How to write an NDIS governance framework (2026 template + example)

Why a governance framework is no longer optional in 2026

The NDIS Quality and Safeguards Commission's strengthened registration and audit regime places governance at the centre of every registered provider's obligations. Under the revised NDIS Practice Standards, auditors are explicitly required to assess whether your organisation has documented, implemented, and reviewed a governance and operational management system — not simply whether one exists on paper.

For SIL and other high-intensity support providers, this means the governance framework must be a living document that connects board accountability to frontline practice. A vague mission statement will not satisfy an approved quality auditor. This guide walks you through every component you need to build one that will.

Step 1 — Understand what a governance framework must cover

Before writing a single word, confirm the scope the NDIS Commission expects. The NDIS Practice Standards (Core Module plus any applicable Supplementary Modules such as High Intensity Daily Personal Activities or SIL) require your governance documentation to address:

• Organisational structure — who holds decision-making authority at board, executive, and operational levels.
• Roles and responsibilities — clear assignment of accountability for each Practice Standard requirement.
• Risk management — your approach to identifying, assessing, treating, and monitoring risk.
• Financial oversight — how the board or governing body monitors financial health and NDIS pricing compliance.
• Policy and procedure management — how policies are created, approved, reviewed, and communicated.
• Performance monitoring — key indicators, reporting cadence, and the escalation pathway when targets are missed.
• Incident, complaints, and feedback governance — board-level visibility of trends, not just operational handling.
• Restrictive practice authorisation — the decision-making chain and required state/territory authorisation steps.
• Worker screening and NDIS Code of Conduct obligations — how the organisation ensures and monitors compliance.

Step 2 — Map your leadership and accountability structure

Start with an organisational chart that is embedded in or attached to the framework document. For each tier — board or governing body, CEO or executive team, managers, team leaders — describe:

1. The body's composition and how it is formed.
2. The frequency and quorum of formal meetings.
3. Which Practice Standard modules each tier is accountable for.
4. The escalation triggers that require a lower tier to refer a matter upward.

Auditors look for evidence that the board actually reviews compliance data, not just that a chart exists. Attach your board meeting agenda template and a sample dashboard to demonstrate this in practice.

Step 3 — Write each governance section

3a. Risk management

Your framework must reference your risk register and explain how it is maintained. State the risk appetite statement, the consequence and likelihood matrix your organisation uses, and who holds authority to accept risks above a defined threshold. Under the strengthened standards, risk management must visibly connect to participant safety outcomes — not just organisational financial risk.

3b. Incident and complaints governance

The NDIS Commission's incident management and reportable incidents rules require registered providers to notify the Commission of certain incidents within defined timeframes. Your governance framework should describe:

• The internal incident classification system and how it maps to Commission reportable incident categories.
• The board or quality committee's role in receiving aggregated incident trend reports.
• How complaint outcomes and themes are fed back into policy improvement.
• The whistleblower or speak-up protections available to workers.

3c. Restrictive practice governance

If your organisation supports participants under behaviour support plans that include regulated restrictive practices, the governance framework must document the complete authorisation pathway: behaviour support practitioner assessment, state or territory authorisation where required, the provider's own sign-off hierarchy, and the reporting obligations to the Commission. This section is one of the most closely scrutinised areas in SIL audits.

3d. Worker screening and Code of Conduct compliance

Document the process by which NDIS Worker Screening Checks are obtained and tracked for all workers in risk-assessed roles, how Code of Conduct obligations are communicated at induction and refreshed over time, and how alleged breaches are investigated and escalated to the Commission when required.

Step 4 — Use a consistent document structure

Auditors navigate many documents in a short audit window. A consistent structure across all your governance documents makes their job easier — and reduces the chance that a requirement is missed. A recommended structure for each section is:

1. Purpose — one sentence on why this element exists.
2. Scope — which services, locations, and worker groups it applies to.
3. Policy statement — the organisation's commitment in plain language.
4. Accountabilities — named roles (not individuals), with specific responsibilities.
5. Procedures summary — a cross-reference to the detailed procedure document.
6. Monitoring and review — frequency of review and the role responsible.
7. Relevant legislation and standards — the NDIS Act 2013, relevant Practice Standard, and any state/territory requirements.

Example — Governance framework excerpt (risk management section)

Step 5 — Review, approve, and make it live

A governance framework that has never been formally approved by the board carries limited weight in an audit. Before finalising:

• Present the draft to the board or governing body for formal resolution and minuted approval.
• Record the version number, approval date, and next scheduled review date on the document's cover page.
• Communicate the framework to all managers and relevant staff — keep attendance or read-receipt records.
• Store it in your document management system with access controls that prevent unauthorised edits.

Common gaps auditors find

Approved quality auditors consistently identify several weaknesses in provider governance frameworks during NDIS audits:

• Accountability is assigned to individuals by name rather than to roles, meaning the document becomes inaccurate every time there is staff turnover.
• The framework describes intent but does not reference the actual procedures or policies that give it effect.
• Incident and complaints governance focuses only on operational handling, with no evidence the board receives or acts on trend data.
• Restrictive practice governance is copied from a template but not adapted to the provider's specific state or territory authorisation requirements.
• The document is version-controlled but the review cycle has lapsed — it was approved once and never updated.

Pulling it all together

Writing an NDIS governance framework is a significant undertaking, but the effort pays dividends in audit confidence and, more importantly, in genuine participant safety outcomes. If you are building your documentation suite from scratch or bringing an existing framework into line with the 2026 strengthened requirements, ndiscompliant.com.au offers a 74-document audit-ready SIL compliance kit that includes a fully structured governance framework template, board reporting dashboards, risk register, and all supporting policies — all pre-mapped to the NDIS Practice Standards modules.

Whichever path you take, the principles remain the same: document accountability clearly, connect board oversight to frontline practice, and treat the framework as a working instrument that evolves with your organisation and with regulatory requirements — not a static filing-cabinet document.