Registered Training Organisations operate in one of the most document intensive environments an auditor will encounter. When you are auditing quality management at an RTO, you are dealing with two overlapping frameworks at once: the requirements of ISO 9001 and the compliance obligations set by the Australian Skills Quality Authority, or ASQA, under the Standards for Registered Training Organisations. Understanding how these two frameworks interact, where they reinforce each other, and where the tensions lie is essential before you walk through the door.
On this page
This article is written for internal auditors, quality managers, and ISO consultants working inside or alongside RTOs. It covers the key areas where audits tend to surface findings, the evidence you should be gathering, and the questions that cut through to what is actually happening on the ground.
The Dual Compliance Environment Every RTO Auditor Must Understand
Most organisations audited against ISO 9001 have one primary compliance framework to satisfy. RTOs have at least two, and in some cases more if they deliver training under specific funding contracts or in regulated industries like aged care or construction.
The Standards for RTOs 2015, administered by ASQA, set out requirements for training and assessment quality, learner support, marketing, fees, and governance. ISO 9001 sits alongside this as a quality management system standard. In practice, a well designed RTO quality system will use ISO 9001 as the backbone and map the RTO Standards through it rather than running two separate systems.
As an auditor, your job is not to audit ASQA compliance directly unless that is your explicit brief. But you do need to understand the regulatory context well enough to recognise when a quality system gap also creates a compliance risk. When training records are incomplete, that is not just an ISO 9001 Clause 7.5 finding. It is potentially a significant regulatory exposure for the RTO.
Exemplar Global Certified Training ProviderRTP No. 310970
Where to Start: Understanding the Training and Assessment Strategy
The Training and Assessment Strategy, commonly called the TAS, is the central document in any RTO quality system. It describes how each qualification or unit of competency will be delivered and assessed, what resources are required, who the target learners are, and how the RTO ensures its approach meets the training package requirements.
When you begin an audit at an RTO, the TAS is one of the first documents you should request. Not because you will read it cover to cover before anything else, but because it tells you what the RTO says it does. Everything you examine during the audit should be traceable back to what is described in the TAS.
Questions to Ask When Reviewing the TAS
- Does the TAS accurately reflect how training is actually being delivered, or is it a document that was written once and never updated?
- Has the TAS been reviewed when changes occurred, such as new trainers, new delivery modes, or changes to the training package?
- Does the TAS demonstrate that the RTO has considered the needs of its target learner cohort?
- Is there evidence that industry consultation informed the TAS, particularly around assessment requirements?
A TAS that reads like a template with minimal customisation is a red flag. Push into the detail. Ask the quality manager or training manager to walk you through how the TAS was developed and when it was last reviewed. The answers will tell you a great deal about the maturity of the quality system.
Auditing Training Records: What Good Looks Like
Training records are the backbone of evidence in an RTO audit. Under ISO 9001 Clause 7.5, the organisation must maintain documented information as evidence of conformity. For an RTO, this translates into an obligation to retain comprehensive records of learner enrolment, attendance, assessment, results, and qualification issuance.
The problem auditors encounter most often is not that records do not exist. It is that they are incomplete, inconsistent, or stored in a way that makes them difficult to retrieve and verify. A student management system might hold enrolment data while assessment records sit in a trainer's personal folder on a shared drive. Neither system is complete on its own, and the connection between them is unclear.
What to Sample When Auditing Training Records
Select a sample of learner files across different qualifications, delivery modes, and trainers. For each file, check the following:
- Is there a signed enrolment agreement or equivalent document capturing the learner's details and the qualification they are enrolled in?
- Are attendance records present for any face to face or synchronous online sessions?
- Is there a complete set of assessment submissions and marking records for each unit of competency?
- Has each unit been assessed as competent or not yet competent, with that result recorded consistently?
- Where a learner was initially assessed as not yet competent, is there evidence of a reassessment opportunity being provided?
- Has the qualification been issued, and is the issuance date traceable to the completion of all required units?
