A risk register your board recognises and your coordinator can actually use.
Risks are scored inherent, residual and target on a five-by-five matrix, with likelihood and consequence kept alongside the score. On screen the language is plain; in the exports it is the ISO 31000 vocabulary your consultant and your auditor expect.
Nobody has to learn a second language to do their job.Plain English on screen, the formal risk vocabulary in the exports. Same records underneath.
Aligned to ISO 31000
The problem
Risk registers get written once and then quietly abandoned.
Most RTOs have a risk register. It was usually built for a board paper, in a language the people doing the work do not use, and it has not moved since. Meanwhile the actual early warnings — rectifications running long, trainer currency slipping, complaints clustering around one training product — sit in other systems and never reach the register at all.
The result is a document that satisfies a governance requirement while telling nobody anything. The register and the operational reality drift apart, and only one of them is real.
The register
Inherent, residual and target — with the two dimensions kept visible.
Likelihood and consequence are kept alongside the score rather than collapsed into it, because “almost certain and minor” is a completely different management problem from “unlikely and catastrophic”, even though both come to ten. Losing that distinction is how a register stops being useful.
Appetite is set in two dimensions as well, and an acceptance outside appetite has to be signed off and expires on a date. An acceptance that never expires is just a decision nobody revisits.
- Two-dimensional appetite
- Signed-off acceptances that expire
- 19 RTO risk templates
Early warning
Warnings written the way somebody would actually say them.
An early warning watches something specific and says what it means in plain English: rectification items have been open for eighteen days against a fourteen-day threshold, and that raises the likelihood on the linked risk from possible to likely. No index, no score anyone has to interpret.
Thirty-five warnings ship ready to use across thirteen sources — complaints, validation, documents, training strategies, improvement actions, trainer currency, registration and the rest — and you can build your own by naming the thing you want to watch and the point at which you want to hear about it.
- 35 plain-English early warnings, ready to switch on
- Build your own by naming what to watch and the threshold
- Warnings move the likelihood on the risk they are linked to
Rectification items open longer than 14 days
At risk- What it changed
- Likelihood raised from Possible to Likely
- Who was notified
- Compliance manager notified · CEO copied
- Linked risk
- RTO-RSK-2026-017
Entity risk profiles
Which of your training products deserves attention first.
Each training product is scored nought to five against the factors the model defines — safety and industry regulator interest, enrolment data, recent additions to scope, how often it has been offered, exposure to the training package, ASQA's own risk indicator, and whether recognition of prior learning is offered. Every factor carries equal weight, and the score and the band are computed rather than assigned.
A product nobody has scored yet is marked as such rather than counted as a zero. A missing input and a low risk are not the same thing, and a register that confuses them is worse than none.
What this replaces
A register that moves.
- A risk register written for one board paper and never reopenedA register the early warnings keep moving on their own
- A single score that hides whether it is likelihood or consequenceLikelihood and consequence kept visible alongside the score
- An acceptance outside appetite that nobody revisitsA signed-off acceptance with an expiry date
- Choosing what to validate by working down a listA weighted profile that says which product deserves attention first
Traceable to the Standards
Risk is managed as part of governance rather than alongside it, with early warnings drawing on the operational records the rest of the platform already holds.
Where this connects
Audit readiness
The 2025 Standards, clause by clause, with evidence against each one.
Read moreFindings that close themselves
A failed question becomes a rectification plan, a task, and a record.
Read moreAssessment validation
A stated sampling policy, eligible validators, recommendations that land.
Read more
Find out what your last audit would have looked like with a system behind it.
14 days, no credit card, and the Standards are already loaded when you sign in.