Skip to main content
Australian Government Australian Skills Quality Authority
Report a tip-off  >
Practice Guides
  • Accountability
  • Assessment
  • Continuous improvement
  • Credential Policy
  • Diversity and inclusion
  • Facilities, resources and equipment
  • Feedback, complaints and appeals
  • Fit and Proper Person Requirements
  • Information and transparency
  • Information
  • Integrity of Nationally Recognised Training Products
  • Leadership and accountability
  • Recognition of Prior Learning and Credit Transfer
  • Risk management
  • Trainer and assessor competencies
  • Training
  • Training support
  • VET workforce management
  • Wellbeing
  • Home
  • RTOs
  • 2025 Standards for RTOs
  • Practice Guides
  • Practice Guide - Risk management

Practice Guide - Risk management

 

Key concepts

The following key concepts are covered in this practice guide on this page:

Standard 4.3

  • Risk identification and management
  • Financial risk
  • Conflict of interest
  • Risks to safety and wellbeing of children

Download a PDF copy: Practice Guide - Risk Management.pdf (250.04 KB)

 

Achieving these Standards in practice

 

The following lists examples of activities that may demonstrate compliance with this Standard, as well as risks to mitigate or control. These examples are not a complete list of every activity or risk, nor do all the activities listed need to be completed to achieve compliance. Rather, they are a guide and should be considered within the context, size, scale and student cohorts of your RTO’s operations. 

To help determine whether you have achieved this Standard refer to the self-assurance questions below.

 

Standard 4.3: Any risks to VET students, staff and the organisation itself are identified and managed.

 

 Performance indicators

An NVR registered training organisation demonstrates:

  1. it identifies, manages and reviews risks to VET students, staff and the organisation;
  2. how the financial position, financial performance and cashflows of the organisation are managed, monitored and understood by governing persons;
    Note: In accordance with section 24 of the Act, NVR registered training organisations must also comply with the Financial Viability Risk Assessment Requirements made under section 158 of the Act.
  3. it has a system for identifying, managing and disclosing any real or apparent conflicts of interest; and
  4. where it offers training or assessment to VET students aged under 18 – risks to their safety and wellbeing associated with the organisation’s delivery of the training or assessment are identified and managed:
    1. by having regard to the training content and modes of delivery; and
    2. in accordance with the National Principles for Child Safe Organisations, as in force from time to time.
      Note: Section 191A of the Act permits this instrument to make provision in relation to a matter by applying, adopting or incorporating any matter contained in another instrument or other writing as in force or existing from time to time.
  • Example activities and other considerations for compliance
    • You can demonstrate that you have systems in place to identify risks to students, staff, your organisation, and your continued compliance with the Standards.
    • You can demonstrate how you have determined appropriate risk mitigation strategies for identified risks and implemented them.
    • You can explain how the design of your risk management system has considered the context within which you operate and the risks that are most relevant to your RTO and students.
    • You can show how risk management is informed by strategic planning, environment scanning, relevant data and feedback from students, staff and regulators.
    • You have documented systems and strategies in place to anticipate, identify and treat financial risks, to ensure stability of your RTO’s financial position.
    • You can demonstrate how governing persons are involved in reviewing the financial plan and are regularly informed about the financial position and forecasts of the RTO, including how the position impacts the delivery of training and assessment in accordance with the Standards.
    • You can demonstrate that you have a business continuity plan which is reviewed regularly.
    • You have a documented conflict of interest policy and procedure which makes clear the process to identify and respond to conflicts, as well as details of how a disclosure of conflict can be made. You have an active process for managing actual, potential or perceived conflicts of interest.
    • You internally promote a culture of disclosure and ensure that governing persons have access to contemporary information about the appropriate management of conflicts of interest.
    • Where you offer training or assessment to students aged under 18, you:
      • have procedures in place to monitor and address risks to their safety and wellbeing, which are specific to this cohort
      • ensure all relevant employees, including those of third parties who are delivering to students under 18 years, are cleared to work with children
      • can demonstrate how your approach is consistent with the National Principles for Child Safe Organisations – for example through your child safety and wellbeing policy, child safe code of conduct or a charter of commitment to the safety and wellbeing of young people.
    • You regularly review your risk management approach and tools and have these reviews externally validated periodically as risk profiles change.
  • Known risks to quality outcomes
    • Solely relying on purchased risk management systems without tailoring them to be reflective of your actual operational environment, student cohort and contemporary risks.
    • Insufficient financial planning or management of financial risks.
    • Failure to review and assess the potential impact of ASQA’s regulatory risk priorities in the context of your operations. These are sector-wide risks that have the potential to impact the VET sector’s reputation, integrity, market health or student outcomes.
    • Aiming for technical compliance rather than actively managing risks to the outcomes intended by the Standards.
    • Failing to effectively monitor conflicts of interest, including third party conflicts of interest, which undermines quality and integrity of operations.
    • Not properly securing and protecting personal information and sensitive information, in line with privacy legislation and cybersecurity principles.
  • Self-assurance questions

    1

    What informs your understanding of the key risks to your RTO’s quality and integrity, students and your continued compliance with the Standards?

    2

    How do you know that your approach to risk identification and mitigation is effective and adequate?

    3

    How do you monitor the RTO’s financial position and ensure governing persons are aware of (and managing) financial risks?

    4

    How do you ensure staff and third parties are aware of the types of conflicts of interest that need to be disclosed and how these are to be documented and managed?

    5

    If you deliver to VET students under the age of 18, what practices do you have in place to embed the principles of child safe organisations?


    Related links

    • Revised Standards podcasts
    Was this page helpful?
    CAPTCHA

    Share

    Print
    Australian Government Australian Skills Quality Authority

    IntegrityQualityInnovation

    Footer

    • Guidance & Resources
    • How we regulate
    • About Us
    • CRICOS
    • 2025 Standards for RTOs
    • Our regulatory practice
    • Contact us
    • Students
    • Course accreditation
    • Privacy
    • Using this website

    Subscribe to our newsletter

    • Twitter
    • LinkedIn
    • YouTube

    IntegrityQualityInnovation

    Aboriginal flag Flag TI

    The Australian Skills Quality Authority acknowledges the traditional owners and custodians of country throughout Australia and acknowledges their continuing connection to land, sea and community. We pay our respects to the people, the cultures and the elders past, present and emerging.