Internal Quality Assurance for Credential Issuers

Quality between reviews: approval, monitoring and periodic review.

Course ID: ICB-A05
Framework alignment: ICoBC Credentialing Skills Framework (ICSF), skill QUAL "Quality assurance and accreditation" (VRITE pillar: Rigor), level L4 "Assure", stage A "Ability".
Badge: "Internal Quality Assurance for Credential Issuers (Ability, L4)", alignment code ICSF-QUAL-L4-A.

Who this course is for

This course is for people who run or support credential quality inside an issuing organisation:

• programme and micro-credential leads
• quality, registry and admissions staff
• learning and development (L&D) and corporate academy leads
• professional bodies and sector associations
• ICoBC Lead Reviewers

You should have completed ICB-P18 Preparing for Quality Review: the VRITE Self-Assessment.

What you will be able to do

At the Ability stage you practise on realistic tasks in a controlled setting. At level L4 "Assure", the skill is to design and lead internal quality assurance and to conduct independent reviews of other issuers. By the end of the course you will be able to:

1. Design an internal quality cycle for credentials: design approval, monitoring and review.
2. Define roles, responsibilities and independence within the issuer.
3. Use data and feedback to improve credentials.
4. Prepare for external review and maintain the Seal.

Workload and format

The course is blended and runs as a cohort. The notional learning time is 12 hours. This file covers the self-paced part. Live or workshop elements appear as facilitator notes.

How it is assessed

You complete a short knowledge check in this file. A person then assesses your final task with a rubric: an outline of an internal quality manual for an issuer, with process maps. The quality manual outline is the evidence for the badge. Completing the course does not prove competency in a job. The badge records that you met the stated criteria in a controlled setting.

Outcomes, modules and assessment

AI focus

Many issuers now use AI-supported processes, for example to draft learning outcomes, screen applications, mark assessments or summarise learner feedback. Each module includes a short note on quality checks for such processes.

Status of reference topics

Status: November 2026.

Quality systems

Why issuers need an internal quality system

External review looks at an issuer at a point in time. Learners, employers and partners rely on the credential every day in between. An internal quality system is the set of planned, documented and owned activities that keep credentials sound between reviews.

A credential issuer carries a promise: this credential means what it says it means. The internal quality system checks that the promise holds. It does this by asking the same questions again and again:

• Is the credential well designed before it is launched?
• Does it work as intended while it runs?
• Does it still fit its purpose after some time?
• Can we show evidence for all of this?

The ICoBC VRITE criteria group quality into five pillars. An internal system should touch all five. The ICoBC acronym is used in different expansions in internal documents, and the indicators are not yet published, so this course uses the pillars as headings for your own questions and does not rely on a fixed indicator list. Where your manual refers to the pillars, name them as your organisation or the ICoBC pilot documents define them.

The quality cycle

A cycle has three connected stages and one shared evidence base.

1. Design approval: a credential is checked before it is offered or changed.
2. Monitoring: data and feedback are collected and acted on while the credential runs.
3. Periodic review: at set intervals, the whole credential is re-examined and a decision is made to continue, change or withdraw it.

The evidence base holds the records that make each stage visible: approval decisions, data reports, feedback summaries, action logs and review reports.

Roles, responsibilities and independence

A cycle only works if people own it. Define at least these roles, and write them down:

• Credential owner: leads the credential and answers for its quality day to day.
• Quality lead: runs the quality system, keeps the calendar and the records.
• Approval panel or review panel: makes the approval and review decisions.
• Governing body or senior sponsor: receives reports and resolves escalations.
• Assessors and issuers of the credential: apply the criteria as written.

Independence is the key design question. The person who designs a credential should not be the only person who approves it. A review panel should include at least one member who does not work on the credential. In small organisations, independence may come from another department, a partner organisation or an external expert. Record who is independent and from what.

Worked example: Roles in two organisations

University, college or training provider. A college offers a 10-credit micro-credential in data literacy. The programme lead is the credential owner. The registry manager acts as quality lead and keeps the approval and review calendar. The approval panel is the college's academic standards committee, chaired by a deputy head from a different faculty. Independence comes from the chair and from one external employer representative. The senior sponsor is the vice-principal for teaching.

