Work-Integrated Learning and the Risk Management Gap: Standard 1.8(2)(c) and What RTOs Are Missing

The 2025 Standards do not let providers outsource their duty of care to a host employer. Standard 1.8(2)(c) requires every RTO to hold its own documented strategies and procedures for identifying and managing the risks students face on work placement, whether or not the RTO controls the environment. When a student is on placement, the RTO owns the risk, and what that means for providers, host employers, students and the integrity of the competencies certified at the end is the subject of this analysis.

Who Owns the Risk

There is a compliance gap in work-integrated learning that has persisted across every iteration of the Standards for RTOs, and the 2025 framework has made it more visible, more consequential and harder to excuse. The gap is not in what the legislation requires. The requirements under Standard 1.8(2)(c) are clear: RTOs must have documented strategies and procedures in place to identify and manage risks associated with students using facilities, resources and equipment when undertaking work-integrated learning, work placements or other community-based learning as part of their training. The gap is in what providers actually do.

Across the sector, the dominant approach to work placement risk management can be summarised in a single uncomfortable sentence: most RTOs assume the host employer will take care of it. The assumption is understandable. The host employer controls the physical environment, owns the equipment and manages the day-to-day safety protocols. It feels logical that the entity with operational control should bear the risk management responsibility.

The 2025 Standards do not agree, and the consequences of misunderstanding this point are becoming increasingly serious.

1. What Standard 1.8(2)(c) Actually Requires

Standard 1.8 establishes that facilities, resources and equipment for each training product must be fit for purpose, safe, accessible and sufficient. The standard applies regardless of whether the RTO provides those facilities directly or whether they are provided by third parties. Standard 1.8(2)(c) specifically addresses the work placement context, requiring RTOs to maintain documented strategies and procedures to identify and manage risks associated with students using external facilities and equipment during work-integrated learning.

The language is deliberate. It does not say be aware of risks. It does not say ensure host employers manage risks. It says the RTO must have its own documented strategies and procedures. The obligation sits with the registered training organisation, not the host employer, not the student, and not a third-party broker who arranged the placement.

This means that every RTO offering qualifications with mandatory or optional work placement components must be able to produce, on request, a set of documented procedures that address how the organisation identifies the specific risks associated with each placement environment, how those risks are communicated to students before they commence, what mitigation strategies are in place to reduce identified risks, and what escalation pathways exist for students and host supervisors to report when conditions deteriorate or new risks emerge.

Generic risk assessment templates that could apply to any workplace in any industry do not satisfy this requirement. The strategies must be contextualised to the specific training product, the specific industry, and the specific types of facilities and equipment students will encounter. A risk management procedure for aged care placements should look fundamentally different from one designed for construction site placements, automotive workshop placements or commercial kitchen placements. The hazards differ, the equipment differs, the regulatory environment differs, and the strategies for managing risk must reflect those differences.

2. The Assumption That Creates the Gap

The most significant compliance failure in work-integrated learning is not the absence of paperwork. Most RTOs have some form of placement agreement or workplace assessment checklist. The failure is the assumption that underlies how those documents are used: the belief that once a host employer has signed an agreement and a site visit has been conducted, the RTO's risk management obligation is discharged.

This assumption produces a predictable pattern. The RTO signs a memorandum of understanding with a host employer. A staff member conducts an initial site visit and completes a checklist confirming that the workplace appears safe and adequately resourced. The student commences the placement. And from that point forward, the RTO's active risk management effectively stops. Nobody checks whether the equipment the student was promised access to is actually available. Nobody verifies whether the workplace supervisor has the time and capability to provide the level of oversight the student needs. Nobody follows up when the student mentions in passing that they have been assigned tasks outside the scope of their training product.

The RTO has performed a point-in-time assessment and treated it as ongoing assurance. But workplaces change. Staff turn over. Equipment breaks down or is repurposed. Safety protocols are relaxed under commercial pressure. A workplace that was safe and suitable on the day of the site visit may not remain so for the duration of the placement.

