Compliance · Catalogue
The register of registers
Every register DAS maintains, in one place: what requires it, who owns it, how often it must be reviewed, how sensitive it is, and where it lives. Transcribed from B043 Governance Registers Suite v1.0 §5.
Counts 45 registers ·
9 in portal ·
17 linked file ·
19 not started ·
12 Board-reported quarterly ·
6 in use but absent from B043 v1.0.
Show
| Register | Source policy | Owner | Cadence | Classification | Held | Currency |
|---|---|---|---|---|---|---|
| Governance and Board · 10 | ||||||
| Register of Members | Constitution; Associations Act 2003 (NT) | Public Officer / 2IC | Continuous; AGM review | Confidential | Linked file | — |
| Register of Directors 7 directors confirmed Jul 2026. The SharePoint register is stale — the source of truth is email. Reconciling it is a live action. | Constitution; ACNC | Public Officer / 2IC | continuous | Confidential | Linked file | — |
| Board Resolutions Register | B001 Board Charter | Public Officer | Per meeting | Confidential | Linked file | — |
| Common Seal Register | Constitution | Public Officer | Per use | Confidential | Linked file | — |
| Delegations Register | B002 Delegations Policy | CEO | On change | Internal | Linked file 7. Quality Management/Audit/Auditor Evidence List/11 Delegation of Authority and Responsibility | — |
| Conflict of Interest Register (Board and CEO) Board | B003 Board Conflict of Interest Policy | Board Chair / Public Officer | Per meeting + annual | Confidential | In portal 7. Quality Management/Audit/Auditor Evidence List/14 Conflict of Interest Register | — |
| Conflict of Interest Register (Staff and Volunteers) B034 requires a staff/volunteer declarations register separate from the Board one. The 2026 workbook holds Board directors and the CEO only — no staff or volunteer declarations exist. Confirmed gap. | B034 Conflict of Interest Policy Staff and Volunteers | 2IC | Continuous + monthly review | Confidential | Not started | Not started |
| Gifts and Benefits Register Board Specified by B038 and Board-reported quarterly. No register file found anywhere in the audit pack or CURRENT FILES. | B038 | 2IC | Continuous + quarterly Board review | Confidential | Not started | Not started |
| Quality Improvement Register not in B043 Board The continuous-improvement register the NSDS audit asks for by name (evidence folder 08), and the destination for every 'policy improvement identified' on a complaint. B043 v1.0 §5 does not list it. Add at the next Suite review. | NDAP / NSDS continuous improvement | CEO | quarterly | Internal | In portal 7. Quality Management/03 Quality Improvement — Quality Improvement Register.xlsx | — |
| Cultural Review Register not in B043 Tracks material sent for First Nations cultural review and its status (including items still 'Pending cultural review'). Real, in use, and absent from B043 v1.0. Cultural content is flagged, never authored — this register is the flag. | PATH / CB&PLG cultural governance | 2IC | per-event | Internal | Linked file _JOB_DAS/PATH_PLANNING/…/04_DAS_Originals/01_Cultural_Review_Register.md | — |
| Risk, safeguarding and incident · 16 | ||||||
| Strategic Risk Register Board Two registers were in circulation. 'DAS Enterprise Risk Register v4.xlsx' is the survivor — reworked to v4.0 on 15 May 2026 with a treatment plan, KRIs and a review log. 'Strategic Risk Register Update April.xlsx' is superseded: two mismatched ID schemes stacked in one sheet, duplicate IDs, and nothing reviewed in ~15 months. ⚠ The two workbooks CANNOT be joined on Risk ID — v4 renumbered. Of 43 old IDs, only 3 keep both ID and risk; 28 moved to a different ID; 12 have no confident match and need a merged/retired/dropped decision. Any history mapping must be done on risk title. | R001 Risk Management Framework | CEO | Quarterly Board | Confidential | In portal 7. Quality Management/Audit/Auditor Evidence List/12 Business Risk Register — DAS Enterprise Risk Register v4.xlsx | — |
| Key Risk Indicators not in B043 17 leading indicators with green/amber/red thresholds, introduced in the v4 redesign. They are the only forward-looking signal in the whole register suite — everything else records what already happened. ⚠ Thresholds and current values are stored as text with units ('≤55%', '2.4 mo'), so the portal shows them as recorded and does not compute a status; parsing them into numbers is a follow-up. | R001 Risk Management Framework | CEO | quarterly | Internal | In portal DAS Enterprise Risk Register v4.xlsx — '06KRIs' sheet | — |
| Operational Risk Register R001 splits strategic from operational risk. Only the enterprise/strategic register exists; operational risk is currently carried inside it or not at all. | R001 Risk Management Framework | Operations Manager | monthly | Internal | Not started | Not started |
| Safeguarding Concerns Register Board Highly Confidential — never migrated into the portal. Currency tracked here; contents stay in restricted-access storage. | B013 | CEO | Continuous + quarterly Board summary | Highly Confidential | Linked file | — |
| Child Safety Concerns Register Board Highly Confidential — never migrated into the portal. | B023 | CEO | Continuous + quarterly Board summary | Highly Confidential | Linked file | — |
| Reportable Conduct Register Board Highly Confidential, permanent retention — never migrated into the portal. | B022 | CEO | Continuous (permanent retention) | Highly Confidential | Linked file | — |
| Reportable Incidents Register (NDIS s 73Z) Highly Confidential, permanent retention — never migrated into the portal. | B022 | CEO | Continuous (permanent retention) | Highly Confidential | Linked file | — |
| Critical Incident Debrief Log Highly Confidential — never migrated into the portal. | B028 | CEO | Continuous + annual de-identified Board summary | Highly Confidential | Linked file | — |