Corporate academy or HR department. A corporate academy issues a badge for "Safe handling of customer data". The academy lead is the credential owner. An HR business partner acts as quality lead. The approval panel includes a compliance officer from the legal team and a line manager from a business unit that uses the credential. Independence comes from the compliance officer, who has no role in training delivery. The senior sponsor is the chief people officer.

AI-supported processes in the quality system

If a process uses AI, add it to the quality system as a named process with an owner. Typical checks:

• A human owner is named and accountable for the output.
• The purpose of the AI use is written down.
• Outputs are sampled and checked by a person against the criteria.
• Learners and earners are told where AI is used in decisions that affect them.
• Changes to the AI-supported process go through the same approval route as other changes.

Practice activity: Draw your quality cycle

Choose a real or realistic credential (your own, or a case supplied by your facilitator). Complete these steps in about 45 minutes:

1. Sketch the three stages on one page. Add the main inputs and outputs of each stage.
2. List the roles in your organisation that would fill the five roles above. If a role has no owner, say so.
3. Mark where independence comes from at each decision point.
4. Mark one AI-supported process, if any exists, and say who is accountable for it.
5. Write two sentences: what is the weakest point in your cycle, and what would you change first?

Keep your sketch. You will reuse it in the final task.

Check your understanding

Design approval

What design approval is for

Design approval is the gate before a credential is offered or materially changed. It answers one question: is this credential well designed and ready to run? A good gate is proportionate. A new credential gets a full panel review. A small change, such as an updated reading list, may only need a documented check by the credential owner and the quality lead.

Write the approval route down. People should know in advance what evidence they must bring, who decides and how long it takes.

What the panel looks at

A design approval pack lets the panel judge the credential against criteria. Typical content:

• Purpose and need: who the credential is for and why it is needed.
• Learning outcomes: clear statements of what an earner can do, at a stated level.
• Assessment: how achievement is judged, and how the assessment matches the outcomes.
• Delivery and workload: how learners will learn, and the notional workload.
• Resources and staff: whether people and materials are sufficient and competent.
• Recognition and information: what the credential says about itself, including the information that the EU Council Recommendation on micro-credentials (2022) lists as elements of a micro-credential description.
• Fairness and access: how learners with different needs and backgrounds are supported.
• Risks: including data protection and the use of AI.

The EU Council Recommendation on micro-credentials (2022) is a stable reference for the information that should accompany a micro-credential. Check the current text for the exact list of elements and use it as one source for your pack template. Watch for Commission implementation reporting and national transpositions, which may add requirements in your country.

Decisions and conditions

The panel should reach one of four decisions:

1. Approved.
2. Approved with conditions: with named actions, owners and deadlines.
3. Deferred: more evidence is needed before a decision.
4. Not approved: with written reasons.

Record the decision, the people who took part, any declared conflicts of interest and the conditions. Track conditions until they are closed. An approval with open conditions that nobody checks is a common weakness.

Worked example: Approving a new credential

University, college or training provider. A training provider proposes a 5-credit micro-credential on sustainable procurement. The credential owner submits the pack. The quality lead checks completeness and finds that the assessment section does not say how the final project is marked. The pack is returned within three working days (illustrative). After correction, the panel meets. The independent chair, a senior lecturer from another department, asks how the project marks map to the three learning outcomes. The panel approves with one condition: publish the marking criteria to learners before the first run, owner to confirm to the quality lead within one month (illustrative).

Corporate academy or HR department. An academy proposes a badge for "Inclusive recruitment interviewing". The pack states that managers will use an AI tool to draft interview questions. The compliance officer on the panel asks who checks the drafted questions for bias. The academy lead had not planned a check. The panel defers the decision. The owner adds a step in which two trained interviewers review a sample of generated questions each quarter, and the pack returns for approval.

