What is an NDIS quality management system?

A quality management system (QMS) is the backbone of registered NDIS provider compliance. It is not a single document — it is an interconnected set of policies, procedures, registers, schedules and review cycles that together demonstrate your organisation meets the NDIS Practice Standards and the requirements set by the NDIS Quality and Safeguards Commission.

For SIL (Supported Independent Living) and other higher-risk supports, a QMS must cover all four core modules of the Practice Standards as well as the supplementary module for SIL. Under the strengthened 2026 registration framework, auditors assess whether your QMS is embedded in day-to-day operations — not simply a folder of policies that staff have never read.

What a QMS must cover (Practice Standards alignment)

The NDIS Commission's Practice Standards are grouped into core and supplementary modules. Your QMS must address each applicable element. For a SIL provider, this means at minimum:

Filled-in QMS sample: Continuous Improvement Policy

The following is a realistic example of how a registered SIL provider might complete one core QMS document — the Continuous Improvement Policy. Adapt this to your own organisation's name, structure and evidence.

Field Filled-in example
Policy title Continuous Improvement and Quality Management Policy
Policy owner Chief Executive Officer
Applicable service types SIL — all accommodation sites; Community Participation (where registered)
Review cycle Annual minimum; triggered review upon any critical incident, audit non-conformance or legislative change
Version 3.1 — updated to reflect 2026 strengthened Practice Standards
Purpose To ensure Sunrise Supported Living Pty Ltd systematically identifies, analyses and acts on opportunities to improve the quality and safety of supports delivered to NDIS participants.
Scope All staff, volunteers, contractors and subcontracted support workers delivering NDIS-funded supports across all sites.
Legislative and regulatory basis NDIS Act 2013 (Cth); NDIS (Provider Registration and Practice Standards) Rules 2018; NDIS Code of Conduct; NDIS Practice Standards (Core Modules 1–4, SIL Supplementary Module)
Key roles and responsibilities CEO: final accountability for QMS integrity. Quality Manager: coordinates audit schedule, non-conformance register, staff training records. Site Supervisors: capture feedback, complete monthly quality checks, escalate incidents within 24 hours. All staff: report near-misses and participant feedback.
Continuous improvement cycle Plan — Do — Check — Act (PDCA). Evidence gathered from: participant feedback surveys (quarterly), staff debrief notes, incident and complaints data (monthly trend review), internal audits (bi-annual), external audit findings.
Non-conformance management All non-conformances recorded in the Non-Conformance Register within 48 hours of identification. Root-cause analysis completed within 10 business days. Corrective action assigned owner and target date. Closed non-conformances reviewed at the next Board quality report.
Participant involvement Participants are invited to contribute to quarterly quality reviews. Feedback is documented, de-identified, and tabled at the Quality and Safety Committee. Outcomes and any changes are communicated back to participants in accessible formats.
Document control All QMS documents stored in the organisation's SharePoint quality register. Superseded versions archived with retention period aligned to NDIS Commission record-keeping guidance. Staff notified of updates via all-staff email and induction refresher.
Related documents Incident Management Policy; Complaints and Feedback Policy; Risk Management Framework; Restrictive Practices Policy; Human Resources Policy; Emergency Management Plan

The QMS documents auditors will ask for

When an approved quality auditor (AQA) conducts your certification or verification audit against the NDIS Practice Standards, they will seek evidence across your whole QMS — not just the policy documents. Common evidence requested includes:

  1. Non-conformance and corrective action register — showing all incidents and near-misses have been reviewed and acted upon
  2. Internal audit schedule and completed audit reports — demonstrating proactive monitoring, not just reactive fixes
  3. Participant feedback data and how it drove change — auditors look for the "loop closed" evidence
  4. Staff training records — including NDIS Code of Conduct induction, mandatory reporter training, and restrictive-practices authorisation where applicable
  5. Board or governance committee meeting minutes — showing quality is on the leadership agenda
  6. Complaints register and outcome letters — verifying the complaints pathway is operational and that complainants received responses
  7. Risk register — updated, with risk owners and treatment status visible

Five common QMS gaps that cause audit non-conformances

Structuring your QMS for the 2026 strengthened framework

The NDIS Commission's strengthened registration requirements — being progressively implemented from 2026 — increase the scrutiny applied to governance, suitability of key personnel and the evidencing of participant outcomes. To be audit-ready under this framework, your QMS should:

For providers building or overhauling their QMS ahead of renewal, the ndiscompliant.com.au 74-document audit-ready SIL compliance kit includes pre-filled policy templates, registers, audit checklists and staff induction resources aligned to the current Practice Standards — a practical shortcut for organisations that need a complete, structured foundation quickly.

Keeping your QMS live between audits

A QMS that is only opened when an audit notice arrives will not reflect genuine continuous improvement — and auditors will notice. The hallmarks of a QMS that works in practice are: regular team meetings that table quality data, a non-conformance register that is never empty (because no organisation is perfect), participant voices that demonstrably shape service design, and leadership that can articulate why each policy exists.

Building quality management into your operational rhythms — monthly team reviews, quarterly participant surveys, bi-annual internal audits — means your QMS is simply the documented record of what you already do, rather than a compliance burden.

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.