RTO registration, audit preparation and compliance consulting
RTO Training and Consulting Group is the consulting practice that helps registered training organisations start, operate and stay compliant.
We work with providers applying for initial registration, providers adding qualifications to scope, and providers preparing for or responding to regulatory audit. The work is practical: building the systems, records and evidence that show a training organisation does what it says it does. This site explains how that work is actually done, so you can judge whether it is what you need.
What registration actually obliges you to do
A Registered Training Organisation is an entity approved to deliver nationally recognised training and to issue nationally recognised qualifications and statements of attainment. Approval comes from a regulator, in most cases the Australian Skills Quality Authority, and it is granted against a defined scope of registration: a specific list of qualifications, skill sets and units the provider may deliver and assess. Registration is not a licence to teach in general. It is a permission to issue particular credentials, on particular terms, under continuing conditions. Everything that follows in this practice flows from that single distinction, because most disputes with a regulator are about whether the provider stayed inside the terms it was granted.
The obligations attached to registration are ongoing, not one off. A provider must deliver training and assessment consistent with the training package or accredited course it holds on scope, hold and maintain the assessment tools it uses, employ trainers and assessors with the required vocational competency and credentials, and keep records that allow a third party to reconstruct what happened to any given student. It must give accurate information to prospective students before they enrol, honour what it advertised, protect fees paid in advance, handle complaints and appeals fairly, and report data and changes to the regulator when required. None of these obligations pause when the business gets busy.
The practical consequence is that an RTO is two organisations at once. There is the teaching business, which recruits, trains, assesses and issues. Then there is the evidence business, which records what the teaching business did, in a form that survives being examined later by someone who was not there. Providers get into trouble when the second organisation is treated as administrative overhead rather than as core operations. Our consulting work is largely about building the second organisation so it runs alongside the first without slowing it down, and so the answer to a regulator's question already exists rather than having to be assembled under pressure.
Initial registration: what the application really involves
An application for initial registration is not a form with attachments. It is a demonstration that a functioning training organisation already exists on paper and is ready to operate on day one. The applicant has to show who controls the entity, who holds financial and educational responsibility, what will be delivered and where, how students will be recruited and informed, how training will be scheduled and resourced, how assessment will be conducted and judged, and how the whole thing will be governed and reviewed. The regulator reads the application as a claim about future conduct and then tests whether that claim is credible.
Applications commonly fail for reasons that have nothing to do with the applicant's intentions. The proposed scope is too broad for the resources described. The training and assessment strategies are generic documents that do not match the actual delivery mode, duration, cohort or facilities named elsewhere in the application. The assessment tools do not address every requirement of the units chosen, or do not include clear benchmarks that tell an assessor what a satisfactory response looks like. Staff credentials are asserted but not evidenced. The financial viability information does not support the delivery volumes forecast. Each of these is fixable before lodgement and expensive to fix afterwards.
We approach initial registration by building the operating model first and the application second. That means settling the scope you can genuinely resource, mapping delivery against real facilities, equipment and industry access, recruiting or confirming trainers against the credential and currency requirements, and writing training and assessment strategies that describe what will actually occur rather than what sounds acceptable. Policies come after the operating model, because a policy written before the practice exists usually describes nothing. Where assessment resources need to be developed or reviewed, that work sits alongside the application rather than being deferred, since assessment quality is where scrutiny concentrates.
Adding qualifications is an operational decision, not a paperwork exercise
Extending scope looks straightforward from the outside: nominate the new qualifications, supply the strategies and tools, wait for approval. In practice a scope extension asks the same questions as initial registration, applied to something the provider has not delivered before. Can you resource it? Do you have trainers with vocational competency in the new field and current industry skills, not just a teaching credential? Do you have the facilities, equipment, software, simulated environments or workplace arrangements the training package expects? Can you support work placement if the qualification assumes it? A provider that answers these questions honestly often narrows its proposed additions before lodging.
The higher risk additions are the ones with mandated practical components, licensing outcomes, regulated industry requirements or supervised placement hours. These qualifications carry expectations that sit outside the provider's own documentation, including third party arrangements with host organisations and evidence that supervisors understand their role. Adding such qualifications on the strength of purchased resources alone is a recurring cause of later findings. Purchased resources can be a sound starting point, but they are written for a generic provider, and the regulator assesses your delivery, in your context, with your staff. Contextualisation is the work, and it must be documented as a deliberate process.
We treat a scope extension as a small business case before it becomes an application. That covers demand and enrolment forecasts, trainer sourcing, cost of resources and equipment, delivery mode, expected duration of the program with a defensible rationale for the amount of training, and the assessment system that will be used. Where the analysis shows the provider is not ready, saying so early is cheaper than a refused application or a finding at the next audit. Where it shows readiness, the resulting documents are coherent, because they were derived from the same operational plan rather than assembled from templates.
