The questions RTOs are asking about validation all circle the same anxiety: does "every training product" mean every unit or just the qualification, does a three-year licence compress the cycle, and what is the benchmark for sample size? The Outcome Standards 2025 answer each, but not in the way the old rules did. The fixed fifty per cent in three years quota is gone, replaced by a risk-based approach that demands documented reasoning and proportionate sampling rather than a blunt percentage. The documentation burden has gone up, not down. This article decodes what Standard 1.5 now requires, and what it means for RTOs, validators and the assessment judgements the system exists to protect.
The Anxiety Behind the Questions
Several questions submitted to ASQA at a recent sector webinar converged on the same validation anxiety. Does every training product mean all units of competency or only the AQF qualification? If an organisation has a three-year licence, must validation happen within three years rather than five? What is the benchmark for sample size under the risk-based approach? How is industry expert participation justified in audit? These questions reflect that the shift from the fixed fifty per cent in three years model under the 2015 Standards to the risk-based approach in the Outcome Standards 2025 has left many compliance teams unsure what they must do and how to document it. The shift is not a relaxation of the obligation. It is the replacement of a blunt quota with a system that demands genuine risk analysis, documented scheduling decisions and proportionate sampling, and the documentation burden has increased, not decreased.
1. What Is a Training Product?
Standard 1.5 requires validation for every training product on the scope of registration, and the webinar question asked whether that means all units or only the qualification. The definition resolves it. A training product means an AQF qualification, a skill set, a unit of competency, an accredited short course, and a module. Every item on the scope of registration falls within this definition, so validation must cover all of them, not merely the AQF qualifications.
The practical implication for large-scope RTOs is significant. A provider with five hundred units, thirty qualifications and ten skill sets has a validation obligation covering each as a distinct training product. The five-year maximum and risk-based scheduling determine how that obligation is distributed across the cycle; they do not reduce what must ultimately be validated. A useful nuance: an RTO that validates the assessment tools for a qualification, covering all component units, in a single activity has validated both the qualification and the component units at once, provided the record documents which training products, by code and title, the activity covered. Validating only at qualification level without documenting that the component units were reviewed is a documentation gap, even where the activity was substantively comprehensive.
|
Every Training Product, Not Just Qualifications |
|
The obligation reaches every AQF qualification, skill set, unit of competency, accredited short course and module on scope. For a large RTO this is a substantial inventory task, and there is no shortcut: a provider that cannot show it has identified and scheduled validation for every training product on its scope has a structural gap in its Standard 1.5 system, regardless of how thorough its individual validations are. |
2. The Five-Year Maximum and the Three-Year Licence
Standard 1.5(2)(b) requires every training product to be validated at least once every five years, and on a more frequent basis where the organisation becomes aware of risks to training outcomes, changes to the training product, or relevant feedback from students, trainers, assessors and industry. The five-year period is the outer boundary. The webinar question asked whether a three-year registration compresses the cycle to three years. It does not. The five-year maximum is set by the Standard, not by the licence period, so a three-year licence does not shorten the validation cycle.
The licence period does, however, have a practical implication. ASQA conducts performance assessments during or at the end of a registration period, and an RTO granted a three-year registration that has validated nothing in those three years cannot point to the five-year maximum as a defence. The risk-based approach requires a documented schedule showing active progress through the cycle, not deferral of the whole obligation to year four or five. At the start of any registration period, an RTO should be able to produce a schedule showing which products were validated in the previous period, which are due in the current period on their risk profile and the five-year maximum, and the planned sequence of activity. An RTO that cannot produce this at the start of a performance assessment has a Standard 1.5 gap.
|
A Three-Year Licence Does Not Mean Three Years |
|
The five-year maximum applies regardless of the length of the registration period. But a schedule that shows no validation activity in years one to three of a five-year cycle, then concentrates everything in the final years, is a risk management failure under Standard 4.3 even if it technically meets the five-year maximum. The Standard expects active, planned progress, not a deferred scramble. |
3. The Risk-Based Approach: What It Requires and What It Replaces
Under the Standards for RTOs 2015, the validation schedule required each training product to be validated at least once in five years, with at least half validated in the first three years. That fixed quota allowed technical compliance by validating any fifty per cent in three years, with no obligation to prioritise by risk. The Outcome Standards 2025 replace it. Standard 1.5(2)(c) requires the RTO to use a risk-based approach, informed by any risks to training outcomes, any changes to the training product, and any feedback from students, trainers, assessors and industry, to determine two things: which components of the assessment system for a training product are to be validated, and the sample size of assessments to be validated for that product.
