The governance records an NDIS provider is asked to show, in one place: a risk register, delegations of authority, a business continuity plan, a compliance calendar and board-ready reports, alongside your board meetings and membership. Everything is linked, owned by a named person and kept with a history, so your board can see what needs attention and your auditor can see the evidence.
See what is overdue and what is coming up across every register you can access.
The risk register lives in a spreadsheet nobody has opened since the last audit. Delegations sit in a policy PDF that no longer matches who actually signs what. The continuity plan is in a folder, written but never tested. Compliance dates are in someone’s calendar. When the board pack is due, someone spends a day copying numbers between them, and an auditor asks for evidence that the plans are reviewed and tested, not just written.
Create a risk register, action plan, delegations register and continuity plan for your organisation, and share each one with the people who look after it as owner, editor or viewer.
Every risk, treatment, action and authority has a named owner and a due or review date, so nothing sits in a state of “to be reviewed”.
The compliance calendar pulls every due date into one agenda and sends reminders before things fall due. Overdue items rise to the top of the overview.
Choose the registers, add a title and meeting date, and create a PDF, an Excel workbook or an on-screen preview, opening with a summary of what is overdue and coming up.
One dashboard of what is overdue, what is due in the next 7 and 30 days, high risks and recent activity.
See the overview5×5 risk scoring, controls, treatments and a heatmap, with review dates and overdue flags.
See the risk registerTrack actions from board meetings and audits with owners, priorities, due dates and progress.
See the action planWho may approve, sign and spend, with limits, and a check that every authority has someone who can approve it.
See delegationsCritical functions, scenarios, run-sheets, contacts and recorded drills.
See the continuity planEvery review, treatment, action, test and compliance task in one agenda, with reminders and a calendar export.
See the calendarA branded PDF, Excel workbook or on-screen preview for your board, with an executive summary.
See the board packOpen Governance and see what needs attention today. The overview pulls overdue and upcoming items from every register a person can access into one list, so a manager or board member does not have to open four registers to find out what is late.
Record the risks to participants, workers and your organisation, rate them, and show what you are doing about each one. The NDIS Practice Standards ask for a documented risk management system that identifies, analyses, prioritises and treats risks. The risk register is that system, with the review dates and history that show it is kept up to date.
Turn decisions and audit findings into actions with an owner and a date, and keep them visible until they are closed. Following actions through to completion is the practical side of the continuous improvement the quality management standard asks for.
Record who may approve, sign and spend, at what limit, and who covers when they are away. The Practice Standards ask for a “documented system of delegated responsibility and authority”, including for when the usual position holder is absent. A matrix makes that readable at a glance.
Document the critical functions that keep supports running, the scenarios that could stop them, and exactly what you do. The Practice Standards expect emergency and disaster plans to be tested and reviewed, so the plan records every test and shows when the next one is due.
Every date that matters, in one agenda or month view: risk reviews, treatments, actions, delegation reviews, continuity tests, your NDIS registration expiry and your own compliance tasks such as insurance renewals.
One document for the board: headline numbers, what is overdue, and the detail behind each register. Choose the registers, add a title and the meeting it is for, and create it in the format you need.
Save a copy of a register before the board meeting, and later see exactly what changed. Registers are also copied automatically, so there is always something to go back to.
Schedule and record board meetings in one place, with a proper history, so decisions and discussions are easy to find later instead of sitting in email threads.
Keep board membership, roles and term dates together, so you can see who is on the board and when terms start and end, and plan renewals or replacements in good time.
