type (student outcomes, satisfaction, complaints) • Internal Reviews → sub-folders by review type (TAS, assessment tools, trainer currency, records) • Continuous Improvement → the live register plus any supporting documentation • Governance → meeting minutes, reports presented to the governing body, fit and proper records Naming conventions: • Include the date in every document name: TAS-Review-Cert-IV-Business-2025-07.docx • Include the reviewer's name or role where relevant • Keep completed and current items in separate folders to make the live register easy to find Review cadence: Evidence gaps most commonly occur because reviews are scheduled but not completed on time, or completed but not documented. A simple calendar reminder system — linked to whoever is responsible for each review — is more reliable than a complex compliance management system that no one uses consistently.

• Frequently Asked Questions What is self-assurance evidence for ASQA? Self-assurance evidence is the documentation that demonstrates an RTO's self-assurance system is operating in practice. It includes performance monitoring data with analysis records, internal audit and review findings, a continuous improvement register with evaluated actions, and governance meeting minutes showing active oversight. All four categories are required — evidence in one area does not compensate for gaps in another. How far back should self-assurance evidence go? ASQA typically reviews evidence covering the period since the RTO's last audit, or a minimum of 12 months where no recent audit has occurred. Evidence should show a consistent pattern of activity across the full period — not a concentration of activity in the months immediately before the audit. Does a continuous improvement register count as self-assurance evidence on its own? No. A continuous improvement register is one component of self-assurance evidence. Without performance monitoring data showing how issues were identified, internal review records confirming findings were investigated, and governance records confirming oversight, a register alone does not demonstrate a functioning self-assurance system. What does ASQA look for in governance meeting minutes for self-assurance? ASQA looks for evidence of genuine engagement — questions asked by Governing Persons, discussion of what performance data shows, directions given, and action items arising. Minutes that record only that reports were received and noted, without any record of discussion or response, do not demonstrate active governance oversight of self-assurance. Can we use ComplyHub to manage our self-assurance evidence? Yes. ComplyHub is designed to support exactly this kind of ongoing compliance evidence management — including continuous improvement registers, performance monitoring records, and governance reporting. If your current system makes it difficult to maintain consistent, well-organised evidence, a purpose-built tool significantly reduces the administrative burden. What should we do if our self-assurance evidence has gaps? Start by mapping what you have against the four categories in this guide. Identify which categories are strong and which are thin. Then build a remediation plan that addresses the gaps — starting with the continuous improvement register (easiest to bring up to standard quickly) and the governance minutes (hardest to backfill, so prioritise from the next meeting forward). A Compliance Health Check with Vivacity will identify every gap and give you a prioritised remediation plan.

• The Vivacity Perspective Self-assurance evidence is not a compliance exercise you do for ASQA. It is the visible output of running your RTO well. When the evidence is strong, it means the monitoring is happening, the reviews are being conducted, the improvements are being made, and the governing body is engaged. When the evidence is thin, it usually means some or all of those things are not actually happening — or they are happening but not being documented, which ASQA cannot distinguish from not happening at all. The RTOs that navigate audits with confidence are the ones that treat their self-assurance evidence as a live management tool — not something they assemble when an audit is announced. If you are not confident about what your self-assurance evidence currently looks like, a Compliance Health Check is the clearest way to find out before ASQA does. Ready to know where your evidence stands? Book a Compliance Clarity Call with Angela → Download the RTO Self-Assurance Checklist → Explore the Vivacity Superhero Membership →

• Related Reading • What is RTO Self-Assurance? A Plain-English Guide to the 2025 Model → • The RTO Self-Assurance Checklist for 2025 → • What are Governing Persons in an RTO? → • How to Prepare for an ASQA Audit in 2025 →

Angela Connell-Richards is the Founder and CEO of Vivacity Coaching & Consulting (ABN 40 140 059 016). With more than 30 years in the VET sector, she specialises in RTO compliance, governance advisory, and audit preparation under the Standards for RTOs 2025. Vivacity supports RTOs and CRICOS providers across Australia.

Get new posts in your inbox

How audit-ready is your RTO?