That directly answers the webinar's sample-size question. There is no fixed numerical benchmark. The sample size is set by the risk-based approach for each product, and it must be justified, not asserted. The statutory triggers are specific: risks to training outcomes, changes to the product, and feedback from the four named sources, and in applying them RTOs commonly weigh practical considerations such as the complexity and volume of the product, the number and diversity of enrolments, the outcomes of previous validations, and the nature and level of the product. The crucial change from 2015 is that the schedule must now be documented and justified by reference to risk. Selecting products and recording the selection is no longer enough; the documentation must show that higher-risk products were prioritised and that each sample size follows from the risk identified.
|
A Replacement, Not a Relaxation |
|
The fixed fifty per cent in three years is gone, but what replaced it asks more, not less. An undocumented schedule is not a risk-based schedule, regardless of how many products it covers. A provider that assigns every product the same risk level without differentiation has not conducted a risk-based assessment. The quota was blunt but easy to evidence; the risk-based approach is sharper and demands genuine, documented reasoning. |
4. Risk Considerations for Priority and Sample Size
Within the statutory triggers, the following practical considerations help an RTO prioritise products and size samples defensibly. They operationalise the risk-based approach; they are not a separate statutory list.
|
Risk consideration |
Indicators |
Scheduling and sampling implication |
|
New or recently changed product |
New addition to scope; recently transitioned superseded unit; training package update within the last 12 months |
High priority; the sample should cover the tools reflecting post-change content, and validation cannot be deferred to the outer limit |
|
High enrolment volume |
Consistently high enrolments across cohorts; multiple delivery modes; wide geographic spread |
A larger sample to test consistency across cohorts and locations, since a larger enrolment base needs a larger sample to support valid conclusions |
|
High-risk or vulnerable cohort |
Health, community services, aged care, early childhood, emergency services; licensing or registration outcomes |
High priority regardless of volume; the sample must cover safety-critical and licensing-critical tools, and independent external validation is strongly advisable |
|
History of compliance concerns |
Prior validation issues not fully resolved; audit findings on assessment quality; student complaints; third-party delivery |
High priority; sample the previously identified tools plus adjacent ones to test whether concerns are systemic, and document the link to the prior finding |
|
Delivery or third-party change |
Recent shift to online delivery; delivery now by a third party; assessment environment changed from workplace to simulated |
High priority; the sample must include tools used in the changed or third-party context, because tools valid for one modality may not be valid for another |
|
Approaching the five-year maximum |
Not validated for four or more years; due before the maximum expires |
Immediate priority regardless of assessed risk, because the five-year maximum is an absolute boundary |
|
Low-risk, stable, recently validated |
Validated in the past two to three years with no significant findings; stable sector; no delivery changes |
Lower priority this cycle; the sample may be reduced from prior validations, with the rationale for reduced priority documented explicitly |
5. Building and Documenting the Risk-Based Schedule
A risk-based schedule is a living document, reviewed at least annually and whenever scope, delivery arrangements or risk profile change. It is the evidence Standard 1.5(2)(c) requires: that the RTO is actively managing validation through an informed, risk-responsive process. To be defensible, it must address four elements.
|
Element |
What it must contain |
|
Training product inventory |
Every product on scope, with code and title, date of last validation (or a note that none has occurred), planned validation year in the current cycle, and the risk tier assigned |
|
Risk assessment for each product |
The risk factors considered and the risk level assigned; a short risk narrative or a tick-box matrix per product, updated when circumstances change. It must not be generic; identical risk levels across all products is not a risk-based assessment |
|
Planned activity and sample-size justification |
For each product scheduled this period: the planned date or quarter, the sample size and its justification by reference to the identified risk, the tools to be reviewed, and the planned panel composition |
|
Validation outcomes register |
After each activity: the date completed, the tools reviewed, the sample size used, the panel composition, the key findings, and the improvement actions arising. A schedule recording planned but not completed activity is not a functioning system |
The following illustrative extract shows the level of specificity required and the connection between risk and scheduling. It is illustrative, and RTOs should build their own against their actual scope.
