Quarterly internal audits are becoming the baseline expectation for Registered Training Organisations (RTOs) in Australia, not an advanced compliance practice. Under the 2025 Standards for RTOs, providers must demonstrate ongoing, evidence-based self-assurance rather than a once-a-year compliance check. As a result, an annual internal audit cycle is now considered under-resourced by many compliance specialists and, increasingly, by ASQA itself.
This shift catches many training providers off guard. For years, an annual internal audit was seen as thorough. Today, it’s closer to the minimum, and RTOs that haven’t adjusted their audit cadence are quietly falling behind before they even know it.
What is a quarterly internal audit?
A quarterly internal audit is a structured, self-conducted review of an RTO’s compliance and quality systems, run four times a year instead of once. It covers governance, training and assessment quality, trainer currency, student support, and record-keeping.
Unlike an ASQA performance assessment, a quarterly internal audit is not run by the regulator. Instead, it’s an internal self-assurance mechanism the RTO designs, schedules, and documents itself.
The 2025 Standards for RTOs, which replaced the 2015 Standards, formalised this expectation. The 2025 Standards for Registered Training Organisations came into effect on 1 July 2025, and are built around a more flexible, robust and quality-driven approach to regulation. Compliance under this framework is organised across three parts: the Outcome Standards, Compliance Standards, and Credential Policy.
Why does a quarterly internal audit schedule matter?
Internal audit frequency matters because the regulatory model itself has changed. ASQA no longer checks paperwork against a fixed template; it tests whether an RTO can reason through its own compliance in real time.
According to compliance specialists who have worked through audits under both frameworks, the 2025 Standards expect RTOs to interpret each requirement in their own operating context, take a defensible position, and back it up with evidence over time, rather than simply checking folders. An annual snapshot can’t produce that kind of ongoing evidence trail.
The figures reinforce the value of proactive compliance reviews. Between July and December 2024, 79% of ASQA’s 175 risk-based performance assessments found non-compliance. Historical data also shows that rectification did not always resolve issues, supporting regular internal review rather than waiting for regulatory scrutiny.
How does a quarterly internal audit work?
A functioning quarterly internal audit follows a repeatable cycle rather than a one-off event.
Step 1: Define your audit scope.
Each quarter, map a slice of your operations against the relevant Standard — for example, assessment validity one quarter, trainer currency and PD the next.
Step 2: Collect real evidence, not just documents.
Auditors under the new framework want to see outcomes, not folders. Pull learner outcome data, complaint logs, and moderation records rather than relying on policy documents alone.
Step 3: Test, don't just tick.
Sample actual assessment decisions, trainer files, and student support interactions. Ask whether the evidence would survive scrutiny from an external auditor.
Step 4: Document findings and close the loop.
Standard 4.4 under the new framework requires providers to "use data, outcomes, and feedback to continuously improve the quality of services". A quarterly cycle creates four opportunities a year to show that loop is genuinely closing.
Step 5: Leadership report.
Findings should go to your RTO's governance body each quarter, not sit in a compliance folder until the next external audit looms.
What are the benefits of quarterly internal audits?
- Earlier detection of small issues, before they compound into serious non-compliance findings.
- Stronger self-assurance evidence, which is now a documented expectation rather than a nice-to-have.
- Reduced audit-time stress, because evidence already exists in an organised, current form.
- Better trainer and assessor accountability, through more frequent currency and PD checks.
- Improved student outcomes, as assessment and support issues get corrected within a term, not a year.
- Lower risk of repeat non-compliance, addressing the pattern ASQA has flagged in rectification data.
What challenges should you consider?
Moving to a quarterly cycle isn’t without friction, particularly for smaller providers.
Resourcing is the biggest constraint.
Small and medium RTOs often run compliance with one or two staff wearing multiple hats. Quarterly audits demand more sustained time than most providers have budgeted for.
There's no official template to follow.
ASQA has deliberately avoided publishing a standard internal audit tool. As one sector commentary put it, the regulator's response to requests for an internal audit checklist aligned to the 2025 Standards was, for many providers, "deeply disappointing". RTOs must build their own audit frameworks largely from scratch.
Consistency between auditors can be shaky.
Because the Standards are outcomes-based rather than prescriptive, two internal reviewers can reach different conclusions from the same evidence. Clear internal guidance and calibration are essential to avoid this.
Audit fatigue is real.
Running four structured reviews a year, on top of validation, moderation, and day-to-day compliance work, can overwhelm teams without the right systems in place.
What are the best practices for quarterly internal audits?
- Stagger your audit scope across the year so you cover every Standard without reviewing everything at once each quarter.
- Build a simple, documented audit framework early, rather than waiting for ASQA guidance that may not arrive.
- Use data systems, not spreadsheets, to track trainer currency, complaints, and assessment outcomes in real time.
- Involve your RTO’s leadership in each cycle, since governance oversight is itself an audited requirement.
- Treat findings as improvement opportunities, not paperwork to file away — this is exactly what continuous improvement provisions require.
- Calibrate your internal auditors regularly so judgement stays consistent between reviewers and review periods.
Common mistakes to avoid
- Treating quarterly audits as a compressed version of the annual audit, instead of a genuinely different, ongoing process.
- Auditing documents instead of outcomes — checking that a policy exists rather than testing whether it’s actually working.
- Failing to close the loop, where findings are recorded but never acted on before the next audit.
- Running audits in isolation from governance, so leadership only hears about issues after an external audit flags them.
- Under-resourcing the function, assigning it to one already-stretched compliance officer with no real allocated time.
- Copying a generic checklist without adapting it to your RTO’s actual scope, cohort, and delivery mode.
The Self-Assurance Framework is not a folder, checklist, or once-a-year compliance exercise. It is the ongoing system your RTO uses to understand whether its operations meet regulatory requirements and deliver quality outcomes.
Frequently Asked Questions
Is a quarterly internal audit legally required under the 2025 Standards?
How is a quarterly internal audit different from an ASQA performance assessment?
Do small RTOs need to run full quarterly audits?
What should a quarterly internal audit cover?
Does ASQA provide an internal audit template?
No. ASQA has not published a standard internal audit checklist aligned to the 2025 Standards, so most RTOs build their own framework, often with support from VET compliance consultants.
