How Does Accreditation Assess Recordkeeping?

Overview

Accreditation assesses recordkeeping as part of a wider evaluation of institutional integrity, administrative capability and quality assurance. Reviewers examine whether records provide reliable, retrievable evidence that the institution operates according to its published policies, protects student interests, and meets applicable legal and regulatory obligations. Institutions should treat recordkeeping as both an operational control and a source of evidence for continuous improvement.

What assessors look for

During review visits and documentation audits, accreditation panels typically verify that records are:

• Complete and accurate — records match published policies and provide traceable decisions (admissions, assessment, awards, appeals).
• Accessible and retrievable — authorised staff can find records within expected timeframes, including archived files.
• Version‑controlled and auditable — key documents show approval, version history and dates.
• Protected and confidential — personally identifiable information is secured and access is limited according to policy and law.
• Retained according to schedule — retention and disposal schedules exist and are applied consistently.

Essential records for theological institutions

Evidence that accreditation reviewers commonly request includes:

• Student admission files and proof of identity or prior qualifications.
• Enrolment records, attendance/engagement logs (where required by policy).
• Assessment records: marked work, moderation reports, gradebooks and assessment moderation minutes.
• Award documentation and transcripts.
• Program approval records, curricula, programme learning outcomes and change logs.
• Complaints, appeals, academic misconduct and outcomes registers.
• Staff records: contracts, qualifications, appraisal and training evidence.
• Governance and meeting minutes (board, academic council), policies and policy-change history.
• Financial records demonstrating institutional solvency and administrative capability where required.

Controls, retention and formats

Assessors accept paper or electronic records provided they meet control standards. Good practice aligned with international document standards includes:

• A documented records management policy and retention schedule that states how long each class of record is kept and why.
• Version control, naming conventions and a master register for key documents.
• Back‑up and disaster‑recovery arrangements for electronic records, and secure storage for physical archives.
• Access controls, encryption and audit logs for sensitive personal data; compliance with applicable data‑protection laws is required.
• Periodic audit or sampling of records to confirm compliance with retention and quality controls.

ISO guidance on documented information is widely used as a practical framework for these controls. Accreditation bodies will judge whether the implemented controls are appropriate for the size, scope and risk profile of the institution.

Common weaknesses assessors find

Frequent problems that can put accreditation at risk include:

• Missing or incomplete student assessment records.
• Unapproved or out‑of‑date policies without version history.
• Poorly secured personal data or inconsistent application of confidentiality rules.
• No formal retention schedule or ad hoc disposal of records.
• Lack of documented governance decisions or missing minutes for key approvals.

Where deficiencies are serious, accreditation panels may issue conditions, require corrective action plans, or escalate concerns about institutional capability.

Preparing for review — practical checklist

1. Publish a records management policy and retention schedule and ensure staff know where to find it.
2. Assemble a sample audit pack: student files, assessment evidence, minutes of recent governance meetings and staff records.
3. Ensure electronic document systems include version history, access logs and secure backups.
4. Run an internal records sampling audit and fix gaps before the external review.
5. Document data‑protection compliance steps taken for handling personal information.

When legal or regulatory requirements apply

Institutions remain responsible for meeting all local, regional or national legal requirements for recordkeeping (for example, qualifications registration, data protection laws or financial reporting). ITAA accreditation does not replace or override statutory obligations; where local law requires different or additional retention or disclosure rules, the institution must follow that law. Accreditation reviewers will expect evidence that legal obligations are understood and complied with.