|
Training product |
Risk level |
Validation year |
Sample |
Validator composition |
|
CHC43015 Certificate IV in Ageing Support |
High: vulnerable cohort, recent shift to blended delivery, not validated since 2022 |
Year 1 (current) |
All tools for the six highest-enrolment units |
Internal assessor, external validator with aged care experience, industry representative from an aged care provider |
|
BSB50420 Diploma of Leadership and Management |
Medium: stable, validated 2023, no significant changes, high enrolment |
Year 2 |
Three tools per unit for four core units |
Two internal assessors, one external validator with a business management background |
|
HLTAID011 Provide First Aid |
High: licensing outcome, recent guideline update, high volume |
Year 1 (current) |
All tools for all units |
Internal assessor with current HLT currency, external validator, industry representative with emergency services background |
|
BSB30120 Certificate III in Business |
Low: validated 2023, no findings, stable delivery |
Year 4 |
Two tools per unit for three elective units |
One internal assessor, one external validator |
|
CHCECE050 Work in early childhood education and care (standalone unit) |
High: not validated since added to scope in 2024, restricted observation context |
Year 1 (current) |
All tools for the unit |
Internal assessor, external validator with an ECE qualification, a centre director from a registered service |
6. Who May Validate: The Credential Policy and the TAE Rule
Standard 1.5, read with the Credential Policy, requires validation to be conducted by people who collectively hold relevant industry competencies and current industry knowledge, and who hold the validation credentials the Credential Policy specifies. Section 3A of the Credential Policy governs validation of training products other than those from the TAE Training Package, and requires at least one person on the panel to hold one of: a Certificate IV in Training and Assessment (TAE40122, TAE40116 or TAE40110); an Assessor Skill Set (TAESS00019, TAESS00011 or TAESS00001, or successors); TAESS00024 together with a secondary teaching qualification; or a diploma or higher qualification in adult education or VET. The phrase at least one means the credential requirement is met if one panel member qualifies, even if others do not.
For products from the TAE Training Package that enable individuals to make assessment judgements, the requirements are stricter, reflecting Standard 1.5(2)(d) and the Credential Policy's TAE validation provisions. Validation must be conducted after the first cohort completes, the validator must hold the TAE product at least to the level being validated, and, importantly, the validation must be undertaken by a person independent of the RTO, that is, someone not employed or subcontracted by the RTO to train or assess in those products. An earlier article in this series examined the TAE requirement in detail.
|
The Credential Is Necessary, Not Sufficient |
|
Holding a Section 3A credential is a necessary condition for validation, not a sufficient one. Standard 1.5 also requires the panel to collectively hold the industry competencies and current practice knowledge relevant to the training product: aged care knowledge for an aged care qualification, construction knowledge for a construction trade qualification. Both the credential and the industry expertise must be present, and both must be documented. A separate, general independence expectation also applies: the person who designed or delivered the assessment cannot solely determine the validation outcome. |
7. Documenting Industry Expert Participation
A webinar question asked how an RTO justifies the active participation of an industry expert in external validation. Industry experts are often not credentialled validators, so their participation is as industry knowledge contributors rather than as the credentialled validator. The collective-competence framework accommodates this, but the documentation must reflect it accurately. The validation report should record the expert's name, employer, role and industry experience; the specific industry knowledge they contributed; which tools they reviewed and what they observed; how their input informed the findings; and a signed declaration of participation and independence. It must also identify separately which panel member holds the credential, because the credentialled validator function and the industry expert function are distinct and both must be documented.
Where an expert raises a concern that an assessment tool does not reflect current industry practice, or that the assessment conditions differ from real workplace conditions, that input is among the most valuable evidence a validation can produce, because it speaks directly to whether the assessment system is consistent with the training product and current industry practice. The report should record those observations specifically, not as a general endorsement. Recruiting experts requires forward planning, and RTOs should maintain a register of industry contacts who have agreed in principle to participate, with their sector expertise, availability and prior participation. A validation that needs an expert but has none identified is a scheduling failure, not a Standards exception.
8. Validation Outcomes and Continuous Improvement
Validation exists to confirm that the assessment system produces judgements consistent with the training product, and to drive improvement where it does not. Its outcomes must therefore inform changes to assessment tools and training and assessment strategies, and feed the continuous improvement system under Standard 4.4, which expressly draws on validation outcomes as one of its data sources. This connection has a direct audit implication: an auditor will not merely confirm that validations occurred and reports exist. They will look for evidence that findings produced documented changes.