Pay attention to the completeness of the assessment record, not just whether a result has been recorded. An assessor marking a unit competent without retaining the actual assessment submission is a significant gap. Under the RTO Standards, assessors must retain sufficient evidence to demonstrate that assessment decisions were valid. Under ISO 9001, the organisation must retain documented information to provide confidence that processes have been carried out as planned.
Assessment Practices: The Most Technically Complex Area to Audit
Assessment is where RTOs most frequently receive findings from ASQA, and it is also where internal auditors often feel least confident. Assessment in a vocational education and training context is not the same as testing. It must be valid, reliable, flexible, and fair. These four principles, drawn from the Standards for RTOs, give you a framework for evaluating whether assessment practices are sound.
Validity
Does the assessment actually measure the skills and knowledge described in the unit of competency? An auditor does not need to be a subject matter expert to test this. Ask the assessor to explain how their assessment tool maps to the performance criteria and knowledge evidence in the unit. If they cannot articulate this clearly, or if the mapping document is vague, that is a finding worth pursuing.
Reliability
Would two different assessors make the same decision when looking at the same piece of evidence? This is about consistency. Look for assessor marking guides, standardisation records, and evidence that assessors have participated in calibration activities. A common finding is that an RTO has multiple trainers delivering the same unit but no documented process for ensuring they are making consistent assessment decisions.
Flexibility
Does the RTO provide reasonable adjustments for learners with identified needs? Check whether the enrolment process captures learner needs and whether there is a documented process for implementing adjustments. Flexibility also includes recognition of prior learning, or RPL. If the RTO offers RPL, check that the RPL process is documented and that evidence requirements are clearly communicated to learners.
Fairness
Are learners informed of assessment requirements before assessment occurs? Is the appeals process documented and communicated? Review a sample of assessment instructions provided to learners and check whether the appeals process is referenced in those instructions or in the student handbook.
Trainer and Assessor Competence: A Critical Evidence Trail
Under the Standards for RTOs, trainers and assessors must hold the qualifications and vocational competency required to deliver and assess the units they are responsible for. This creates a specific evidence trail that you must verify during an audit.
Request a list of all trainers and assessors currently engaged by the RTO, including contractors and sessional staff. For each person delivering or assessing a specific unit or qualification, check:
- Do they hold the Certificate IV in Training and Assessment, or an equivalent qualification recognised under the Standards?
- Do they hold the vocational qualification at the level they are delivering, or can they demonstrate equivalent vocational competency through another pathway?
- Is there evidence of current industry engagement, meaning they are keeping their vocational knowledge and skills up to date?
- Are their qualifications and currency documented in a training and assessment register or equivalent record?
Industry currency is an area where RTOs often struggle. A trainer might hold a relevant qualification but have not worked in the industry for several years. The RTO needs to demonstrate that trainers are maintaining their currency, not just that they once held relevant qualifications. Ask for evidence of recent industry engagement: site visits, industry memberships, participation in professional development, or part time work in the relevant field.
This connects directly to ISO 9001 Clause 7.2 on competence. The organisation must determine the necessary competence of persons doing work that affects quality, ensure those persons are competent, and retain documented information as evidence. In an RTO context, this means the trainer register must be current, accurate, and linked to objective evidence of qualification and currency. For a deeper look at how to audit competence records more broadly, see our article on auditing competence and training records.
Continuous Improvement: Is the Quality System Actually Working?
One of the most telling indicators of a mature RTO quality system is what happens when things go wrong. Check the nonconformity and corrective action records. Are they being raised? Are they being investigated to root cause? Are the corrective actions being verified for effectiveness?
Many RTOs have a complaints and appeals process that satisfies the RTO Standards requirement, but treat it as a separate administrative function rather than feeding into the quality management system. Complaints from learners, employer feedback, and audit findings from ASQA should all be flowing into the corrective action process. If they are not, the quality system is not functioning as intended.
What to Look for in Learner and Employer Feedback
RTOs are required to collect feedback from learners and employers and use it to improve training and assessment. Ask to see the feedback data collected over the past twelve months and then ask what changed as a result. This is the key question. If the quality manager can show you feedback, but cannot tell you what improvements were made in response, the feedback loop is broken.