Quality checks for AI-supported design

AI tools can help draft outcomes, assessment items and course text. Add these checks to the approval route:

• Declare in the pack where AI was used in design.
• A subject expert checks every outcome and assessment item against the purpose.
• A person checks that sources and facts in AI-drafted material exist and are correct.
• Check for bias in language and examples.

Practice activity: Review an approval pack

Your facilitator supplies a short pack for a fictional credential, or you can use a pack from your own organisation with identifying details removed. Complete these steps in about 60 minutes:

1. Read the pack and list the evidence that is present and the evidence that is missing.
2. Write three questions that the panel should ask the credential owner.
3. Choose a decision: approved, approved with conditions, deferred or not approved. Write the decision and the reasons in three to five sentences.
4. If you chose conditions, write each condition with an owner and a deadline (illustrative).
5. Note one declared conflict of interest that the panel might need to handle, and say what it should do.

Keep your approval route and decision template. You will reuse them in the final task.

Check your understanding

Monitoring

What monitoring is for

Monitoring starts after launch. It collects data and feedback while the credential runs, so that problems are found early and good practice is spotted. Monitoring is routine and light. Periodic review, which comes next, is deeper and less frequent.

A monitoring plan answers five questions:

1. What do we want to know?
2. Which data or feedback will tell us?
3. Who collects it, and how often?
4. Who looks at it, and when?
5. What happens when a signal crosses a threshold?

Choosing indicators

Choose a small set of indicators that link back to the purpose of the credential. Too many indicators create noise. Examples:

• Participation and completion: starts, completions and withdrawals.
• Assessment outcomes: distribution of results, appeals, and consistency between assessors.
• Learner feedback: satisfaction and comments about clarity, workload and fairness.
• Earner and employer feedback: whether the credential is understood and useful in practice.
• Access and fairness: whether results and completion differ between groups of learners in ways that need explanation.
• Integrity: cases of suspected misconduct, and the handling of the credential record.
• Issuing process: time to issue, errors in credential records, and requests for correction.

Use thresholds and triggers, set in advance. For example, a completion rate below an agreed level triggers a short analysis by the credential owner. Numbers in this course are illustrative. Your organisation sets its own thresholds with its governing body.

Respect data protection rules when you collect and analyse learner data. Collect only what you need, tell learners how data is used, and store it securely.

From data to improvement

Data only helps if it leads to action. Use a simple action log with these columns: finding, evidence, action, owner, due date, status and effect. Review the log at a regular quality meeting. Close an action only when the effect has been checked.

Take care with interpretation. A low completion rate may mean the credential is too hard, too long, badly timed or poorly explained. Combine numbers with feedback and, where possible, with a conversation with learners and assessors before deciding what to change.

Worked example: Reading monitoring data

University, college or training provider. A college's micro-credential in project management shows a drop in completion from 82 per cent to 64 per cent between two cohorts (illustrative figures). The threshold for analysis is 70 per cent (illustrative). The credential owner reviews feedback and finds that many learners mention a heavy workload in week four. Assessors confirm that the week-four task takes longer than the notional hours suggest. The action is to split the task into two shorter tasks and to update the workload statement. The owner logs the action, the due date and the check: completion rate for the next cohort.

Corporate academy or HR department. An academy issues a badge for "Customer data protection basics". Quarterly data show that the badge is earned quickly by most employees, but a line-manager survey reports that the same errors continue in practice. The academy lead concludes that the assessment tests recall, not application. The action is to add a scenario-based task, and to ask two line managers to review the scenarios. The badge description is updated to state clearly what the assessment covers. The badge states what was assessed and does not claim more.

Quality checks for AI-supported monitoring

If you use AI to analyse feedback or flag unusual results, apply these checks:

• Compare AI summaries with a sample of the original comments each cycle.
• Record the version and settings of the tool, so results can be repeated.
• Check whether the tool treats groups of learners differently.
• Keep a person responsible for every action that follows from an AI-generated flag.

Practice activity: Build a monitoring plan

Take the credential from earlier modules. Complete these steps in about 60 minutes:

1. Choose five indicators that link to the purpose of the credential.
2. For each indicator, write the source, who collects it, how often, and one threshold (illustrative).
3. For two thresholds, write the action that a breach triggers and who owns it.
4. Draw a one-page process map of the monitoring loop for your organisation.
5. Create an action log template with the seven columns named above, and fill in one example row.
6. Write a short note on one data protection point that applies to your indicators.

