Core module: Provider governance and operational management

These NDIS Practice Standards set out the governance and operational management responsibilities for NDIS Providers. 

Governance and operational management

Outcome: Each participant’s support is overseen by robust governance and operational management systems relevant (proportionate) to the size, and scale of the provider and the scope and complexity of supports delivered.

To achieve this outcome, the following indicators should be demonstrated:

  • Opportunities are provided by the governing body for people with disability to contribute to the governance of the organisation and have input into the development of organisational policy and processes relevant to the provision of supports and the protection of participant rights.  
  • A defined structure is implemented by the governing body to meet a governing body’s financial, legislative, regulatory and contractual responsibilities, and to monitor and respond to quality and safeguarding matters associated with delivering supports to participants. 
  • The skills and knowledge required for the governing body to govern effectively are identified, and relevant training is undertaken by members of the governing body to address any gaps.
  • The governing body ensures that strategic and business planning considers legislative requirements, organisational risks, other requirements related to operating under the NDIS (for example Agency requirements and guidance), participants’ and workers’ needs and the wider organisational environment.
  • The performance of management, including responses to individual issues, is monitored by the governing body to drive continuous improvement in management practices. 
  • The provider is managed by a suitably qualified and/or experienced persons with clearly defined responsibility, authority and accountability for the provision of supports.
  • There is a documented system of delegated responsibility and authority to another suitable person in the absence of a usual position holder in place.
  • Perceived and actual conflicts of interest are proactively managed and documented, including through development and maintenance of organisational policies.

Risk management

Outcome: Risks to participants, workers and the provider are identified and managed. 

To achieve this outcome, the following indicators should be demonstrated:

  • Risks to the organisation, including risks to participants, financial and work health and safety risks, and risks associated with provision of supports are identified, analysed, prioritised and treated. 
  • A documented risk management system that effectively manages identified risks is in place, and is relevant and proportionate to the size and scale of the provider and the scope and complexity of supports provided. 
  • The risk management system covers each of the following:
    • incident management;
    • complaints management and resolution;
    • financial management; 
    • governance and operational management;
    • human resource management; 
    • information management; 
    • work health and safety; 
    • emergency and disaster management.
  • Where relevant, the risk management system includes measures for the prevention and control of infections and outbreaks.
  • Supports and services are provided in a way that is consistent with the risk management system.
  • Appropriate insurance is in place, including professional indemnity, public liability and accident insurance.

Quality management

Outcome: Each participant benefits from a quality management system relevant and proportionate to the size and scale of the provider, which promotes continuous improvement of support delivery. 

To achieve this outcome, the following indicators should be demonstrated:

  • A quality management system is maintained that is relevant and proportionate to the size and scale of the provider and the scope and complexity of the supports delivered. The system defines how to meet the requirements of legislation and these standards. The system is reviewed and updated as required to improve support delivery. 
  • The provider’s quality management system has a documented program of internal audits relevant (proportionate) to the size and scale of the provider and the scope and complexity of supports delivered.
  • The provider’s quality management system supports continuous improvement, using outcomes, risk related data, evidence-informed practice and feedback from participants and workers.

Information management

Outcome: Management of each participant’s information ensures that it is identifiable, accurately recorded, current and confidential. Each participant’s information is easily accessible to the participant and appropriately utilised by relevant workers. 

To achieve this outcome, the following indicators should be demonstrated:

  • Each participant’s consent is obtained to collect, use and retain their information or to disclose their information (including assessments) to other parties, including details of the purpose of collection, use and disclosure. Each participant is informed in what circumstances the information could be disclosed, including that the information could be provided without their consent if required or authorised by law.
  • Each participant is informed of how their information is stored and used, and when and how each participant can access or correct their information, and withdraw or amend their prior consent. 
  • An information management system is maintained that is relevant and proportionate to the size and scale of the organisation and records each participant’s information in an accurate and timely manner. 
  • Documents are stored with appropriate use, access, transfer, storage, security, retrieval, retention, destruction and disposal processes relevant and proportionate to the scope and complexity of supports delivered.

Feedback and complaints management

Outcome: Each participant has knowledge of and access to the provider’s complaints management and resolution system. Complaints and other feedback made by all parties are welcomed, acknowledged, respected and well-managed. 


To achieve this outcome, the following indicators should be demonstrated:

  • A complaints management and resolution system is maintained that is relevant and proportionate to the scope and complexity of supports delivered and the size and scale of the organisation. The system follows principles of procedural fairness and natural justice and complies with the requirements under the National Disability Insurance Scheme (Complaints Management and Resolution) Rules 2018. 
  • Each participant is provided with information on how to give feedback or make a complaint, including avenues external to the provider, and their right to access advocates. There is a supportive environment for any person who provides feedback and/or makes complaints. 
  • Demonstrated continuous improvement in complaints and feedback management by regular review of complaint and feedback policies and procedures, seeking of participant views on the accessibility of the complaints management and resolution system, and incorporation of feedback throughout the provider’s organisation.
  • All workers are aware of, trained in, and comply with the required procedures in relation to complaints handling.

