Strengthening NDIS Governance and SIL Controls

NDIS provider governance and compliance is entering a more demanding phase.

The NDIS Commission’s 2026–27 Regulatory Priorities identify governance failures affecting the quality and safety of supports in high-risk settings as a specific area of focus. The Commission points to systemic governance and workforce capability failures that allow preventable risks and harms to persist.

For provider executives, this raises an important question:

Can we demonstrate that our governance systems are working in everyday practice?

Policies, training records, and incident procedures remain essential. However, each is only one part of a broader quality, and safety management system. Leaders also need visibility of whether risks are being identified, workers are capable, incidents are informing improvement, and controls are operating consistently across services.

1. Give leaders clearer visibility of risk.

Clinical and operational risks often emerge gradually.

A participant’s health needs change. A healthcare plan becomes outdated. A worker identifies a concern but does not know how to escalate it. Near misses occur across different homes without being considered together.

Individually, these events may appear manageable. Collectively, they may reveal a systemic risk.

Provider leaders should receive a concise and regular view of:

• Significant incidents and near misses.
• Changes in participant health or support needs.
• Overdue healthcare-plan reviews.
• Workforce capability or authorisation gaps.
• Recurring complaints or documentation concerns.
• Corrective actions and whether they have been completed.
• Emerging patterns across teams, homes or services.

This does not require another large reporting system. A short, structured clinical and operational risk review can help leaders see what would otherwise remain dispersed across files, shifts, and locations.

2. Connect training to capability and authorisation.

Workforce training and capability are related, but they are not the same.

Training introduces or refreshes the knowledge and skills workers require. Competency verification considers whether a worker can apply that learning safely in practice. Organisational authorisation confirms that the provider is satisfied the worker can undertake an identified responsibility.

A stronger workforce pathway is:

Train → provide participant-specific instruction → verify competency → Provider authorise → review

This is particularly important when workers provide medication support or High Intensity Daily Personal Activities.

Providers should be able to demonstrate:

• What learning each role requires.
• Whether the learning is relevant to the supports being delivered.
• How practical competency is verified.
• How participant-specific instructions are communicated.
• Who is authorised to undertake higher-risk tasks?
• When capability is reviewed or reassessed.
• What happens when a gap is identified?

A training certificate is valuable evidence, but it does not independently demonstrate that a worker can safely support a particular person, in a particular environment.

3. Use incidents and complaints as governance intelligence.

Incident and complaints management should do more than record and close individual events.

A mature system helps leaders understand what happened, why it happened and whether similar risks may exist elsewhere.

For example, several medication-recording errors across separate homes may initially appear unrelated. When reviewed together, they may reveal unclear procedures, inconsistent documentation, workload pressures, inadequate supervision or a gap in workforce capability.

Providers can strengthen incident and complaints management by asking:

• Are incidents and near misses being reported consistently?
• Are immediate risks being escalated promptly?
• Are contributing system factors being considered?
• Are similar events being grouped and reviewed for patterns?
• Are actions allocated to an accountable person?
• Is completion followed up and effectiveness checked?
• Are lessons shared across relevant services?

Closing an incident is an administrative step. Learning from it is a governance responsibility.

4. Recognise workplace law compliance as a quality and safety issue

The NDIS Commission’s 2026–27 priorities also connect fair and lawful workplace practices with safe, high-quality supports and the sustainability of the NDIS market.

Workplace law is regulated through a separate legal framework, but it should not be treated as disconnected from participant safety.

Incorrect classifications, excessive hours, inadequate rest, poorly managed sleepovers, unstable rostering or weak employment records can affect workforce wellbeing, continuity and service quality.

Provider governance should therefore bring together operational, human-resource and quality information. Leaders should have confidence that:

• Workers are correctly classified and paid
• Rosters comply with applicable workplace requirements
• Sleepovers, overtime, allowances and breaks are managed correctly
• Staffing arrangements reflect participant support needs
• Supervision and performance concerns are addressed
• Workforce pressures that may affect safety are escalated
• Training, verification & authorisation records are reliable and current

Providers should obtain appropriate industrial-relations or legal advice for their circumstances. The governance principle is that workforce arrangements should support—not undermine—safe and consistent services.

A practical starting point

Providers do not need to redesign every system at once.

A useful starting point is to select one higher-risk area—such as medication management, complex healthcare or one SIL service—and trace how the organisation manages it from beginning to end.

Ask:

1. How is the risk identified?
2. What guidance or participant-specific plan applies?
3. How are workers trained and practically verified?
4. Who authorises workers to undertake the task?
5. What records demonstrate safe practice?
6. How are incidents, near misses and complaints escalated?
7. What information reaches operational and executive leaders?
8. How does the organisation know its controls are working?

This process often reveals where policies, workforce practice, documentation and leadership oversight are not yet fully connected.

Governance should make risk visible

Strong governance does not remove every risk from disability support. It helps an organisation recognise risk earlier, respond consistently and learn before preventable harm is repeated.

The emerging regulatory emphasis is not an argument for less training, more paperwork or greater blame of frontline workers. It is an invitation to build stronger connections between leadership, workforce capability, participant-specific practice, incident learning, and organisational accountability.

For executives and operational leaders, the goal is clear: create governance systems that make quality, safety and emerging risk visible—and provide reliable evidence that the organisation responds.

Discuss your current clinical support arrangements, clarify where further support may be needed and explore practical next steps for your organisation. Click the booking meeting button below.

Official sources

NDIS Commission – Regulatory priorities for 2026–27
https://www.ndiscommission.gov.au/about-us/compliance-and-enforcement/our-regulatory-priorities

NDIS Commission – Supported Independent Living Practice Standards
https://www.ndiscommission.gov.au/rules-and-standards/ndis-practice-standards/sil

NDIS Commission – Mandatory registration for Supported Independent Living
https://www.ndiscommission.gov.au/about-us/ndis-commission-reform-hub/mandatory-registration

Fair Work Ombudsman – Disability support and aged care services
https://www.fairwork.gov.au/find-help-for/disability-support-and-aged-care-services