Under the 2025 Standards, the expectation is not a one-off verification. It is a system. Standard 1.8(2)(c) requires documented strategies and procedures, which implies ongoing processes, not a single checklist completed at the start of the placement and filed away. ASQA's practice guides reinforce this. The guidance on facilities, resources and equipment frames work placement risk as something to be actively identified and managed rather than assumed, and the risk management guidance treats risk registers as living documents to be reviewed, not static forms that gather dust in a compliance folder.

3. Where the Control Ends and the Obligation Does Not

The tension at the heart of Standard 1.8(2)(c) is that RTOs are held accountable for environments they do not control. This is not a flaw in the legislation. It is a deliberate regulatory design choice that reflects the reality of how competency-based training works.

When an RTO places a student in a host workplace, the RTO is making a representation that the environment is suitable for the student to practise and demonstrate the skills required by the training product. The student relies on that representation. The employer who eventually hires the graduate relies on the assumption that the competencies certified by the RTO were developed and assessed in appropriate conditions. The regulator relies on the RTO's assurance that its training and assessment practices, including those delivered in external environments, meet the Standards.

If the RTO cannot demonstrate that it actively identified and managed the risks of the placement environment, all of these assurances are hollow. The student may have been placed in a workshop where the equipment did not reflect current industry practice. The student may have been assigned to a supervisor who lacked the time or expertise to provide meaningful guidance. The student may have been exposed to safety hazards that were never identified because nobody from the RTO checked after the initial site visit. The following table sets out how the risk picture shifts between on-campus training and work-integrated learning.

4. The Practical Failures Auditors Keep Finding

The compliance failures under Standard 1.8(2)(c) are not theoretical. They are documented in audit findings across the sector, and they follow a consistent pattern that reveals how deeply the assumption of host employer responsibility has embedded itself in RTO practice.

The first and most common failure is the absence of clear communication channels that allow students to report when a host employer denies them adequate time or equipment to practise required skills. Students on placement are often reluctant to raise concerns because they fear jeopardising their relationship with the host employer or delaying their qualification. Without a confidential, accessible and clearly communicated reporting mechanism, these concerns go unvoiced and unaddressed. The student completes the placement having missed critical practice opportunities, and the RTO certifies competencies that were never adequately developed.

The second failure is the exclusion of third-party facilities from the RTO's self-assurance processes. Many RTOs conduct regular internal reviews of their own training facilities, checking equipment condition, safety compliance and resource adequacy, yet rarely extend the same scrutiny to host workplaces. The placement environment, which may be where the most critical practical competencies are developed and assessed, receives less quality assurance attention than the RTO's own classrooms. This is a fundamental mismatch between where the risk is concentrated and where the oversight is applied.

The third failure is the lack of formalised risk escalation pathways. When workplace conditions deteriorate unexpectedly, through equipment failure, a change in supervisory arrangements, a workplace safety incident or a host employer's financial difficulties, both the student and the host supervisor need a clear, documented process for escalating the issue to the RTO. In too many cases, that process does not exist. The student is left to navigate the situation alone, the host supervisor has no obligation to notify the RTO, and the RTO discovers the problem only when it surfaces during an audit or a complaint.

The fourth failure is reliance on generic, non-contextualised risk assessment forms. An RTO delivering qualifications across aged care, construction and hospitality cannot use the same risk assessment checklist for all three placement types. The hazards in an aged care facility, from manual handling to infection control, are fundamentally different from those on a construction site, where fall protection, electrical safety and heavy machinery present the primary concerns. A generic form that asks whether the workplace is safe without specifying what safety looks like in the relevant industry context provides no meaningful risk management function. It is a compliance artefact, not a risk management tool.

5. What a Compliant Risk Management System Looks Like

Building a work placement risk management system that satisfies Standard 1.8(2)(c) is not about creating more paperwork. It is about building a system that actually identifies risks, communicates them to the people who need to know, and triggers action when conditions change. The paperwork is the evidence of the system, not the system itself. A compliant system rests on four layers.

Across all four layers, the common thread is documentation. Not documentation for its own sake, but documentation that demonstrates a living, functioning system: risk assessments that are specific and current, verification records that confirm pre-placement conditions, monitoring logs that show ongoing engagement during the placement, and review outcomes that feed back into continuous improvement.

6. The Intersection with Other Standards

Standard 1.8(2)(c) does not operate in isolation. The risk management obligations for work-integrated learning intersect with several other standards, and RTOs that treat work placement risk as a standalone compliance item will miss these connections.

