Get the kit — A$297

Compliance

Setting Up an NDIS Provider Governance Board: Requirements and Best Practice

Governance is not just a compliance box to tick — it is the structural foundation that determines whether your NDIS provider organisation can deliver safe, quality supports at scale. As providers grow beyond the solo operator stage, establishing a formal governance board becomes essential for meeting NDIS Practice Standard Outcome 2.1, satisfying auditor expectations, and creating the accountability structures that protect participants and the organisation. This guide explains what is required, what best practice looks like, and how to set up a governance board that actually works.

Why Governance Matters for NDIS Providers

Governance determines how your organisation makes decisions, manages risk, and holds itself accountable. For NDIS providers, governance has particular significance because you are entrusted with the safety and wellbeing of people with disability — one of the most vulnerable populations in our community.

Strong governance delivers three critical outcomes:

  1. Participant safety — governance structures ensure that decisions about service delivery, risk management, and incident response are made by people with the right skills, authority, and accountability
  2. Compliance assurance — a functioning governance system catches compliance gaps before auditors do, through regular oversight of policies, registers, and operational practices
  3. Organisational sustainability — governance provides the strategic oversight, financial accountability, and risk management that keeps an organisation viable long-term

The NDIS Commission takes governance seriously. Outcome 2.1 — Governance and Operational Management — is one of the most comprehensively assessed outcomes in a certification audit. Providers who treat governance as a paperwork exercise rather than an operational reality are the ones who receive non-conformances.


NDIS Governance Requirements Under Outcome 2.1

NDIS Practice Standard Outcome 2.1 requires that each participant's support is provided by an organisation that has sound governance. The quality indicators for this outcome examine whether the provider has:

  • A documented governance framework that is appropriate to the size and scope of the organisation
  • Clear roles and responsibilities for the governing body and key personnel
  • Effective risk management systems
  • Quality management systems including continuous improvement
  • Sound financial management practices
  • Compliance monitoring mechanisms
  • Accountability structures that ensure decisions are made in participants' interests

Auditors assess governance through a combination of document review (governance framework, minutes, policies), interviews with key personnel and board members, and observation of operational systems. They are looking for evidence that governance is operational — that the framework described in your documents is actually how the organisation functions.

Audit reality

Auditors will interview board members or key personnel individually. They expect each person to be able to articulate their governance responsibilities, describe how decisions are made, and explain how they monitor compliance and quality. If your board members cannot answer these questions, your governance is not operational.


Board Composition and Skills Matrix

An effective governance board for an NDIS provider requires a deliberate mix of skills, experience, and perspectives.

RoleKey SkillsWhy Essential
ChairpersonLeadership, governance experience, meeting facilitationEnsures effective board functioning and accountability
Financial memberAccounting, financial management, budget oversightNDIS Outcome 2.5 requires sound financial management
Disability sector memberNDIS knowledge, disability service delivery, clinical expertiseEnsures decisions are grounded in sector understanding
Risk and compliance memberRisk management, regulatory compliance, legal knowledgeOversees compliance with NDIS Practice Standards
Lived experience memberPersonal or family experience of disability, participant perspectiveEnsures person-centred governance and authentic participant voice

Board skills matrix

A skills matrix is a practical tool that maps each board member's skills against the capabilities the board needs. Create a table with board members on one axis and required skills on the other, then rate each member's proficiency. This reveals gaps that should be addressed through recruitment, co-option, or professional development.

Required skill areas include:

  • Governance and board management
  • Financial literacy and accounting
  • NDIS regulatory framework
  • Disability service delivery
  • Risk management
  • Human resources and workforce management
  • Legal and compliance
  • Strategic planning
  • Quality improvement
  • Lived experience of disability

Recruiting board members

Finding skilled board members for a small NDIS provider can be challenging. Consider approaching:

  • Retired professionals (accountants, lawyers, healthcare managers) who want to contribute to the community
  • People with disability and their family members who want to influence how services are governed
  • Other NDIS professionals (support coordinators, allied health practitioners) with sector knowledge
  • Board matching services (offered by some state peak bodies and governance institutes)
  • Local business people with relevant skills and community interest

Key Personnel Obligations

The NDIS framework places specific obligations on "key personnel" — individuals who have a significant role in the management or operation of a registered provider. Under the NDIS (Registered Providers of Supports) Rules 2013, key personnel typically include:

  • Company directors and company secretaries
  • Partners (in a partnership)
  • Trustees (of a trust)
  • Members of a management committee (for incorporated associations)
  • Senior managers responsible for NDIS service delivery
  • Any person who exercises or could exercise significant influence over management

Suitability requirements

All key personnel must meet suitability requirements, which include:

  • National criminal history check (or NDIS Worker Screening Check in some jurisdictions)
  • No bankruptcy or insolvency history that would disqualify them
  • No disqualification from managing corporations under the Corporations Act
  • No banning orders under the NDIS Act
  • Demonstration of appropriate qualifications, skills, or experience for their role
  • Completed Key Personnel Suitability Assessment form (maintained on file)

The Complete SIL Kit includes a Key Personnel Suitability Assessment template that documents all required suitability information in an audit-ready format.