Look at the management review records. Does the management review include analysis of learner outcomes, completion rates, employer satisfaction, and assessment validation results? These are the performance indicators that should be driving improvement decisions at the leadership level. For guidance on auditing management review effectively, our article on how to conduct an effective management review under ISO 9001 covers the key inputs and outputs to examine.
Validation of Assessment: The Process RTOs Most Often Get Wrong
Assessment validation is a requirement under the RTO Standards that has no direct equivalent in ISO 9001, but it maps neatly onto the concept of process monitoring and review. RTOs must validate their assessment tools and practices against the training package requirements at least once every five years for each unit, with at least 50 percent of products validated within the first three years of the five year cycle.
In practice, many RTOs have a validation schedule that exists on paper but is not being executed. Ask to see the validation schedule and then ask for evidence that validations have been conducted as planned. The evidence should include validation records showing who participated, what was reviewed, what the outcome was, and what actions were taken.
A common finding is that validation has been conducted by a single internal person with no external input. The Standards require that validation involve people with the appropriate expertise, which in most cases means including someone with current vocational competency in the relevant industry area. If the RTO cannot demonstrate that their validation process meets this requirement, that is a finding under both the RTO Standards and ISO 9001 Clause 9.1, which requires the organisation to monitor, measure, analyse, and evaluate the quality management system.
Document Control in an RTO Context
RTOs generate a significant volume of documents: training packages, learning materials, assessment tools, policy documents, student handbooks, and marketing materials. Document control is frequently an area of weakness, particularly in RTOs that have grown quickly or that rely heavily on third party materials.
Check whether the document control procedure covers all document types in use, including training and assessment resources sourced from third parties. A common gap is that the RTO has a document register for its internal policies but has no process for reviewing and approving third party learning resources before they are used with learners.
Also check version control. When a training package is updated, does the RTO have a process for identifying which of its assessment tools are affected and updating them accordingly? Training package updates are a known trigger for compliance issues, and a quality system that does not have a change management process linked to training package updates is vulnerable.
Exemplar Global Certified Training ProviderRTP No. 310970Common Nonconformities in RTO Quality Audits
Based on the patterns that emerge in practice, the following are the most frequently raised findings when auditing quality management at an RTO:
- Incomplete learner assessment records, where assessment submissions have not been retained or are not linked to the result recorded in the student management system.
- Trainer and assessor register not current, with missing evidence of vocational currency or qualifications for staff delivering specific units.
- TAS not reflecting actual delivery, particularly where delivery mode or resources have changed without the TAS being updated.
- Validation not conducted as scheduled, or conducted without sufficient external expertise or documented outcomes.
- Feedback not driving improvement, where learner and employer feedback is collected but not analysed or used to make changes.
- Complaints not integrated into the corrective action process, treated instead as administrative matters resolved in isolation.
- Document control gaps for third party resources, where learning materials from external providers have not been reviewed and approved before use.
Practical Advice for Auditors New to the RTO Sector
If you are an experienced ISO 9001 auditor stepping into an RTO for the first time, the terminology will be unfamiliar but the underlying audit logic is the same. You are still asking whether the organisation does what it says it does, whether it can demonstrate that through objective evidence, and whether the system is driving genuine improvement.
Spend time before the audit familiarising yourself with the Standards for RTOs 2015 and the relevant training packages for the qualifications the RTO delivers. You do not need to become a vocational education expert, but you do need to understand enough about the regulatory context to ask informed questions and recognise when an answer does not quite add up.
Interview trainers and assessors as well as the quality manager. In many RTOs, the quality system exists at the management level but has not been effectively communicated to the people delivering training. A trainer who cannot tell you where to find the assessment validation schedule or what the appeals process looks like is telling you something important about the effectiveness of the quality system.
If you are looking to build your auditing skills across a range of sectors and process types, the ISO 9001 Lead Auditor and Internal Auditor courses at Audit Workshop are built around practical audit scenarios drawn from real audit experience. The training covers how to gather evidence, conduct interviews, and write findings that actually drive improvement, which is exactly the skill set you need when you are working through a complex environment like an RTO.
