NDIS Practice Standards
Core module: governance and operational management
core-10.2 Risk management: documented, proportionate risk management system
Clause and reference core-10.2, our reference for this requirement in the NDIS Practice Standards and Quality Indicators
The requirement
A documented risk management system is in place that effectively manages identified risks and is relevant and proportionate to the provider's size and scale and the scope and complexity of its supports.
Our wording of the requirement: our statement of what the clause asks, not the instrument verbatim. Source: NDIS Practice Standards on the compliance desk.
The evidence to bring
- Risk management policy and framework document
- Records of periodic risk register review and sign-off
- Risk reports to the governing body
What assessors commonly find
- Generic purchased template not adapted to the provider's supports
- No evidence the system has been reviewed
What evidence do I need?
For core-10.2 Risk management: documented, proportionate risk management system, the evidence to bring is: Risk management policy and framework document; Records of periodic risk register review and sign-off. It sits under Core module: governance and operational management and our reference for it is core-10.2. Keep every record dated, signed and current, and name who owns it.
Answer the reviewer first
Show me risk management policy and framework document, and tell me who owns it and when it was last reviewed.
That is the question a quality assessor opens with for this requirement. Have the record on the desk and the date it was last reviewed to hand.
Read your own evidence against this clause
Paste your policy or evidence pack and the reading marks, line by line, whether a phrase from this requirement appears and quotes your own words when it does. It is a reading of your text, not a compliance result; a quality assessor decides whether a requirement is met. Read your pack, free See the paid reading