Question 1

How do I become a Registered Training Organisation (RTO)?

Accepted Answer

Becoming an RTO involves demonstrating to ASQA that your organisation has the systems, capacity and credentials to deliver nationally recognised training. You will need a business case, financial viability evidence, fit and proper person declarations, training and assessment strategies for your intended scope, validated assessment tools, and evidence of qualified trainers and assessors. Vivacity supports this through the Become an RTO service, from scoping to application submission.

Question 2

What is involved in adding qualifications to my scope?

Accepted Answer

A change of scope application requires updated training and assessment strategies, mapped assessment tools, evidence of trainer competency for the new units or qualifications, and confirmation that your resources and industry engagement support delivery. Applications are lodged through asqanet and can attract additional fees. Plan for 2 to 4 months lead time depending on complexity.

Question 3

How do I add CRICOS registration for international students?

Accepted Answer

CRICOS registration is a separate approval under the ESOS Act. You must demonstrate compliance with the National Code 2018, evidence of student welfare arrangements, agent management processes, and appropriate premises and resources for international student delivery. Registration is course by course. Vivacity manages CRICOS applications end-to-end through the ESOS & CRICOS Registration service.

Question 4

Can I buy an existing RTO, and what due diligence is required?

Accepted Answer

Yes. Buying an RTO can accelerate your entry to the sector, but compliance risk transfers with the entity. Due diligence should cover the audit history, current scope and student load, AVETMISS reporting integrity, trainer credentials, financial position, and any open ASQA matters. A material change notification to ASQA is required within 90 days of any change in high managerial agents.

Question 5

What has changed under the Standards for RTOs 2025?

Accepted Answer

The Standards for RTOs 2025 replace the 2015 Standards from 1 July 2025. The framework is now split into the Outcome Standards (what quality looks like, organised into four Quality Areas: Training and Assessment, VET Student Support, VET Workforce, and Governance), Compliance Requirements (what must be done), the Credential Policy (trainer and assessor requirements), and the Practice Guides (how to demonstrate quality). The focus shifts from process compliance to demonstrable outcomes for learners.

Question 6

What are the new Outcome Standards versus Compliance Requirements?

Accepted Answer

The Outcome Standards describe the quality expected across the learner experience, VET workforce, training and assessment, and governance. The Compliance Requirements are the specific, auditable obligations that support those outcomes. RTOs need to demonstrate both what they do and the outcomes it produces for learners.

Question 7

How does the Credential Policy affect our trainers?

Accepted Answer

The Credential Policy consolidates trainer and assessor requirements. Trainers must hold the required VET credentials, current industry skills, and demonstrate ongoing professional development. Supervision arrangements remain available but must be documented and evidenced. RTOs should review current trainer files against the new policy and address gaps before their next regulatory touchpoint.

Question 8

What is the difference between self-assurance and the old audit model?

Accepted Answer

Self-assurance is a continuous, evidence-based approach where the RTO systematically monitors its own performance against the Standards and takes action when issues arise. It is not a replacement for audit, but ASQA expects self-assurance evidence to be visible and current. RTOs that self-assure well are lower-risk in ASQA’s risk-based regulatory model.

Question 9

How do I prepare for an ASQA audit or re-registration?

Accepted Answer

Preparation starts with a current, evidence-based view of your compliance across the Standards. Map each Compliance Requirement to the evidence that demonstrates it, address any gaps, and rehearse the narrative you will present. Focus on training and assessment strategies, assessment validation records, trainer files, student records, and self-assurance evidence.

Question 10

What evidence does ASQA actually want to see?

Accepted Answer

ASQA wants evidence that the outcomes described in the Standards are being achieved. That typically means completed assessment samples that show the judgement was defensible, trainer files that demonstrate credential and industry currency, records of validation and continuous improvement, and evidence of student support and engagement across the learner journey.

Question 11

What triggers an ASQA audit?

Accepted Answer

Triggers include re-registration, scope change applications, complaints, data anomalies in AVETMISS or Quality Indicator returns, media or intelligence referrals, and thematic reviews. ASQA’s risk model also considers your compliance history and the risk profile of the qualifications on your scope.

Question 12

How do we respond to a Notice of Concern or rectification request?

Accepted Answer

Respond factually, on time, and with evidence. Address each finding directly, describe the root cause, explain the corrective action taken, and provide the evidence that proves the action is in place. Do not overreach with promises that cannot be sustained. Vivacity provides response and rectification support through the Audit Readiness service.

Question 13

What credentials do our trainers need under the 2025 Standards?

Accepted Answer

Trainers must hold the credentials specified in the Credential Policy for the units they deliver and assess, along with current industry skills and evidence of ongoing professional development. Supervision arrangements are permitted where a trainer is working towards the required credential, provided the supervision is documented and effective.

Question 14

How do we evidence trainer currency and vocational competency?

Accepted Answer

Maintain a trainer matrix that records qualifications, industry experience, PD activities, and the units each trainer is approved to deliver. Support the matrix with dated evidence such as employment records, industry engagement notes, PD certificates and reflective statements. Update the file at least annually or when scope or roles change.

Question 15

How do we handle credit transfer and RPL correctly?

Accepted Answer

Credit transfer must be granted on presentation of a valid AQF certification document that shows an equivalent unit or qualification. RPL requires a structured assessment against the unit requirements using the RTO’s validated tools. Both processes must be documented, offered to learners at enrolment, and recorded on the student file and in AVETMISS.

