Blog VETos

Key Person Risk in NZ Vocational Training: A COO's Guide

If one person is the only one who knows how enrolment, SDR reporting or assessment approval really works, that is a compliance question as well as a continuity one.

20 October 2026 · 6 min readVETOS · NZ

The most dangerous process in your PTE is the one that runs perfectly because only one person knows how. Under the Private Training Establishment Rules 2026 and TEC's fixed reporting windows, that is no longer just a continuity worry. It is a compliance question, and it sits with you.

Why this lands on your desk

You own the systems behind enrolment, delivery, reporting and finance. If any of them works only because one person remembers the steps, you carry the risk. You usually find out when that person is on leave, or when they hand in their notice.

The rules have moved in the same direction. NZQA's PTE Rules 2026 came into force on 19 January 2026. They replace the PTE Registration Rules 2025 and the PTE Enrolment and Academic Records Rules 2022, and they remove the annual fee.

Registration applications must include a copy of the PTE's quality management system, which is required under the Quality Assurance of Tertiary Education Providers Rules 2026. A QMS made up of one person's habits is hard to show as a real system. That is our reading rather than NZQA's wording, but we think it holds up.

Then there is the calendar. TEC's 2026 calendar has a March indicative enrolment collection and SDR rounds in April, August and December. The December round is submitted between 1 and 31 January of the following year. The deadlines don't move because your best data person is away.

Where the single points of failure usually hide

Nobody lists "Sam knows how" as a risk. It shows up in the places where work is repetitive, technical and quietly critical.

  • Enrolment. Who knows the exceptions: the funding eligibility edge cases, the manual fixes, the spreadsheet that reconciles what the student management system gets wrong?
  • SDR reporting. Each round covers learner, course enrolment, course register, course completion and qualification completion files. It also includes forecast EFTS for the following year and up to three years ahead. Who knows how those files actually get built?
  • Records. The rules are explicit. For example, PTEs must keep student assessment materials, or full copies, for at least 12 months. Read the full PTE Rules 2026 for the complete obligations. Who knows where everything is kept and how it is retrieved?
  • Assessment approval. Who decides when an assessment is ready to go to moderation, and on what criteria? If the answer is "whoever's been here longest", that is a single point of failure.
  • Sub-contracting. SAARA, a consultancy and so a secondary source, says sub-contracting rules were relocated and updated. It suggests PTEs working with other organisations should review their QMS. If the arrangements live in one manager's email history, start there.

Why SDR is the sharpest test

TEC's SDR page lists the Data Specifications for SDR 2026 v3.1. It also points to a TEC API portal for submitting to the Data Exchange Platform (DXP) by API. For the December 2025 SDR, TEC applied validation rules to all mandatory fields.

Specifications and validation change. A routine that depends on one person's memory of how it worked last year is fragile by design. The person may be excellent. The process still isn't a process until someone else can run it from a written page.

Run the "away tomorrow" audit

You don't need a consultancy or a project. You need an afternoon and one question, asked of each critical process: if the usual person were away tomorrow, who could run this, and from what?

  1. List the processes. Start with enrolment, SDR reporting, records and assessment approval. Add anything that has a hard external deadline.
  2. Name the usual person. Then name the backup. If there isn't one, mark it red.
  3. Test the backup. Ask them to describe the steps without the usual person in the room. Gaps show up in minutes.
  4. Find the workarounds. Ask what the process does that isn't in any procedure. Those undocumented fixes are where the risk lives.
  5. Rank by deadline and consequence. An SDR file due in a fixed window outranks a monthly report nobody reads.
  6. Write it down once, in the working version. Document what people actually do, then have the backup run it from the page. Fix what breaks.
Checklist of audit steps for finding single-person processes in a PTE's operations

The point of step six is not a binder. A procedure nobody has run from the page is a guess.

Why the timing is unforgiving

The sector is changing under you. Industry Skills Boards (ISBs) were formally established from 1 January 2026 to set and maintain standards, endorse programmes, moderate assessments and identify skills needs, according to TEC's FAQ and the ETITC ISB Operational Plan 2026–27. Standards-setting is now in new hands, and your processes need to absorb that without a rebuild each time.

Quality assurance is shifting too. NZQA's rules update removes references to external evaluation and review. Technical Institute, a provider blog and so a secondary source rather than NZQA, says the integrated Quality Assurance Framework (iQAF) has replaced the old evaluative framework. If that reading is right, assurance leans less on a periodic review you can prepare for in a sprint, and more on how you run day to day.

Growth adds pressure as well. Connexis reports that its work-based learning divisions can transition to polytechnics, PTEs or wānanga by 1 January 2028. A PTE that takes on work-based learning at that scale can't depend on three people who know how things work.

Key takeaways

  • Key person risk in vocational training in NZ is now a compliance and continuity issue, not only an HR one.
  • The PTE Rules 2026 (in force 19 January 2026) tie registration to a documented quality management system under the Quality Assurance of Tertiary Education Providers Rules 2026.
  • TEC's fixed windows (March indicative collection; SDR in April, August and December) make reporting the most deadline-exposed process.
  • Audit enrolment, SDR reporting, records and assessment approval with one question: who could run this if the usual person were away tomorrow?
  • Document what people actually do, and prove it by having a backup run the process from the page.

Our take

Most PTEs treat key person risk as a retention problem. It isn't. You can't pay your way out of it, and the best people are often the ones most likely to hold the most undocumented knowledge.

We think the real signal is how much your people's competence is hiding. A process that only one person can run is a process the organisation hasn't actually built yet. The compliance angle is useful because it gives you a reason to build it that your board and your team will both accept.

The uncomfortable part is that documenting a process often exposes it as worse than it looked. That is the point. Better to find the duplicate data entry, the manual workaround and the unexplained rule in a quiet week than in the week of an SDR deadline.

A first step for this week: pick the one process you would least want to lose someone from. Ask them to walk a colleague through it, and watch where the colleague gets stuck.

FAQ

Share

See it on a unit you deliver.

Bring a unit to a trial call and we'll draft the assessment tool and learner material for it in front of you, then give your team 14 days to try it.

Book a trial

Keep reading

More on VETos.