Keep your monitoring plan and process map. You will reuse them in the final task.

Check your understanding

Periodic review

What periodic review is for

Periodic review is a planned, deeper look at a credential, at a set interval. Monitoring keeps an eye on the credential from week to week. Periodic review steps back and asks whether the credential is still needed, still well designed and still fit for purpose. It ends in a decision: continue, change or withdraw.

Set the interval in your quality manual. Intervals depend on risk and on the nature of the credential, for example, shorter for a credential in a fast-changing field. State the interval and the triggers for an earlier review, such as a serious complaint, a change in regulation or a major change in the field.

What the review covers

A review uses the evidence collected since approval, and asks fresh questions:

• Purpose and need: is the need still there? Who uses the credential?
• Learning outcomes and level: do they still match the field and the intended level?
• Assessment: is it still valid, fair and consistent?
• Data and feedback: what do the monitoring records show over the whole period?
• Earner and employer views: is the credential understood and used?
• Resources and staff: are they still adequate?
• Information and recognition: is the description accurate, and does it still match the relevant references, such as the EU Council Recommendation on micro-credentials (2022)?
• Risks and incidents: what has happened, and what has been learned?
• Previous actions: were they completed and did they work?

A review is more credible when someone independent leads or joins it. Include at least one panel member from outside the credential team, and consider an external expert. Reviews of other issuers, which an L4 practitioner may conduct, follow the same logic: use criteria, gather evidence, give findings and recommend actions.

Withdrawal and teach-out

If a review decides to withdraw a credential, plan the teach-out. Learners who have started must be able to finish or be offered a fair alternative. Earners who already hold the credential keep a valid record. Tell stakeholders in good time and keep the evidence.

Evidence for external review

A periodic review is a rich source of evidence for external review. Keep the review report, the panel membership, the data used, the decision and the action plan in a place where they can be found. This evidence shows that the issuer examines itself honestly and acts on what it finds. The ICoBC VRITE criteria and the Global Quality Seal are emerging: indicators are not yet published and pilots are ongoing. Design your evidence store so that it can be mapped to new indicators when they appear, instead of waiting for them.

Status: November 2026.

Worked example: A periodic review decision

University, college or training provider. A university department reviews its micro-credential in digital accessibility after three years. The panel includes a lecturer from another faculty, an accessibility practitioner from a partner organisation and a student representative. The panel reads three years of monitoring records and sees stable completion and positive feedback. It also finds that two learning outcomes refer to a standard that has been revised. The decision is to continue with changes: the department updates the outcomes and the assessment, and the changes go through a light approval route. The next review is set in three years (illustrative).

Corporate academy or HR department. An academy reviews a badge in "Workplace first aid awareness" after two years. Earner data show good completion. The review finds that the badge is not recognised by two business units, who run their own training. A manager from one unit joins the panel. The panel decides to change the credential so that it covers the content those units need, and to withdraw a duplicate internal course. A teach-out plan lets staff already enrolled in the duplicate course move to the badge route. The review report is stored with the monitoring records.

Quality checks for AI-supported review

When AI helps to prepare review documents or to analyse large sets of feedback, the panel should:

• Read a sample of the underlying material, not only the AI summary.
• Ask the tool's owner to explain what was done and with what settings.
• Record in the review report where AI was used.
• Keep the final judgement and the decision with the panel.

Practice activity: Plan and run a mini review

Use the credential from earlier modules, with a fictional three-year history supplied by your facilitator. Complete these steps in about 75 minutes:

1. Write a one-page review plan: interval, panel membership with independence, questions and evidence needed.
2. Read the supplied monitoring records and note three findings.
3. Draft a review decision: continue, change or withdraw, with reasons in five to eight sentences.
4. Write an action plan with at least three actions, each with an owner and a due date (illustrative).
5. Draw a process map of your periodic review, including the route for change and for withdrawal.

