Is a written governance framework a mandatory requirement for NDIS registration?

Yes. The NDIS Practice Standards (Core Module) require registered providers to demonstrate documented governance arrangements, clear accountability structures, and evidence of active oversight. Auditors assess these during certification and verification audits. Without a written framework your organisation will likely receive a non-conformance finding.

Does the 2026 strengthened NDIS framework change governance requirements for SIL providers?

The 2026 strengthened framework increases expectations around provider oversight, mandatory registration for previously unregistered SIL operators, and evidence of continuous improvement. Board-level engagement with incident and complaints data, and documented restrictive-practice governance, face closer scrutiny than under earlier audit cycles.

How often should an NDIS governance framework be reviewed?

At minimum annually, and also whenever there is a material regulatory change, a significant incident, a change of key personnel, or a new registration group is added. Auditors look for evidence that the review has actually occurred — board minutes or a signed review record — not just a changed date on the document.

Who should approve the governance framework?

The board of directors (or equivalent governing body) should formally approve the framework and record that approval in board minutes. For sole-director companies the director's written resolution is the equivalent evidence. Operational manager approval alone is generally insufficient to satisfy audit requirements.

What is the difference between a governance framework and a policy manual?

The governance framework is the overarching document that sets out decision-making structures, roles, accountability lines, and how the organisation meets its regulatory obligations at a high level. A policy manual contains the detailed procedures that sit beneath it. Both are needed — auditors check that the framework's references actually link to complete, current policies.

Can a small SIL provider use the same governance framework template as a large organisation?

Yes, but it must be adapted to reflect your actual structure. A sole-director provider should consolidate roles rather than list positions that do not exist. Auditors are experienced at identifying frameworks that have been copied verbatim from templates without being tailored — the specificity of your references (document numbers, system names, meeting frequency) signals genuine implementation.

NDIS Governance Framework Example (Filled-In Sample)

What an NDIS Governance Framework Must Cover

Every registered NDIS provider — and in particular those delivering Supported Independent Living (SIL) — must be able to demonstrate a structured governance framework to an approved quality auditor. Under the NDIS Practice Standards (Core Module, Quality Management and Governance), providers are required to show documented policies, clear lines of accountability, and evidence that governance arrangements actively protect participants.

The 2026 strengthened NDIS framework places greater scrutiny on SIL providers, including mandatory registration for many previously unregistered operators and tighter expectations around board oversight, incident management, and restrictive-practice authorisation. A well-constructed governance document is no longer optional — it is the first thing an auditor reviews.

The sections below present a realistic filled-in sample you can adapt for your organisation. Every field reflects genuine NDIS Commission requirements; placeholder names are italicised so you know where to substitute your own details.

Filled-In Sample: NDIS Governance Framework

Organisation Details

Organisation name	Horizon Support Services Pty Ltd
NDIS Registration number	4050012345
Registration groups	Supported Independent Living (0115); Daily Activities (0107)
Document owner	Chief Executive Officer
Review cycle	Annual (or triggered by a material incident or regulatory change)
Next scheduled review	July 2027
Version	3.1 — Approved 10 June 2026

1. Purpose and Scope

This framework establishes the governance structures, decision-making authorities and accountability mechanisms through which Horizon Support Services meets its obligations under:

The National Disability Insurance Scheme Act 2013 (Cth)
The NDIS Practice Standards and Quality Indicators
The NDIS Code of Conduct
Applicable state and territory legislation governing restrictive practices and worker screening

It applies to all employees, contractors, volunteers, and board members involved in delivering NDIS-funded supports.

2. Governance Structure

Board of Directors

The Board holds ultimate accountability for the organisation's compliance with NDIS obligations. It meets at minimum quarterly and receives a standing governance report covering:

Notifiable incidents and critical incident trends
Complaints register summary and resolution status
Restrictive-practice authorisation status and reduction plan progress
Audit findings and corrective-action closure rates
Worker screening and key-personnel clearance status

Executive Leadership Team (ELT)

Role	Governance Accountability
Chief Executive Officer	Overall NDIS compliance; liaison with NDIS Commission; key personnel obligations
General Manager — SIL	Service delivery compliance; SIL agreements; participant outcomes monitoring
Quality and Safeguarding Manager	Incident management system; complaints; restrictive practices; continuous improvement
People and Culture Manager	Worker screening; Code of Conduct training; mandatory reporting obligations

Delegation Schedule

A formal Delegation of Authority Register (Doc Ref: GOV-002) specifies which decisions require board approval, CEO approval, or operational-manager approval. Decisions that must always escalate to the board include: entering new registration groups, responding to NDIS Commission investigations, and approving emergency use of regulated restrictive practices beyond existing authorisation.