Incident management

Outcome: Each participant is safeguarded by the provider’s incident management system, ensuring that incidents are acknowledged, respond to, well-managed and learned from.

To achieve this outcome, the following indicators should be demonstrated:

  • An incident management system is maintained that is relevant and proportionate to the scope and complexity of supports delivered and the size and scale of the organisation. The system complies with the requirements under the National Disability Insurance Scheme (Incident Management and Reportable Incidents) Rules 2018.
  • Each participant is provided with information on incident management, including how incidents involving the participant have been managed. 
  • Demonstrated continuous improvement in incident management by regular review of incident management policies and procedures, review of the causes, handling and outcomes of incidents, seeking of participant and worker views, and incorporation of feedback throughout the provider’s organisation. 
  • All workers are aware of, trained in, and comply with the required procedures in relation to incident management.

Human resource management

Outcome: Each participant’s support needs are met by workers who are competent in relation to their role, hold relevant qualifications, and who have relevant expertise and experience to provide person-centred support. 

To achieve this outcome, the following indicators should be demonstrated:

  • The skills and knowledge required of each position within a provider are identified and documented together with the responsibilities, scope and limitations of each position. 
  • Records of worker pre-employment checks, qualifications and experience are maintained. 
  • An orientation and induction process is in place that is completed by workers including completion of the mandatory NDIS worker orientation program.
  • A system to identify, plan, facilitate, record and evaluate the effectiveness of training and education for workers is in place to ensure that workers meet the needs of each participant. The system identifies training that is mandatory and includes training in relation to staff obligations under the NDIS Practice Standards and other National Disability Insurance Scheme rules.  
  • Timely supervision, support and resources are available to workers relevant to the scope and complexity of supports delivered. 
  • The performance of workers is managed, developed and documented, including through providing feedback and development opportunities. 
  • Workers with capabilities that are relevant to assisting in the response to an emergency or disaster (such as contingency planning or infection prevention or control) are identified.
  •  Plans are in place to identify, source and induct a workforce in the event that workforce disruptions occur in an emergency or disaster.
  • Infection prevention and control training, including refresher training, is undertaken by all workers involved in providing supports to participants.
  • For each worker, the following details are recorded and kept up to date:
    • their contact details;
  • details of their secondary employment (if any).

Continuity of supports

Outcome: Each participant has access to timely and appropriate support without interruption. 

To achieve this outcome, the following indicators should be demonstrated:

  • Day-to-day operations are managed in an efficient and effective way to avoid disruption and ensure continuity of supports.
  • In the event of worker absence or vacancy, a suitably qualified and/or experienced person performs the role. 
  • Supports are planned with each participant to meet their specific needs and preferences. These needs and preferences are documented and provided to workers prior to commencing work with each participant to ensure the participant’s experience is consistent with their expressed preferences.
  • Arrangements are in place to ensure support is provided to the participant without interruption throughout the period of their service agreement. These arrangements are relevant and proportionate to the scope and complexity of supports delivered by the provider.
  • Alternative arrangements for the continuity of supports for each participant, where changes or interruptions are unavoidable, are:
    • explained and agreed with them; and
    • delivered in a way that is appropriate to their needs, preferences and goals.

Emergency and disaster management

Outcome: Emergency and disaster management includes planning that ensures that the risks to the health, safety and wellbeing of participants that may arise in an emergency or disaster are considered and mitigated, and ensures the continuity of supports critical to the health, safety and wellbeing of participants in an emergency or disaster. 

To achieve this outcome, the following indicators should be demonstrated:

  • Measures are in place to enable continuity of supports that are critical to the safety, health and wellbeing of each participant before, during and after an emergency or disaster.
  • The measures include planning for each of the following:
    a)    preparing for, and responding to, the emergency or disaster; 
    b)    making changes to participant supports;
    c)    adapting, and rapidly responding, to changes to participant supports and to other interruptions;
    d)    communicating changes to participant supports to workers and to participants and their support networks.
  • The governing body develops emergency and disaster management plans (the plans), consults with participants and their support networks about the plans and puts the plans in place.
  • The plans explain and guide how the governing body will respond to, and oversee the response to, an emergency or disaster.
  • Mechanisms are in place for the governing body to actively test the plans, and adjust them, in the context of a particular kind of emergency or disaster.
  • The plans have periodic review points to enable the governing body to respond to the changing nature of an emergency or disaster.
  • The governing body regularly reviews the plans, and consults with participants and their support networks about the reviews of the plans.
  • The governing body communicates the plans to workers, participants and their support networks.
  • Each worker is trained in the implementation of the plans.