Keep your review plan, decision template and process map. You will reuse them in the final task.

Check your understanding

External review interfaces

What external review adds

Internal quality assurance is the issuer's own work. External review adds an independent view. The reviewer checks whether the issuer's claims are true and whether its system works. A good internal system makes external review shorter, calmer and more useful, because evidence is ready and the issuer already knows its strengths and gaps.

The ICoBC VRITE criteria and the Global Quality Seal are emerging. Indicators are not yet published, internal documents use different expansions of the acronym, and pilots are ongoing. For this reason, build your interface with external review around principles that will hold whatever the final indicators say:

• You can show a documented cycle of approval, monitoring and review.
• You can show who is accountable and who is independent.
• You can show evidence for each claim you make about a credential.
• You can show that findings lead to action, and that actions are checked.

Status: November 2026.

Preparing for external review

Preparation is a routine, not a rush. Use this sequence:

1. Scope: agree which credentials and which processes will be reviewed.
2. Self-assessment: use the VRITE self-assessment from ICB-P18 to identify strengths and gaps.
3. Evidence map: list each claim and where its evidence sits. Fill gaps before the visit, or state them openly.
4. Roles for the review: name a lead contact, a records contact and a person who briefs staff.
5. Briefing: tell staff, learners and partners what to expect and what honesty and courtesy look like in a review.
6. Logistics: access to records, rooms or online sessions, and interpreters where needed.

During and after the review

During the review, answer questions directly and show evidence. If you do not know, say so and promise a follow-up. Do not coach staff to give rehearsed answers.

After the review, treat the report as an input to your own cycle. Log each finding in the action log with an owner, a due date and a way to check the effect. Report progress to your governing body. If the reviewer recommends conditions, track them as you would approval conditions.

Maintaining the Seal

A seal or similar recognition is a promise that must be kept between reviews. To maintain it:

• Keep the internal cycle running on its calendar.
• Report significant changes to the credential or to the organisation to the relevant body, as its rules require.
• Keep evidence up to date and findable.
• Respond to findings within agreed times.
• Watch for changes in criteria, indicators and procedures.

For micro-credentials in Europe, the EU Council Recommendation on micro-credentials (2022) is a stable reference. Keep an eye on Commission implementation reporting and on national transpositions in the countries where you issue, because they may add requirements for information and quality assurance.

Status: November 2026.

Independent review of other issuers

At level L4, you may also review other issuers. The skills are the same as internal review, turned outward: agree scope and criteria, gather evidence from documents and interviews, test claims, write findings that are clear and fair, and avoid conflicts of interest. Declare any past or present link with the issuer. Keep information confidential. Base every finding on evidence.

Worked example: Getting ready and following up

University, college or training provider. A college prepares for a review of its micro-credential portfolio. The quality lead builds an evidence map in a simple table: claim, source document, owner, date, status. The map shows that two credentials lack a recorded independent member in their latest approval. The quality lead states this openly in the self-assessment and sets two actions. After the review, the report recommends clearer records of conflicts of interest. The college adds a standing item to every panel agenda, logs the action with the registry manager as owner and checks the effect at the next three panels.

Corporate academy or HR department. An academy prepares for an external review of its badge programme. The academy lead briefs line managers who employ earners, so that they can speak about how the badges are used. The evidence map shows gaps in the records of AI-supported marking. The academy documents the process, names an accountable owner and adds a quarterly sampling check. After the review, the findings go to the chief people officer, who agrees an annual progress report to the governing body.

Quality checks for AI-supported evidence work

If AI helps to prepare evidence maps, summaries or responses for external review:

• Check every statement against the source record before it is submitted.
• Do not submit text that you cannot explain or support.
• Tell the reviewer where AI helped, if the review rules ask for it.
• Keep a person accountable for the accuracy of the submission.