The NDIS Commission’s Core Module, Provider governance and operational management, sets out the governance and risk systems registered providers are audited against. These are the parts NDIS Tools helps you keep evidence for. The standards are proportionate to the size and scale of the provider, so you can start with one register and build from there.
| The Practice Standards ask for | Where it lives in NDIS Tools |
|---|---|
| A “documented system of delegated responsibility and authority”, including cover when the usual position holder is absent | Delegations of Authority: authorities, limits and delegates, with acting arrangements and review dates. See how |
| A “documented risk management system” that identifies, analyses, prioritises and treats risks | Risk Register: 5×5 scoring, controls, treatments, a heatmap and review dates. See how |
| Risk management that covers governance, finance, workforce, information, work health and safety, incidents, complaints and emergencies | Risk categories you set up, so each area has its own risks and owners. Incidents are managed in Incident / Hazard Reporting. See how |
| Appropriate insurance | Compliance Calendar: insurance renewals and other obligations tracked as repeating tasks with reminders. See how |
| A quality system that supports continuous improvement | Action Plan: actions from meetings and audits tracked to close-out, with History to show what changed. See how |
| Continuity of supports, with emergency and disaster plans that are tested and reviewed | Continuity Plan: critical functions, scenarios, run-sheets, recorded drills and test due dates. See how |
| A governing body that monitors the provider’s performance | Governance Overview and Board Report Pack: a board-ready summary of what is overdue and coming up. See how |
NDIS Tools helps you keep the records and evidence. It does not make a provider compliant, and your auditor decides whether the Practice Standards are met. Wording is taken from the NDIS Commission’s Core Module; the standards are under review, so check the Commission’s site for the current text.
Reviews, tests and actions are dated and attributed, so you can show a plan is maintained and used, not only written.
Overdue reviews, treatments with no progress, authorities nobody can approve and scenarios with no steps are all flagged.
Stop copying numbers between spreadsheets the night before the meeting. Create the pack from live registers.
Use one register or all four. There is no framework to adopt first, and it suits small and mid-sized providers as well as larger boards.
Staff are the same people already in NDIS Tools, and treatments and actions can create tasks in the Tasks tool when you choose.
Each register is shared with named people as owner, editor or viewer, and reports include only the registers you can see.
Every register keeps an activity log of who changed what and when, and History saves copies you can compare and restore. Board reports state the date, time and timezone the numbers were taken.
Software for the records that sit behind good governance: risk, delegations of authority, continuity plans, compliance dates, actions and board reporting. NDIS Tools keeps them linked, owned and dated in one place instead of across spreadsheets and folders.
No software can do that on its own. NDIS Tools helps you keep the documented systems and evidence the Core Module asks for, such as a risk management system, delegations and tested continuity plans. Your auditor decides whether the standards are met.
No. The Practice Standards apply to registered providers, and that is who the table above is written for. Unregistered providers and boards use the same tools to keep the same discipline, for example when an insurer, funder or board member asks how risks are managed.
Each risk is scored on a 5×5 matrix of likelihood and consequence, with inherent, residual and target ratings shown as Very High, High, Medium or Low. Each risk is rated at its worst impact area, and the heatmap shows where everything sits.
Yes. Each register is shared with named people as owner, editor or viewer. Board reports include only the registers shared with the person creating them.
Yes. Start a drill from a scenario, tick off the run-sheet steps (each is recorded with who and when), keep a log and stand down. The plan shows the last test and when the next one is due.
You choose the registers, add a title and the meeting date, and get an executive summary of what is overdue and due in the next 30 days, then the detail for each register. Create it as a PDF in landscape A4 with your company logo, as an Excel workbook, or as an on-screen preview. You can add a detail card for every open risk.
The calendar combines review dates, treatments, actions, delegation reviews, continuity tests, your NDIS registration expiry and your own repeating compliance tasks. Owners are reminded at 30, 14, 7 and 1 days before, on the day, and weekly for up to eight weeks while an item is overdue. You can export the calendar as an .ics file for your own calendar app.
Yes. Save a named snapshot, or use the automatic copies, then compare it with today and restore either only what was deleted or the whole register. A copy of the current register is saved first, so a restore can be undone.
Yes. A risk treatment or an action can create a task in the Tasks tool when you want it tracked day to day. Board Meetings and Board Members are part of the same area and the same login.
The NDIS Commission publishes the Practice Standards that registered providers are assessed against.
Register your interest and we’ll walk you through the risk register, delegations, continuity plan and board pack, built around what your board and auditors ask for.