NDIS Governance Requirements: The Eight Quality Indicators Explained

The short version: governance under the NDIS Practice Standards is one outcome with eight quality indicators. They ask who governs the organisation, how it oversees quality and safeguarding, how it watches management, how it handles conflicts of interest, and whether people with disability have a say. The standard asks for systems that are "relevant (proportionate)" to your size and the supports you deliver, so a sole director and a large board both have to meet it, in different ways. Everything below links to the Quality Indicators for NDIS Practice Standards Guidelines so you can check the exact wording.

What the governance standard requires

Governance sits in Division 2 of the Core Module, "provider governance and operational management". The Practice Standards themselves are set by the NDIS (Provider Registration and Practice Standards) Rules 2018, and the quality indicators that apply to them are in the Quality Indicators Guidelines. The Commission publishes both together in its NDIS Practice Standards and Quality Indicators document.

The outcome reads: "Each participant's support is overseen by robust governance and operational management systems relevant (proportionate) to the size, and scale of the provider and the scope and complexity of supports delivered."

Two words in that sentence do most of the work. Overseen means the governing body has to be able to show it actually watches what happens to participants, not just that policies exist. Proportionate means the system is judged against your size and the supports you deliver, not against a large organisation's model.

The eight governance indicators, and the evidence for each

The Guidelines list eight indicators for this outcome. Here is each one in plain terms, with the records that usually show it.

1. People with disability contribute to governance. The governing body provides opportunities for people with disability to contribute to governance and to policy that affects supports and participant rights. Evidence: an advisory group, participant representation, or a documented consultation step when policies change, with records that it happened.
2. A defined governance structure. The governing body implements a structure to meet its financial, legislative, regulatory and contractual responsibilities, and to monitor and respond to quality and safeguarding matters. Evidence: a governance charter or terms of reference, a meeting schedule, and minutes that show incidents, complaints and risks being reviewed.
3. The governing body has the skills to govern. The skills and knowledge needed are identified, and members train to close gaps. Evidence: a skills matrix for directors or board members and a record of the training they completed.
4. Planning accounts for the NDIS. Strategic and business planning considers legislative requirements, organisational risks, NDIS requirements, participants' and workers' needs and the wider environment. Evidence: a current business or strategic plan that names these things, not a generic template.
5. Management performance is monitored. The governing body monitors management, including responses to individual issues, to drive continuous improvement. Evidence: regular management reports to the governing body and minutes recording decisions taken on them.
6. Qualified, accountable management. The provider is managed by suitably qualified or experienced people with clearly defined responsibility, authority and accountability. Evidence: position descriptions, an organisation chart and records of the qualifications or experience of key people.
7. Delegation when someone is away. A documented system delegates responsibility and authority to another suitable person when the usual position holder is absent. Evidence: a delegations register or instrument naming who acts for whom.
8. Conflicts of interest are managed. Perceived and actual conflicts are proactively managed and documented, including through policy. Evidence: a conflict of interest policy, declarations, and a register showing how each declared conflict was handled.

For each indicator, the test is the same: a policy that says what you do, a record showing you did it, and a person who can explain it. Our NDIS compliance checklist sets out the evidence for the whole Core Module, division by division.

Governance runs through the rest of Division 2

The governance outcome is not the only place the governing body appears. Several other Division 2 indicators depend on it.

• Risk management. The risk management system has to cover governance and operational management, alongside incident management, complaints, finance, human resources, information management, work health and safety, and emergency and disaster management. Appropriate insurance, including professional indemnity, public liability and accident insurance, is an indicator in its own right.
• Quality management. The quality management system must define how you meet legislation and the standards, be reviewed and updated, and include a documented program of internal audits. It supports continuous improvement using outcomes, risk data, evidence-informed practice and feedback from participants and workers.
• Information management. Participant information must be identifiable, accurate, current and confidential, with consent obtained to collect, use and disclose it.
• Emergency and disaster management. Here the indicators name the governing body directly. It develops the emergency and disaster management plans, oversees the response, tests and adjusts the plans, reviews them regularly with participants and their support networks, and communicates them to workers, participants and support networks.

All of these are in the same Guidelines. A governance framework that ignores them leaves the governing body unable to show it oversees the risks the standards care about most.

Governance framework or compliance management system?

Providers often search for a "compliance management system" when the standard is describing governance. In practice they are the same set of records, seen from two angles. The governance framework says who decides and how oversight works. The compliance management system is the machinery that gives them something to oversee:

• a register of the obligations that apply to you (Practice Standards, NDIS Rules, Code of Conduct, contracts);
• a governance calendar: when the governing body meets, what it reviews each time, and when policies fall due for review;
• the registers it reviews: incidents, complaints, risks, conflicts of interest, delegations and worker screening;
• an internal audit schedule, and the actions that come out of it;
• minutes that record decisions, owners and due dates, so the next meeting can check they were done.

Whether you keep this in software or in a well-run set of documents matters less than whether it moves. A register that has not changed for months tells the reader that nobody is looking at it. We cover the trade-offs in NDIS compliance management without software.

What "proportionate" means for small providers

The standard does not require a board. It requires a governing body, and systems proportionate to your size and the complexity of what you deliver. For a small company the governing body may be one or two directors. The indicators still apply: there is still a structure, still monitoring of management, still a delegation for when the director is unavailable, and still a record of conflicts.

What changes is the form. A sole director can meet the monitoring indicator by holding a scheduled monthly review of incidents, complaints and risks and minuting it, even with no one else in the room. A delegation can be a one-page instrument naming who acts in an absence. What cannot change is that the record exists and shows the review happened.

SIL providers: practice governance since 1 July 2026

Supported independent living providers have also had to meet the SIL practice governance standard since 1 July 2026, alongside the Core Module. It focuses on how good practice is led and supported in the home, which sits on top of the organisational governance described above. Our guide to the four SIL Practice Standards covers it in detail.

Where governance evidence usually falls short

Governance gaps are rarely missing policies. They are missing records of the policy being used:

• a governance charter, but no minutes showing incidents or complaints being reviewed;
• a conflict of interest policy, but no declarations or register;
• no named delegate for the director or the key manager;
• no evidence that people with disability had any input into policy;
• a business plan that never mentions the NDIS, participants or risk;
• emergency plans that were written once and never tested or reviewed.

Each of these takes time to fix, because the fix is a track record. If a policy came from a template, read when NDIS policy templates fail before relying on it.

How Compliance Care helps

We map your governance arrangements to the eight indicators and the rest of Division 2, then set up the registers, calendar and reporting so the governing body produces the evidence as it works. Our ongoing compliance support keeps that evidence current between audits. Audits are carried out by independent approved quality auditors; our job is to make sure your governance holds up to that review. To see where you stand, book a discovery call.