The improvement actions arising from validation should be recorded in the Standard 4.4 register with the specific finding, the action proposed, the responsible person, the timeframe, and the mechanism for confirming the action was implemented and effective. Where a finding is significant, for example that a tool is not valid for a unit or that assessors are making incorrect judgements, the action must be prioritised and its implementation verified before further assessment using the affected tool.
|
Validation Without Improvement Is Activity, Not Compliance |
|
An RTO that validates consistently but never changes its tools, strategies or policies as a result has not used validation for its purpose. The chain from finding to action to verified implementation is what an auditor looks for, and what distinguishes a genuine quality system from a folder of completed reports. Validation is not finished when the report is written. It is finished when the improvement is embedded. |
9. What This Means for RTOs
For an RTO building a defensible validation system, the work falls in a clear order.
First, inventory the scope and build the schedule on documented risk. List every training product, qualifications, skill sets, units, short courses and modules; assign and briefly justify a risk level for each, and schedule higher-risk products earlier with larger, justified samples. The schedule, not the individual report, is the first thing a performance assessment will test, and an undocumented or undifferentiated schedule fails the risk-based requirement.
Second, get the panel right and document both halves. Ensure at least one validator holds a Credential Policy Section 3A credential, that the panel collectively holds relevant industry competence, and that the designer or deliverer of the assessment does not solely determine the outcome. For TAE Training Package products, use an independent validator after the first cohort. Document the credentialled function and the industry expert function separately.
Third, close the loop into continuous improvement. Record findings and improvement actions in the Standard 4.4 register, assign and verify them, and prioritise significant findings before further use of the affected tool. A schedule that records planned activity but no outcomes, or outcomes but no actions, is not a functioning system.
10. Conclusion: From Quota to Reasoned Judgement
The move from a fixed quota to a risk-based approach is the defining change in validation under the 2025 Standards, and it is easy to misread as a loosening. It is the opposite. The old fifty per cent in three years could be satisfied by counting; the new approach must be satisfied by reasoning, documented, product by product, and tied to the risks, changes and feedback the Standard names. The questions RTOs are asking, about training products, licence periods, sample sizes and industry experts, all resolve to the same underlying expectation: that the RTO can show, in writing, why it validated what it validated, when, to what depth, and with whom, and what it did with the findings.
Validation has never been a folder to fill. Under the Outcome Standards, it is a managed, risk-responsive system that protects the integrity of the judgements on which every qualification rests. The RTOs that treat it as reasoning to be documented, rather than a quota to be met, will find the Standard gives them exactly the flexibility they need. The ones that treat it as paperwork will find that a schedule without reasoning, and a validation without improvement, satisfies neither the Standard nor its purpose.
|
Summary: Validation Under Standard 1.5 |
|
1. Training product means every AQF qualification, skill set, unit of competency, accredited short course and module on scope; validation covers all of them, not just qualifications. 2. Validating a qualification can cover its component units in one activity, provided the record documents each product by code and title. 3. The five-year maximum is set by the Standard, not the licence period; a three-year licence does not compress the cycle. 4. A schedule with no activity in the early years and everything deferred to the end is a risk management failure even if it meets the five-year maximum. 5. The fixed fifty per cent in three years is replaced by a risk-based approach under Standard 1.5(2)(c), informed by risks to training outcomes, changes to the product, and feedback from students, trainers, assessors and industry. 6. The risk-based approach determines which components are validated and the sample size; there is no fixed numerical benchmark, but the sample must be justified. 7. The schedule must be documented and justified, with four elements: inventory, per-product risk assessment, planned activity with sample justification, and an outcomes register. 8. At least one validator must hold a Credential Policy Section 3A credential, and the panel must collectively hold relevant industry competence; both must be documented. 9. TAE Training Package products that enable assessment judgements require validation after the first cohort by an independent validator who holds the product at least to the level being validated. 10. Validation outcomes must inform documented changes and feed the Standard 4.4 continuous improvement cycle; validation without improvement is activity, not compliance. |
References and Further Reading
Federal Register of Legislation (2025). National Vocational Education and Training Regulator (Outcome Standards for NVR Registered Training Organisations) Instrument 2025, Outcome Standard 1.5 and the definition of training product.
Department of Employment and Workplace Relations / training.gov.au (2025). Credential Policy, Section 3A (validation of assessment for training products excluding the TAE Training Package) and the TAE Training Package validation provisions.
Australian Skills Quality Authority (2025). Practice Guides on Assessment and on the Credential Policy; and the 2025 Standards FAQs.
Government of Western Australia (2025). Fact Sheet: Assessment Validation.
