What evidence does an auditor or the regulator ask for under Incident Rules s 8?

Documented incident management policy and procedure with version and approval date; Incident management system mapped section by section to the Rules; Evidence the system is in use: recent incident register entries across each service type

Rules / NDIS Incident Management and Reportable Incidents Rules

IncidentsNDIS Incident Management and Reportable Incidents Rulesndis-incident-management-rules--s8-implement-and-maintain-an-incident-management-system

Requirement

Implement and maintain an incident management system that meets the Rules

NDIS Incident Management and Reportable Incidents Rules s 8, stated plainly and cited to the edition held, with the evidence an auditor or the regulator asks for, the common gaps, and a free worksheet to fill in.

Clause

Incident Rules s 8

Regulator

NDIS Quality and Safeguards Commission

Edition held

NDIS (Incident Management and Reportable Incidents) Rules 2018, F2018L00633 as made, in force 1 July 2018 (no amendments)

Checked current

6 October 2026, Federal Register: latest version on 6 October 2026

Who it applies to

Registered NDIS providers, every profession. Unregistered providers are not bound by these Rules.

Every clause in the standards library

NDIS Incident Management and Reportable Incidents Rules on the standards library

s 8Implement and maintain an incident management system that meets the Rulessource

Requirement, our statement of the clause

Every registered NDIS provider must implement and keep in operation an incident management system that meets all the requirements of Division 2 of Part 2, and that is appropriate to the provider's size and the classes of supports or services it delivers (Act paragraph 73Y(a)).

Evidence that typically shows this

Documented incident management policy and procedure with version and approval date
Incident management system mapped section by section to the Rules
Evidence the system is in use: recent incident register entries across each service type

Common gap to check

A policy exists but the incident register is empty or not used by frontline sites
System written for a different service mix than the provider now delivers

Worksheet: what your practice holds, and where

Ref	Held (yes, partly, no, not applicable)	Where it is kept	Owner	Last reviewed	Next review
s 8

Download the worksheet (CSV)Print the worksheet (A4)

Completing this worksheet records what your practice holds and where. It does not make a practice compliant or ready for audit, and it is not legal advice.

Related requirements

NDIS Incident Management and Reportable Incidents Rules

s 12(2), s 12(3), s 12(4)Incident records: the minimum details, kept 7 years
s 9Incidents the system must cover
s 20(1), (2), s 20(3), s 20(4)Reportable incidents notified within 24 hours, then within 5 business days
s 10(1)Procedures for identifying, managing and resolving incidents
s 10(3), (4)Assess every incident with the affected person's views
s 10(5)Route reportable incidents into Part 3
s 10(6)Periodic review of the incident management system
s 11Procedural fairness in dealing with incidents
Every page of this instrument

The same topic in other instruments (incidents)

NDIS Practice Standards Core 14.1 to Core 14.4Core module: Incident management
NDIS Practice Standards Module 6 5.1Module 6: Incident management
NDIS Practice Standards Module 2 8.1, Module 2 8.2Module 2: Reportable restrictive practice incidents
NDIS Practice Standards Module 2A 9.1 to Module 2A 9.7Module 2A: Reportable restrictive practice incidents
NDIS Act ss 73Y and 73ZIncident management system and reportable incident notification
NDIS Code of Conduct s 6(1)(e)Promptly raise and act on concerns about quality and safety

See every requirement for your practice See the specimen practice