Green is good. Red needs your attention. But what about amber?
For universities managing UKVI compliance, this middle ground can be the most important one to get right.
The Red-Amber-Green (RAG) rating system forms part of UKVI's Basic Compliance Assessment (BCA), giving student sponsors an overall rating based on their performance across three key metrics:
- Visa refusal rates
- Enrolment rates
- Course completion rates
But the colour itself only tells part of the story.
For university compliance teams, it’s important to look beyond the rating itself. Understanding what’s driving each metric, spotting changes early and knowing when to act can help universities deal with potential problems before they become more serious.
What does your RAG rating actually tell you?
Under the current BCA framework, sponsors are assessed against three core requirements. For applications made from 1 June 2026, sponsors need to maintain:
- A visa refusal rate below 5%
- An enrolment rate of at least 95%
- A course completion rate of at least 85%, increasing to 90% from 1 June 2027
RAG assessment thresholds
| Metric | Green | Amber | Red |
|---|---|---|---|
| Visa refusal rate | Below 4% | 4% to below 5% | 5% or above |
| Enrolment rate | 96% or above | 95% to below 96% | Below 95% |
| Course completion rate | 92% or above | 90% to below 92% | Below 90% |
Under the standard RAG assessment, a sponsor's overall rating is determined by its lowest-rated metric.
Doing well in two areas doesn’t necessarily offset a weaker result in another. Even a relatively small change in one metric can affect an institution’s overall rating, so it’s important to keep an eye on performance over time.
There is also an important distinction when it comes to course completion. Although sponsors must meet the 85% course completion requirement from 1 June 2026, course completion does not form part of the first RAG rating under the new framework. The 90% requirement applies to BCA applications made from 1 June 2027.
A shift in one area allows the university to investigate and respond before it has a wider impact on its overall position.
What about smaller sponsors?
Some smaller sponsors may be eligible for a Discretionary Assessment if they fall into the amber or red range and have fewer than 100 relevant students or CAS during the assessment period. Independent schools have a separate eligibility route.
UKVI considers the sponsor’s individual circumstances, so the final RAG rating may differ from the standard thresholds.
Amber doesn't mean panic, but it does mean act
An amber rating does not necessarily indicate a breach of sponsorship duties. However, it can signal that an area of performance requires closer attention.
UKVI may require an amber-rated sponsor to attend formal engagement meetings and discuss mitigating action, while additional action plans may also be imposed where significant recruitment deficiencies are identified.
For university teams, the important thing is to understand what is behind the rating and decide what, if anything, needs to change.
What should you investigate?
- If visa refusal rates are increasing: Consider whether the change can be traced to a particular recruitment market, course, intake, recruitment channel or agent.
- If enrolment performance is shifting: Look at where students are being lost between CAS issuance and enrolment and whether patterns are emerging across particular cohorts.
- If completion rates are declining: Investigate whether the movement is isolated or part of a wider trend that requires attention.
The aim is not simply to react to an amber rating. It is to understand why the institution has reached amber and decide what practical action, if any, is needed.p
The earlier a university identifies what is driving a change in its data, the more time it has to respond in a controlled and proportionate way.
What happens when your rating is red?
A red rating needs more urgent attention.
If a sponsor receives a red rating for the first time, UKVI will normally place it on an action plan and reduce its next CAS allocation compared with the previous year’s usage.
A second red rating within the relevant period can have more serious consequences. This can include action to revoke the sponsor licence where the conditions for a serious breach are met.
That said, the focus should be on understanding the problem and dealing with it properly.
Start by looking at what has driven the red rating and where things have gone wrong. From there, the university can decide what needs to change. This might mean reviewing existing processes, looking more closely at a particular recruitment channel, strengthening internal checks or putting extra oversight around the metric that has caused the issue.
It is also important to make sure someone is responsible for each action, and that progress is monitored. That gives the university a clearer picture of whether the changes are working and whether further action is needed.
A practical plan should focus on three simple questions:
- What went wrong?
- What needs to change?
- How will we know if the changes are working?
Answering these questions gives the university a clear way to deal with the issue and keep track of progress.
Don't just look at the colour. Look at the data
What matters is understanding what is happening behind the numbers. Universities should have accurate records, keep a regular eye on their data and make sure everyone knows who is responsible for each area. If something starts to change, the right people need to know about it and be able to respond.
This is particularly important when a metric starts moving towards a threshold. There is no need to wait for an amber or red rating before asking why a number has changed. Regular monitoring gives teams a better chance of addressing potential issues before they become more serious.
It is also worth checking the underlying data if the rating does not seem to reflect what is happening at the university.
UKVI allows sponsors to make representations against an amber or red rating if they can show that the data used in the assessment was materially flawed.
The key is to keep good records and have the evidence needed to understand the figures, check that they are correct and, where necessary, explain the university’s position.
How Sable International can support your university
University teams already have a lot to manage, from admissions and recruitment to student support and day-to-day compliance. Finding the time to investigate potential risks and put things right can be difficult.
Sable International’s University Immigration Compliance Solutions team works with universities to help identify, understand and address student sponsor compliance risks.
Our support includes:
- Compliance health checks
- Compliance audits and gap analysis
- Practical remediation support
- Proactive risk monitoring
- Records management
- Training and workshops
- UKVI investigation and reporting support
Our role does not end with identifying a problem.
If an audit or compliance review highlights weaknesses, we can work with your team to identify what needs attention, implement practical solutions and strengthen the underlying processes.
With more than 30 years of UK immigration experience, our team can also act as Level 1 users on the Sponsor Management System. This allows us to provide hands-on support as well as guidance on the wider compliance picture.
Our fixed-fee approach means you know what the work will cost, and our focus is on giving your team practical steps to address issues rather than simply handing over a technical report.
Ultimately, the value of a RAG rating is not the colour itself.
It is understanding what is happening behind the data and knowing what to do about it.
Need help managing your university’s UKVI compliance? Speak to our University Immigration Compliance Solutions team about practical support with audits, risk monitoring and remediation. Contact us today at [email protected] or call us on +44 20 7759 7596.
Cyber Essentials
Our Cyber Essentials certification reflects our ongoing commitment to cybersecurity best practices, ensuring that we safeguard sensitive data and operate with a high level of digital integrity.