Question 16

What does industry engagement need to look like?

Accepted Answer

Industry engagement should be planned, evidenced, and inform training and assessment. That includes advisory groups, employer feedback, workplace observation, and formal partnerships. The evidence should show how insights from industry have shaped your strategies, tools and delivery.

Question 17

How often do we need to validate assessments?

Accepted Answer

Validation must be systematic and risk-based. As a minimum, each training product on scope should be validated within a five-year cycle, with at least 50% validated in the first three years. Higher-risk qualifications, high-volume products, and any product with identified issues should be prioritised.

Question 18

What makes a validation defensible?

Accepted Answer

A defensible validation is planned, conducted by a suitably qualified panel that is independent of the original assessment, uses documented criteria against the Principles of Assessment and Rules of Evidence, and results in clear actions with owners and due dates. The validation record should show the evidence reviewed and the reasoning applied.

Question 19

How do we fix invalid assessment tools without re-issuing certificates?

Accepted Answer

Where validation identifies a tool issue, remediate the tool, re-assess affected learners against the corrected requirements, and document the process. Certificates should only be reissued or withdrawn where the underlying competency judgement cannot be supported. Seek advice before taking action that affects issued qualifications.

Question 20

Who is a fit and proper person, and what do we need to prove?

Accepted Answer

Fit and proper person requirements apply to high managerial agents and executive officers. Evidence includes signed declarations, criminal history checks, insolvency and disqualification checks, and records of prior sector conduct. Update declarations at least annually and whenever the responsible person or their circumstances change.

Question 21

What governance meetings are required, and what should be minuted?

Accepted Answer

The Standards do not prescribe meeting frequency, but expect evidence that governance actively oversees compliance, risk, and quality. Regular meetings should cover compliance dashboards, audit and validation outcomes, student and staff feedback, complaints and appeals, financial viability, and continuous improvement actions. Minute decisions, actions and owners.

Question 22

What is a risk-based approach to compliance?

Accepted Answer

A risk-based approach prioritises effort where the impact on learners and compliance is greatest. Maintain a risk register that identifies compliance, delivery, workforce and financial risks, assess likelihood and impact, and record the controls in place. Review the register at governance meetings and use it to direct validation, PD and monitoring.

Question 23

What continuous improvement evidence satisfies auditors?

Accepted Answer

Auditors look for a closed loop: an issue is identified from a reliable source (feedback, data, validation, complaint), analysed for root cause, addressed with a documented action, and re-checked to confirm effectiveness. Maintain a live CI register and cross-reference actions to the source evidence.

Question 24

How do we complete Quality Indicator reporting?

Accepted Answer

Quality Indicator returns are due by 30 June each year and cover learner engagement, employer satisfaction, and competency completion. Collect responses using the AQTF surveys, calculate response rates, and lodge the summary report through the ASQA portal. Use the results to inform your continuous improvement program.

Question 25

What is the Annual Declaration on Compliance and how do we complete it?

Accepted Answer

The Annual Declaration on Compliance is a self-assessment against the Standards, submitted through asqanet. It should be based on genuine self-assurance evidence. Do not declare compliance you cannot evidence. If gaps exist, disclose them alongside a rectification plan.

Question 26

What AVETMISS reporting is required?

Accepted Answer

RTOs must report training activity in AVETMISS format to the National Centre for Vocational Education Research or the relevant State Training Authority, depending on funding and jurisdiction. Reports include enrolments, qualifications completed and unit outcomes. Maintain accurate USI, address and demographic data at enrolment to reduce reporting errors.

Question 27

Do we need a dedicated compliance system, or is SharePoint enough?

Accepted Answer

SharePoint or Google Drive can store documents, but they are not designed for compliance workflows. A dedicated compliance system such as ComplyHub links evidence to Standards, tracks actions and owners, manages validation cycles, and produces audit-ready reports. See the ComplyHub versus SharePoint and Drive comparison for a detailed breakdown.

Question 28

How do we manage student records and evidence securely?

Accepted Answer

Student records must be retained for the periods specified by ASQA and the ESOS framework, stored securely, and accessible to ASQA on request. Use access controls, audit logs, and encrypted storage. Have a documented retention and disposal schedule, and a business continuity plan that covers loss of access to primary systems.

Question 29

What ESOS obligations apply to CRICOS providers?

Accepted Answer

CRICOS providers must comply with the ESOS Act, the National Code 2018, and the ESOS Regulations. Obligations include agent management, marketing and recruitment integrity, written agreements, tuition protection, complaints and appeals, student welfare for under-18s, and reporting via PRISMS. These operate alongside the Standards for RTOs 2025.

Question 30

How do we manage student attendance, course progress and PRISMS reporting?

Accepted Answer

Course progress must be monitored at defined intervals, with intervention strategies for students at risk. Attendance is required only for ELICOS and schools sectors. PRISMS reporting covers CoE issuance, changes, deferments, suspensions and cancellations, and course progress or attendance breaches. Reports must be lodged within statutory timeframes.

RTO Compliance FAQs

Registration & Scope

Standards for RTOs 2025

Audit Readiness

Trainers & Assessors

Assessment & Validation

Governance & Risk

Continuous Improvement & QIs

Data, Reporting & Systems

CRICOS-specific

Still have a question?