Meeting Structure and Frequency

  • Monthly board meetings — for active oversight of operations, finance, compliance, and risk
  • Annual general meeting (AGM) — for incorporated associations and companies limited by guarantee (as required by their constitution)
  • Special meetings — convened for urgent matters (serious incidents, regulatory actions, significant organisational changes)
  • Annual strategic planning session — dedicated session for reviewing and setting strategic direction

Standard board meeting agenda

  1. Apologies and confirmation of quorum
  2. Declaration of conflicts of interest
  3. Confirmation of previous minutes and action items
  4. Chairperson's report
  5. Financial report (P&L, cash flow, budget variance)
  6. Operations report (participant numbers, service delivery, workforce)
  7. Compliance and risk report (incidents, complaints, audit status, risk register review)
  8. Quality improvement report (CI register updates, improvement initiatives)
  9. Strategic matters and new business
  10. Next meeting date and close

Meeting documentation

Every board meeting must produce documented minutes that record:

  • Date, time, location (or virtual platform), and attendees
  • All motions, decisions, and votes (including dissenting votes)
  • Action items with assigned responsibility and due dates
  • Conflicts of interest declared
  • Key discussion points (not verbatim transcripts, but sufficient to show that governance oversight is occurring)

Minutes must be retained as compliance evidence. Auditors will request minutes from recent meetings to verify that governance is operational.


Conflict of Interest Management

Conflicts of interest are common in small NDIS providers, where board members may have multiple roles or personal connections. A robust conflict of interest management system is both a governance requirement and a practical necessity.

Types of conflicts

  • Financial conflicts — board members with financial interests in suppliers, contractors, or competing providers
  • Personal conflicts — family relationships between board members and staff, or between board members and participants
  • Professional conflicts — board members who also provide professional services to the organisation (e.g., accountant who is both board member and auditor)
  • Positional conflicts — the owner/director who is both the governing body and the operational manager

Management framework

  1. Conflict of interest policy — documents what constitutes a conflict, disclosure requirements, and management procedures
  2. Conflict of interest register — records all declared conflicts, how they are managed, and review dates
  3. Standing declarations — board members declare all existing conflicts at the start of each term
  4. Meeting declarations — at each meeting, board members declare any conflicts relevant to agenda items
  5. Management actions — conflicted members withdraw from relevant discussions and decisions, or the conflict is managed through agreed mitigation measures

Creating Your Governance Framework Document

Your governance framework document is the primary evidence of your governance system. It should be comprehensive enough to cover all aspects of organisational governance while being practical enough to actually guide operations.

Essential sections

  • Organisational overview (legal structure, ABN, NDIS registration details)
  • Governance structure (board composition, roles, responsibilities)
  • Key personnel identification and suitability requirements
  • Decision-making processes (what decisions require board approval vs management authority)
  • Delegation of authority framework
  • Conflict of interest policy and management procedures
  • Risk management oversight
  • Financial oversight and accountability
  • Compliance monitoring approach
  • Quality management and continuous improvement
  • Board meeting procedures
  • Governance framework review schedule
  • Organisational chart

The governance framework should be reviewed at least annually and updated whenever there are changes to the organisation's structure, key personnel, or scope of services. Evidence of review (version history, board approval) must be maintained.


Governance Audit Evidence Checklist

When preparing for an NDIS certification or mid-term audit, ensure you have the following governance evidence ready:

  • Current governance framework document (with version history and review dates)
  • Board meeting minutes from the past 12 months
  • Board meeting agendas and attendance records
  • Board skills matrix
  • Key personnel suitability assessments for all current key personnel
  • Conflict of interest register (current)
  • Conflict of interest policy
  • Current organisational chart
  • Delegation of authority document
  • Evidence of board-reviewed financial reports
  • Evidence of board-reviewed risk register
  • Evidence of board-reviewed compliance status
  • Strategic plan or documented organisational objectives
  • Evidence of governance framework annual review
Common audit finding

The most common governance non-conformance is governance that exists on paper but not in practice. Having a governance framework document but no meeting minutes, no conflict of interest register, and key personnel who cannot describe their governance responsibilities, signals that governance is a document — not a system.