What an auditor looks at, and what evidence means
An audit is a structured test of whether your practice matches your documentation. The auditor will typically examine your training and assessment strategies, the assessment tools you actually use, completed student assessment evidence and the judgements recorded against it, trainer and assessor credential files, marketing and pre enrolment information, student files including enrolment and completion records, validation records, complaints and appeals records, and your governance and continuous improvement records. Interviews with staff, trainers and sometimes students test whether the documents describe reality. Nothing about this process is designed to catch you out, but it is designed to be verified rather than accepted.
The distinction that matters most is between having a policy and being able to show it operates. A complaints policy is a claim that complaints are received, recorded, investigated, resolved and reviewed. The evidence that the claim is true is a register, dated correspondence, records of decisions, and some sign that outcomes fed back into practice. The same logic applies everywhere. A validation schedule is a claim; validation records with participants, samples examined, findings and actions taken are the proof. Providers who prepare well spend their time locating and organising proof, not rewriting policies that were already adequate.
Preparation is most useful when it is done as an internal audit against the same questions the regulator will ask, with samples pulled at random rather than selected. That surfaces the gaps that only appear in real files: a missing signature, an assessor judgement recorded without evidence attached, a student enrolled before the required information was provided, a trainer whose currency evidence stops several years ago. Fixing those before an audit is legitimate and expected. Creating documents after the fact and presenting them as contemporaneous is not, and it converts a manageable finding into a serious integrity problem. We do not do it and we advise clients firmly against it.
- Scope of registration
- The specific qualifications, skill sets and units a provider is approved to deliver and to issue credentials for.
- Training and assessment strategy
- The document describing how a qualification will be delivered and assessed for a particular cohort, including mode, duration, staff and resources.
- Assessment tool
- The complete package used to gather and judge evidence, including instructions for the candidate, instructions for the assessor, the evidence to be collected and the benchmarks for judging it.
- Amount of training
- The reasoned volume of teaching, practice and support a cohort needs, which must be justified rather than simply asserted.
- Vocational competency
- An assessor's demonstrated skill and knowledge in the industry field being assessed, distinct from their training and assessment credential.
- Currency
- Evidence that a trainer's industry skills and their training and assessment practice remain up to date.
- Validation
- A quality review of assessment tools, processes and judgements by people who did not make the original decisions.
- Rectification
- The period after a finding in which a provider must correct the non compliance and demonstrate the correction with evidence.
The findings that recur, and what actually causes them
Across the sector the same clusters appear. Assessment tools that do not cover all requirements of a unit, or that lack benchmarks so two assessors could reasonably reach different conclusions. Student assessment evidence that is incomplete, unsigned, undated or missing entirely for some units. Training and assessment strategies that do not match delivery as it happened, particularly on duration and mode. Trainer files without current industry evidence. Marketing that names qualifications imprecisely, promises outcomes the provider cannot guarantee, or continues to advertise a superseded qualification. Validation that was scheduled but not conducted, or conducted without records that show what was examined.
The causes are almost always systemic rather than deliberate. A provider grows faster than its record keeping. Delivery is decentralised across trainers who each keep files their own way. A learning management system stores completions but not the underlying evidence. Someone leaves and takes the only working knowledge of a process with them. Documents are updated in one place and not in the three others that reference them. Version control is informal, so nobody can prove which tool was in use when a particular student was assessed. None of this reflects bad intent, and framing it as misconduct usually prevents the provider from fixing it.
Because the causes are systemic, the durable fixes are systemic too. A single controlled document register with versions and effective dates. One agreed student file structure with a checklist applied at enrolment, during delivery and at completion. A trainer file template with scheduled reminders for currency evidence. An assessment tool set that is reviewed on a cycle and locked against ad hoc edits. A marketing approval step that checks qualification titles and currency before anything is published. These controls are unglamorous, but they remove whole categories of finding permanently rather than one file at a time.
When a finding is made: how a response is built
A finding is a statement that, on the evidence available, some requirement was not met. The provider is then given a period to rectify and to demonstrate rectification. The temptation is to respond quickly with new documents. That is usually the wrong first move, because the finding often describes a symptom, and replacing the symptom leaves the mechanism in place. The first task is to read the finding precisely and establish its true scope: which units, which cohorts, which time period, which students were affected, and whether the same weakness exists in areas the auditor did not sample.
A credible response has four parts. It states the root cause plainly. It describes the corrective action taken, with the revised tools, processes or records attached and dated honestly as revisions. It addresses the students already affected, which may mean reassessment, gathering supplementary evidence, or in serious cases reviewing certificates already issued. Finally it sets out the preventive control that stops recurrence, along with how the provider will monitor that it holds. Responses that skip the third and fourth parts frequently fail, because they show a document was changed but not that the problem was resolved.