Practice activity: Evidence map and review preparation

Use your credential and your earlier work. Complete these steps in about 60 minutes:

1. Write five claims that your organisation would make about the credential, for example "assessment is independently moderated".
2. For each claim, name the evidence, where it is stored and who owns it.
3. Mark any claim for which evidence is weak or missing, and write an action for each gap.
4. Draft a one-page preparation plan for an external review, with named roles and a timeline (illustrative).
5. Write a short briefing note (about 150 words) for staff on what to expect and how to take part honestly.
6. Draw a process map from "review report received" to "actions closed".

Keep your evidence map, plan and process map. You will reuse them in the final task.

Check your understanding

Assessment and badge

The assessed task

Task: Outline of an internal quality manual with process maps

You write the outline of an internal quality manual for a credential issuer. Use a real organisation (with permission and with sensitive details removed) or a realistic fictional issuer. The outline shows how the issuer designs and runs the internal quality cycle, who is accountable, how data and feedback lead to improvement and how the issuer prepares for external review.

Required content

1. Scope and purpose: the issuer, the credentials covered, and the intended users of the manual (about half a page).
2. Quality cycle overview: one process map of the full cycle: design approval, monitoring, periodic review, and the links between them.
3. Roles, responsibilities and independence: a roles chart and a table of who decides what, with independence clearly marked.
4. Design approval: a process map, an outline of the approval pack, decision categories and condition tracking.
5. Monitoring: a monitoring plan with indicators, sources, frequency, illustrative thresholds, data protection note and the action log template.
6. Periodic review: interval and triggers, a process map covering continue, change and withdraw, panel composition and teach-out principles.
7. External review interfaces: evidence map, preparation steps, handling of findings and how the Seal would be maintained, based on principles and without assuming unpublished indicators.
8. AI-supported processes: a list of AI-supported processes in the issuer, with owner and quality checks for each.
9. Document control: version, owner, review date of the manual itself.

Format and length: an outline of about 6 to 10 pages, including at least three process maps. Headings, tables and diagrams are welcome. Use illustrative figures only where labelled as such. Do not include personal data of real learners.

Evidence submitted for the badge: the quality manual outline, as one document, with process maps included. Submit through the Kursbibliothek upload as instructed by your facilitator.

A person assesses the task with the rubric below. The file does not grade the task.

Rubric

Each criterion is rated on four levels: 1 Not yet, 2 Developing, 3 Secure, 4 Strong.

Pass rule

To earn the badge "Internal Quality Assurance for Credential Issuers (Ability, L4)" you need:

1. a score of at least 3 (Secure) on criteria A, B, D and F, and at least 2 (Developing) on every other criterion;
2. a score of at least 8 out of 10 on the knowledge check below;
3. a submitted quality manual outline that is your own work. If you used AI tools, say where and how, and confirm that you checked the content.

If you do not pass, you receive written feedback and may resubmit once after revision. Your facilitator confirms timing.

The badge records that you met these criteria in a controlled setting. It does not prove competency in a job.

Knowledge check

Answer all questions. Each question has one correct answer.

Sources and further reading

Status: November 2026.

• Council Recommendation of 16 June 2022 on a European approach to micro-credentials for lifelong learning and employability, Council of the European Union, published in the Official Journal of the European Union. Check the Official Journal reference and the current text on the EUR-Lex service before you rely on it.
• ICoBC VRITE criteria and Global Quality Seal: publications and pilot documents by ICoBC (International Council on Badges and Credentials, Berlin). Indicators are not yet published, and internal documents use different expansions of the acronym.
• ICoBC Credentialing Skills Framework (ICSF): framework documents by ICoBC, including skill QUAL "Quality assurance and accreditation".
• ICB-P18 Preparing for Quality Review: the VRITE Self-Assessment, ICoBC course (prerequisite for this course).
• ISO 9001, Quality management systems: Requirements, International Organization for Standardization. A general reference on quality management systems. Check the current edition.
• Standards and Guidelines for Quality Assurance in the European Higher Education Area (ESG), European Association for Quality Assurance in Higher Education (ENQA), together with the European Students' Union (ESU), the European University Association (EUA) and the European Association of Institutions in Higher Education (EURASHE). Check the current version.

Do not rely on any single source for legal obligations. Check national laws and regulations that apply to your organisation and to the countries where you issue credentials.