Standard 1.1 requires training to be structured and paced to provide sufficient time for instruction, practice, feedback and assessment. If a placement environment does not give the student adequate time to practise the required skills because the host prioritises operational needs over training needs, the RTO is failing Standard 1.1 as well as Standard 1.8. The two create a combined obligation: the placement environment must not only be safe but actually enable the learning the training product requires.

Standard 2.3 requires students to have access to trainers, assessors and support staff throughout the training product. During a placement, that access does not disappear. Students must know how to reach their RTO when they need guidance, when they encounter difficulties, or when they want to report a concern. If the placement management system does not maintain that connection, the student is effectively unsupported during a critical phase of their training.

Standard 4.3 requires RTOs to identify, manage and review risks to students, staff and the organisation. Work placement risk is a subset of that broader obligation. The risk register maintained under Standard 4.3 should include placement-related risks as a specific category, with identified mitigations, responsible persons and review frequencies. An RTO that maintains a comprehensive risk register for its internal operations but excludes work placement risks has a gap in its governance framework that an auditor will identify.

Standard 4.4 requires systematic monitoring and evaluation to support continuous improvement. Placement feedback, whether from students, host employers or the RTO's own monitoring, is a data source that should feed into the continuous improvement cycle. If the same issues recur across multiple placements or cohorts, the system should be generating action, not just recording the data.

7. Why This Matters More in 2026 Than It Did in 2015

The sector's reliance on work-integrated learning has grown significantly over the past decade. More qualifications now include mandatory placement hours. Industry expectations for work-ready graduates have intensified. Government funding models increasingly incentivise placement-based delivery. And the 2025 Standards, with their emphasis on outcome-based regulation, hold providers accountable not just for having placement procedures but for demonstrating that those procedures actually produce the intended outcomes: students who are safe, supported and able to develop the competencies their training product requires.

At the same time, the labour market pressures on host employers have intensified. Staffing shortages mean workplace supervisors have less time for student mentoring. Cost pressures mean equipment may not be replaced or maintained as frequently as training standards require. Operational demands mean students may be treated as additional labour rather than learners, assigned tasks that serve the employer's operational needs rather than the student's learning needs.

These are not reasons to reduce placement requirements. Work-integrated learning remains one of the most effective methods for developing genuine workplace competence. But they are reasons to take the obligation under Standard 1.8(2)(c) seriously, to build systems that actively monitor placement quality rather than assuming it, and to intervene when the evidence shows a placement environment is not meeting the standard the student deserves.

Conclusion: The Standard Is Not the Problem

Standard 1.8(2)(c) does not impose an unreasonable burden. It asks providers to do what any responsible organisation should do when it places a person in an environment it does not control: assess the risks, document the strategies for managing them, communicate expectations clearly to all parties, monitor conditions during the placement, and respond when things go wrong.

The compliance gap exists not because the requirement is unclear or excessive, but because many providers have operated for years on the assumption that the host employer is responsible for the student once the placement begins. The 2025 Standards make explicit that the assumption is wrong. The RTO retains its regulatory obligations regardless of where the training is delivered. The student's safety, the quality of their learning experience and the integrity of the competencies certified at the end all remain the RTO's responsibility.

Any RTO that includes work-integrated learning in a training product should review its placement risk management procedures against Standard 1.8(2)(c). Are the risk assessments specific to each training product and industry context? Do the monitoring processes extend beyond the initial site visit? Do students know how to report a problem during placement? Does the continuous improvement system capture placement feedback and act on it? Where the answer to any of these is uncertain, the gap is not in the Standard. It is in the system. And the time to close it is before the auditor arrives, not after.

References and Further Reading

Australian Skills Quality Authority (2025). Practice Guide: Facilities, Resources and Equipment. https://www.asqa.gov.au

Australian Skills Quality Authority (2025). Practice Guide: Risk Management. https://www.asqa.gov.au

National Vocational Education and Training Regulator (Outcome Standards for NVR Registered Training Organisations) Instrument 2025 (F2025L00354). https://www.legislation.gov.au

Safe Work Australia. Model Work Health and Safety Act and Regulations. https://www.safeworkaustralia.gov.au