Timing and tone matter. Rectification periods are short, and the work of reassessing affected students or reconstructing legitimate evidence takes longer than most providers expect, so sequencing matters from day one. Communication with the regulator should be factual, complete and free of argument about matters that are not in dispute. Where a provider genuinely disagrees with a finding, that position can be put on the evidence, but it should be separated from the rectification work rather than substituted for it. We help build the response, assemble the evidence pack and keep the internal work on schedule. The provider remains responsible for its own compliance, and the response is stronger when it is visibly the provider's own.
Validation and moderation as continuing practice
Validation is a quality assurance activity in which people who did not make the original assessment decisions examine the tools, the process and a sample of judgements, and reach a view about whether the judgements were sound and consistent with the requirements of the unit. Moderation is the related activity of bringing assessors to a shared standard before or during assessment, so that decisions are comparable across markers, cohorts and sites. The two are complementary. Moderation prevents variation; validation detects it. A provider that does both has far fewer surprises when files are examined externally.
Treating validation as an annual event to be documented rather than a practice to be used is a common and costly mistake. Useful validation examines real completed student evidence, not just the blank tool, because a well designed tool can still be applied inconsistently. It records who took part, what was sampled, what was found, what was decided and what changed as a result. It includes at least one participant with current industry knowledge of the field. And it produces actions with owners and dates, which are then closed out with evidence. Records without actions are a paper trail to nowhere.
The scheduling question is not only how often, but what to prioritise. Newly added qualifications, high volume programs, units with licensing or safety implications, programs delivered by new or dispersed trainers, and anything assessed largely through third party or workplace evidence all deserve earlier and more frequent attention. Where independence is difficult to achieve in a small provider, external validators are appropriate, and within our group Validation Experts undertakes that work. The point of the exercise is not the certificate of completion for the meeting. It is the assurance that the qualifications you issue would stand up to examination by anyone.
Governance is harder to repair than documentation
The regulator's interest in governance is not ceremonial. It expects that the people who control and manage a training organisation are suitable to do so, that they understand the obligations of registration, and that they exercise genuine oversight of educational quality rather than delegating it entirely and looking away. Fit and proper considerations, in general terms, examine the history and conduct of the people with control: their record in the sector, their conduct in previous organisations, their compliance with the law, and their capacity to meet the responsibilities they are taking on. These questions attach to individuals and follow them between entities.
In practice, effective governance means a chief executive or principal officer who can answer questions about the organisation's compliance position without reading from a briefing prepared by someone else, and a governing body that receives real information: enrolment and completion data, validation outcomes, complaints and appeals, trainer credential status, findings and rectification progress, and financial position against forecast. It also means clear separation between educational judgement and commercial pressure, so that assessment decisions are not influenced by completion targets, funding milestones or the desire to keep a difficult client happy.
Governance failures are harder to fix than document failures because they cannot be remedied by producing a better artefact. A missing assessment benchmark can be written today. A pattern of decisions that shows educational quality was subordinated to revenue takes sustained, evidenced change to reverse, and the regulator will reasonably want to see that change operating over time before it is satisfied. This is why governance work belongs at the start of an engagement rather than at the end. Getting the decision rights, the reporting and the record of oversight right early makes every subsequent compliance task cheaper.
Choosing a consultant, and what a good engagement looks like
The consulting market in vocational education is uneven, and the differences are visible early if you know what to ask. Ask how the consultant works with your staff rather than around them, because a compliance system your team cannot operate will decay the moment the consultant leaves. Ask what happens to documents they produce: whether they are contextualised to your delivery or supplied unchanged to many providers. Ask how they handle a request to backdate or reconstruct records, and listen carefully to the answer. Ask what they will not do. A consultant who agrees to everything is not assessing your risk.
A sound engagement starts with a diagnostic rather than a deliverable. That means examining your current position against the obligations that apply to you, sampling real files, talking to the people who do the work, and producing a prioritised picture of where the risk sits. From there the work is sequenced: fix the things that affect students and credentials first, then the systems that generate recurring findings, then the documentation layer. Scope, responsibilities and timeframes should be written down, including what your team will do, because compliance work fails most often at the handover points.
Our practice covers initial registration, scope extension, audit preparation and rectification support, assessment system review, validation, and governance advice for boards and chief executives. It is supported by related work elsewhere in the group, including CAQA for broader compliance and quality assurance services. What we aim to leave behind is not a folder of policies but an organisation that can find its own evidence, notice its own problems and answer the regulator's questions from its ordinary records. That is the difference between passing an audit once and being a provider that is not anxious about the next one.
If you are preparing an application, an audit or a response, start with an honest look at where you actually stand, and build from there.