Governance for Small Providers and Sole Traders

Small providers and sole traders face a unique governance challenge: the NDIS Practice Standards require governance structures, but a formal board may not be practical or necessary for a one-person or three-person operation.

Proportionate governance

The NDIS Commission recognises that governance should be proportionate to the size and scope of the organisation. A sole trader does not need a five-person board, but they do need to demonstrate governance through:

  • Documented decision-making processes — how key decisions are made and recorded
  • External accountability — an advisory relationship with an accountant, mentor, or peer who provides independent oversight
  • Conflict of interest management — particularly important for sole traders where the owner is also the service deliverer
  • Financial oversight — regular financial reporting and review, even if the audience is just you and your accountant
  • Risk management — documented risk register and regular risk reviews
  • Compliance monitoring — a systematic approach to checking your own compliance against the Practice Standards

Advisory board option

An advisory board — less formal than a governing board — can provide the external oversight and skills that a small provider needs without the legal obligations of a formal board. An advisory board typically meets quarterly, provides strategic advice and challenge, and brings skills that the owner does not have (financial, legal, clinical). Advisory board members do not have the legal fiduciary duties of directors but provide the governance oversight that auditors want to see.

For more on governance requirements under the NDIS Practice Standards, see our detailed NDIS Governance Requirements Guide. For daily documentation support, use our free NDIS Notes Rewriter to ensure your progress notes meet compliance standards.

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.

Frequently asked questions

Does every NDIS provider need a governance board?

Not necessarily. The NDIS Practice Standards require effective governance structures, but the specific form depends on your organisational type and size. Companies limited by guarantee and incorporated associations are typically required by their constituting legislation to have a board or management committee. Proprietary limited companies (Pty Ltd) must have at least one director. Sole traders operate without a formal board but must still demonstrate governance — documented decision-making processes, risk oversight, and compliance monitoring. Regardless of legal structure, as your organisation grows beyond 10-15 staff, a formal advisory board or governance committee is strongly recommended as best practice, even if not legally required.

How many people should be on an NDIS provider governance board?

For small NDIS providers (1-50 staff), a board of 3-7 members is typical and effective. Smaller boards (3-4 members) are more manageable for small organisations but may lack diversity of skills. Larger boards (6-7 members) provide broader expertise but require more coordination and may slow decision-making. An odd number of members avoids tied votes. At minimum, the board should include a chairperson, a member with financial expertise, and a member with disability sector or clinical expertise. Including a person with lived experience of disability (or a family member or carer) is increasingly expected by auditors and demonstrates genuine commitment to person-centred governance.

What skills should an NDIS provider board have?

A well-composed NDIS provider board should collectively hold skills in: governance and board management, financial management and accounting, NDIS regulatory knowledge and disability sector expertise, risk management, human resources and workforce management, legal and compliance, clinical knowledge relevant to your services (e.g., nursing, allied health), and lived experience of disability. Not every board member needs every skill — the goal is collective coverage. Use a skills matrix to map current board skills against required skills and identify gaps that should be addressed through recruitment or professional development.

How often should an NDIS provider board meet?

Best practice for small NDIS providers is monthly board meetings, with a minimum of quarterly meetings. Monthly meetings allow the board to maintain oversight of operations, review financial performance, monitor compliance, and respond to emerging issues in a timely manner. Quarterly meetings are the minimum acceptable frequency for meaningful governance. Special meetings should be convened for urgent matters such as serious incidents, regulatory actions, or significant organisational changes. All meetings should have a structured agenda, documented minutes, and tracked action items.

What governance evidence do NDIS auditors look for?

NDIS auditors assessing Practice Standard Outcome 2.1 typically look for: a documented governance framework, evidence of regular board or governance meetings (minutes, agendas, attendance records), a skills matrix showing board composition, conflict of interest policy and register, key personnel suitability assessments, strategic plan or organisational objectives, evidence of financial oversight (board-reviewed financial reports), evidence of risk oversight (board-reviewed risk register), evidence of compliance monitoring, evidence of governance framework review (at least annual), organisational chart showing reporting lines, and delegation of authority documentation. The auditor is looking for evidence that governance is operational — not just documented.

Keep reading

Free: the SIL Readiness Pack

A checklist and a sample policy page, sent as a download. No sequence.