NDIS Staff Training Requirements: The 2026 Provider's Guide

I've spent most of my working life in disability support, on the floor and then running the rosters, and the question I got asked more than any other by new providers was some version of: what training do I actually have to do? People expect a tidy checklist handed down from the Commission. There isn't one, not really, and the gap between what's strictly mandatory and what you genuinely need is where most services come unstuck without ever clocking it.

So let's be honest about what's required, what's expected, and what actually keeps people safe. Those are three different things.

The short, honest version

There is exactly one training module the NDIS Quality and Safeguards Commission mandates for every registered provider: the NDIS Worker Orientation Module. That's it. Everything else you've heard described as "mandatory" is either a precondition that isn't training (like the worker screening check), or it's something the Practice Standards expect you to decide on yourself based on who you support.

That surprises people, and then it worries them, because "you decide" is a lot harder to evidence at audit than "we did the required course." Fair. Let's go through it properly.

What's actually mandatory: the Worker Orientation Module

The module is called Quality, Safety and You. It's a free, interactive online course built by the NDIS Commission and presented by people with disability, and it takes about 90 minutes. It walks workers through the NDIS Code of Conduct, the rights of the people you support, and what's expected of a worker day to day.

A few things worth knowing that save you grief later:

• It applies to your whole workforce, not just frontline support workers. Key personnel, managers, admin staff and volunteers who interact with the people you support are all in scope.
• The completion certificate doesn't expire, and it's transferable. If a worker did it at their last provider, they don't have to do it again, though you'll want a copy of the certificate on file.
• It's foundational, which is the polite way of saying it's a floor. It tells a worker what the Code of Conduct is. It does not tell them how to read a person who's escalating, or what to do when a shift goes sideways at 9pm with no one else in the house.

Do it, log it, keep the certificates somewhere you can produce them in thirty seconds. Then treat it as the start line, not the finish.

What the Practice Standards actually expect (this is the bit people miss)

Here's where providers get caught. The NDIS Practice Standards don't hand you a syllabus. They set quality indicators, and they expect you to determine the training that equips your workforce to meet them for the specific people you support. Your obligation isn't to complete a named list. It's to make a judgement, and then be able to defend it.

An auditor isn't going to ask "did you do course X." They're going to ask something more like: you support someone with complex communication needs and a history of choking, so where's the evidence your workers were trained for that before they walked in the door? If your answer is the orientation module and a shrug, that's a problem, and it's a problem you created by treating "mandatory" as the whole job.

So the practical translation of the Practice Standards is roughly this:

That last row is the one that gets ticked off at audit and forgotten the rest of the year. If you can't show it on demand, it may as well not have happened.

High-intensity supports: the real obligation

If you deliver high-intensity daily personal activities, the rules get specific, and rightly so. The NDIS high intensity support skills descriptors set out the skills and knowledge a worker needs for things like complex bowel care, enteral feeding, tracheostomy management, and severe dysphagia support.

The approach is competency-based, and there are a few non-negotiables in how that training has to happen:

• It's delivered and overseen by an appropriately qualified health practitioner, matched to the support and to the worker's experience.
• It happens before the worker provides the support, not after they've been thrown in.
• It's refreshed when the person's plan or risks change, when a worker hasn't delivered that support for three or more months, and the Commission recommends an annual competency check on top.

I'll say the unpopular thing plainly, because it's the thing CORA exists around: an online course cannot sign a worker off as competent to manage a tracheostomy. eLearning is brilliant for knowledge, judgement and decision-making, the stuff you can genuinely build at scale, on a phone, between shifts. It is not a substitute for supervised, hands-on practicum for high-intensity clinical tasks. Anyone selling you otherwise is selling you a non-conformance.

The training your workers actually need (by role and by who they support)

Beyond the one mandatory module, most of what a good provider trains is driven by role and cohort rather than legislation. None of the following is a blanket legal requirement for every worker, but if your service touches these areas and your training doesn't, an auditor will notice, and so will the next incident.

• First aid and CPR, currency periods apply, and almost every direct-support role needs it.
• Manual handling, for any service involving transfers, hoists or mobility support.
• Medication administration, where workers assist with or administer medication.
• Infection prevention and control, right-sized for community and home settings, not a hospital ward.
• Positive behaviour support and restrictive practices, anywhere behaviours of concern are part of the picture, with proper authorisation and reporting.
• Condition-specific understanding, autism, intellectual disability, mental health, acquired brain injury, dementia. This is the stuff that decides whether a shift goes well or goes wrong, and it's the most under-trained area in the whole sector.

You don't train every worker on everything, and you shouldn't. A worker supporting one person with autism doesn't need the full behaviour-support suite, and a community-access worker doesn't need enteral feeding. The skill is assigning the right training to the right worker for the people they actually support. (If you want a quick way to map that, our Pathway Builder does it free, no sign-up.)

How often should you refresh it?

There's no single legislated interval for most training, which trips people up. The honest answer is that refresh cadence should follow risk, not the calendar. High-intensity competencies get reassessed at least annually and whenever needs change. First aid and CPR follow their own currency rules. Compliance and condition-specific training should be refreshed whenever a plan changes, a risk changes, or the guidance itself changes, and the sector moves more than people expect. Build a simple cycle, write down why you chose it, and you've answered the question before an auditor asks it.

Compliance is the floor. Capability is the job.

If you take one thing from all of this: completing the mandatory training proves you met the minimum. It does not prove your workforce is any good. Two workers can have identical records, the same module, the same screening, the same certificates, and one of them reads a room in four seconds while the other one doesn't yet. That difference never shows up on a compliance report, and it's the difference that keeps people safe.

The good news, and the reason I built CORA, is that the soft stuff isn't unteachable magic you have to hope you hired. Reading a person, staying calm when things escalate, knowing why a strategy works and not just that it exists, that's all trainable. We just have to actually build the training that teaches it, and then be able to show where our workforce stands. CORA's Workforce Capability Report exists for exactly that second part, turning completion data into a picture of capability you can put in front of a board or an auditor.

Sources and further reading

• NDIS Code of Conduct, NDIS Quality and Safeguards Commission
• NDIS Practice Standards, NDIS Quality and Safeguards Commission
• High intensity daily personal activities, supplementary module and skills descriptors

This guide is general information for NDIS providers, not legal or compliance advice. Always check the current requirements directly with the NDIS Quality and Safeguards Commission, because the detail does change.