| Whistleblower Disclosures Register Highly Confidential, permanent retention — never migrated into the portal. | B020 | CEO (Board Chair where the CEO is the subject) | Continuous (permanent retention) | Highly Confidential | Linked file | — |
| Fraud Risk Register Board Specified by B030 and Board-reported quarterly. No register file found. | B030 | CEO + Treasurer | quarterly | Confidential | Not started | Not started |
| WHS Incident Register | W001 Work Health and Safety Policy | Operations Manager | Continuous + monthly review | Confidential | In portal 7. Quality Management/Audit/Auditor Evidence List/20 Incident Form and Register | — |
| Hazard Register W001 requires a hazard register distinct from the incident register. The WHS workplace inspection checklist is the closest artefact and is not a register. | W001 Work Health and Safety Policy | Operations Manager | Quarterly + on report | Internal | Not started | Not started |
| Complaints Register Board | B010 Complaints, Disputes and Feedback Policy | CEO | Continuous + quarterly Board summary | Confidential | In portal 7. Quality Management/Audit/Auditor Evidence List/21 Complaint Form and Register | — |
| Privacy Incident and Data Breach Register (NDB) not in B043 Board DAS holds NDIS plans, health information and case files for a 7-person org, so a data breach is a live risk with a statutory clock: contain, assess likely serious harm within 30 days, notify the OAIC and affected individuals if the threshold is met. B043 v1.0 §5 catalogues no such register and no file exists — this row is the gap, stated rather than omitted. It was briefly scaffolded inside the advocacy CRM (28 Aug 2026, das-path-planner#17) and removed: a whole-of-organisation privacy obligation cannot live behind an advocacy login where only PII-cleared caseworkers can see it and the audit catalogue does not know it exists. | Privacy Act 1988 Pt IIIC (Notifiable Data Breaches) / B029 | 2IC | On discovery + quarterly Board summary | Confidential | Not started | Not started |
| Feedback Register not in B043 Board B043 §5.2 catalogues the Complaints Register but not the Feedback Register, even though B010 covers both and they share a workbook. Compliments and suggestions are the positive half of the feedback evidence an auditor looks for. | B010 Complaints, Disputes and Feedback Policy | CEO | quarterly | Confidential | In portal 7. Quality Management/Audit/Auditor Evidence List/22 Feedback Form — same workbook as Complaints | — |
| Provider Conduct Register not in B043 Board Concerns about OTHER NDIS providers that DAS becomes aware of through advocacy, and what DAS reported to the Commission. Distinct from the s 73Z Reportable Incidents Register, which covers DAS's own incidents. B043 v1.0 catalogues neither this nor its distinction. | B022 / NDIS Commission reporting | CEO | quarterly | Confidential | In portal 7. Quality Management/Audit/Auditor Evidence List/20 Incident Form and Register — 'Provider Conduct Register' sheet | — |
| Workforce · 6 | ||||||
| Worker Screening Register | B024 | 2IC | Continuous + monthly review | Confidential | Linked file 3. People & HR — plus Employment Hero certifications | — |
| Authorised Driver Register | B032 | 2IC | Continuous + annual review | Confidential | Not started | Not started |
| Training Register 15 entries across 4 staff plus 4 all-staff items. Three are Expired or Due for renewal and one has no completion date at all — those are the reason this register is worth having, and they are in the action queue. | B042 | 2IC | Continuous + monthly review | Internal | In portal 3. People & HR/Training/Staff Training Register 2026.xlsx (audit copy under 7. QM/Audit/…/16) | — |
| Volunteer Register | B033 | 2IC | continuous | Confidential | Not started | Not started |
| Flexible Work Register | B039 | 2IC | On approval + annual | Confidential | Not started | Not started |
| Supervision Records | B019 | Each supervisor; Operations Manager oversight | Per session | Confidential | Linked file 3. People & HR — see also DAS Performance Review Schedule 2026.xlsx | — |
| Operational · 13 | ||||||
| Information Asset Register | B029 | 2IC | Annual + on change | Internal | Not started | Not started |
| Records Disposal Register | B029 | 2IC | Annual sentencing | Internal | Not started | Not started |
| Approved AI Tools List | IT002 | CEO | On approval + annual | Internal | Not started | Not started |
| Vehicle Register | B032 | 2IC | Continuous + monthly review | Internal | Not started | Not started |
| Trip Plan Register | B032 | 2IC | Per trip + monthly review | Internal | Not started | Not started |
| Supplier Register | B017 | 2IC | Continuous + annual review | Internal | Not started | Not started |
| Supplier Risk Register (modern slavery) | B040 | 2IC | annual | Internal | Not started | Not started |
| Insurance Register | B031 / W001 | Treasurer / CEO | Annual + on policy event | Confidential | Linked file 7. Quality Management/Audit/Company Details/Insurance 2026-27 | — |
| Asset Register (capital and IT) | B004 | 2IC + Treasurer | Annual stocktake + continuous | Internal | Not started | Not started |
| Donor Register | B007 | CEO | continuous | Confidential | Not started | Not started |
| Sponsorship Register | B014 | CEO | Continuous + annual review | Internal | Not started | Not started |
| Conflict of Advocacy Log Conflicts between two clients' advocacy interests are recorded on the matter in IVO. Casework stays in IVO; this row tracks that the log exists and is current. | B025 | Operations Manager | continuous | Confidential | Linked file IVO — recorded against the matter | — |
| Community Engagement Log Already partly systematised: CB&PLG outreach campaigns and CoP meetings in this portal are the engagement record. Worth pointing B036 at them rather than starting a separate log. | B036 | 2IC | Per engagement | Internal | Linked file DAS HQ portal — CB&PLG outreach + PATH CoP surfaces | — |