3. Risk Management

The organisation operates a documented risk register (Doc Ref: RM-001) reviewed monthly by the ELT and quarterly by the board's Risk and Compliance Subcommittee. Risk appetite statements are approved annually by the board. Risks rated High or Critical require a documented treatment plan with named owner and target closure date.

For SIL environments, the risk register must specifically address:

Participant safety and restrictive-practice risk
Worker screening non-compliance
Staffing ratios and after-hours emergency coverage
Financial viability and NDIS price-guide changes

4. Incident Management

The organisation follows the NDIS Commission's reportable incidents framework. All NDIS reportable incidents are submitted via the NDIS Commission Portal within the timeframes specified in the National Disability Insurance Scheme (Incident Management and Reportable Incidents) Rules 2018. The Quality and Safeguarding Manager is the designated responsible officer.

Internal incidents are logged in CareMonitor (Doc Ref: INC-001). A root-cause analysis is completed for all serious incidents. Trend reports are tabled at each ELT meeting.

5. Complaints Management

Participants and their supporters are informed of their right to complain to both the organisation and the NDIS Commission at intake and at each service-agreement renewal. The complaints register (Doc Ref: CMP-001) records date received, nature, resolution, and participant satisfaction outcome. All complaints are acknowledged within two business days. The board reviews an anonymised complaints summary each quarter.

6. Restrictive Practices Governance

No regulated restrictive practice is implemented without prior authorisation in accordance with the relevant state or territory framework. The Restrictive Practices Register (Doc Ref: RP-001) records each participant, the practice type, the authorising body, expiry date, and the behaviour support practitioner responsible for the plan. Unauthorised use of regulated restrictive practices is treated as a notifiable incident.

7. Continuous Improvement

The organisation maintains a Continuous Improvement Register (Doc Ref: CI-001). Improvement actions arise from complaints, incidents, audits, participant feedback surveys, and staff suggestions. Each action has a named owner and a target completion date. Closure is confirmed by the Quality and Safeguarding Manager. A summary is included in the quarterly board report.

8. Policy Review and Version Control

All governance documents are stored in [name of document management system] with version history. Superseded versions are archived and retained in accordance with the organisation's record-keeping obligations. Staff are notified of material policy changes within five business days of board approval.

How to Adapt This Sample for Your Organisation

Replace all italicised placeholders with your own organisation name, registration details, document reference numbers, and software system names.
Map the roles to your actual structure. Sole-director providers will consolidate some functions; large organisations may add further subcommittees.
Cross-reference your existing policies. The framework is the index; each item should link or cite a standalone policy that contains the full procedure.
Have the board formally approve and sign. Auditors look for evidence of board engagement — minutes confirming approval are the standard form of evidence.
Schedule the first review before your next certification audit. A framework that has never been reviewed since creation is a common non-conformance finding.
Test it with a mock audit walkthrough to confirm your staff can locate every referenced document within the time pressure of a real audit.

What Auditors Actually Check

Approved quality auditors assessing governance under the NDIS Practice Standards commonly verify whether:

The governance framework is a current, board-approved document — not a draft dated several years ago
Roles and responsibilities are assigned to named positions (not individuals, who change)
Evidence exists that the board has actually received and discussed governance reports (board minutes)
The incident-management system aligns with the NDIS Commission's reportable incidents rules
Restrictive-practice authorisations are current and recorded centrally
There is a functioning continuous-improvement cycle with closed-loop evidence

Pulling It Together With a Compliance Document Kit

A governance framework needs companion policies to have real weight — each section above references a separate document. If you are building or overhauling your compliance library from scratch, ndiscompliant.com.au offers a 74-document audit-ready SIL compliance kit that includes the governance framework template, delegation register, incident and complaints procedures, restrictive-practice register, and the full policy suite expected under the 2026 strengthened standards — all pre-mapped to the NDIS Practice Standards quality indicators.

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.