Compliance · CEO + 2IC
Compliance · Catalogue

The register of registers

Every register DAS maintains, in one place: what requires it, who owns it, how often it must be reviewed, how sensitive it is, and where it lives. Transcribed from B043 Governance Registers Suite v1.0 §5.

Counts 45 registers · 9 in portal · 17 linked file · 19 not started · 12 Board-reported quarterly · 6 in use but absent from B043 v1.0.
Show
Register Source policy Owner Cadence Classification Held Currency
Governance and Board · 10
Register of Members Constitution; Associations Act 2003 (NT) Public Officer / 2IC Continuous; AGM review Confidential Linked file
Register of Directors
7 directors confirmed Jul 2026. The SharePoint register is stale — the source of truth is email. Reconciling it is a live action.
Constitution; ACNC Public Officer / 2IC continuous Confidential Linked file
Board Resolutions Register B001 Board Charter Public Officer Per meeting Confidential Linked file
Common Seal Register Constitution Public Officer Per use Confidential Linked file
Delegations Register B002 Delegations Policy CEO On change Internal Linked file
7. Quality Management/Audit/Auditor Evidence List/11 Delegation of Authority and Responsibility
Conflict of Interest Register (Board and CEO) Board B003 Board Conflict of Interest Policy Board Chair / Public Officer Per meeting + annual Confidential In portal
7. Quality Management/Audit/Auditor Evidence List/14 Conflict of Interest Register
Conflict of Interest Register (Staff and Volunteers)
B034 requires a staff/volunteer declarations register separate from the Board one. The 2026 workbook holds Board directors and the CEO only — no staff or volunteer declarations exist. Confirmed gap.
B034 Conflict of Interest Policy Staff and Volunteers 2IC Continuous + monthly review Confidential Not started Not started
Gifts and Benefits Register Board
Specified by B038 and Board-reported quarterly. No register file found anywhere in the audit pack or CURRENT FILES.
B038 2IC Continuous + quarterly Board review Confidential Not started Not started
Quality Improvement Register not in B043 Board
The continuous-improvement register the NSDS audit asks for by name (evidence folder 08), and the destination for every 'policy improvement identified' on a complaint. B043 v1.0 §5 does not list it. Add at the next Suite review.
NDAP / NSDS continuous improvement CEO quarterly Internal In portal
7. Quality Management/03 Quality Improvement — Quality Improvement Register.xlsx
Cultural Review Register not in B043
Tracks material sent for First Nations cultural review and its status (including items still 'Pending cultural review'). Real, in use, and absent from B043 v1.0. Cultural content is flagged, never authored — this register is the flag.
PATH / CB&PLG cultural governance 2IC per-event Internal Linked file
_JOB_DAS/PATH_PLANNING/…/04_DAS_Originals/01_Cultural_Review_Register.md
Risk, safeguarding and incident · 16
Strategic Risk Register Board
Two registers were in circulation. 'DAS Enterprise Risk Register v4.xlsx' is the survivor — reworked to v4.0 on 15 May 2026 with a treatment plan, KRIs and a review log. 'Strategic Risk Register Update April.xlsx' is superseded: two mismatched ID schemes stacked in one sheet, duplicate IDs, and nothing reviewed in ~15 months. ⚠ The two workbooks CANNOT be joined on Risk ID — v4 renumbered. Of 43 old IDs, only 3 keep both ID and risk; 28 moved to a different ID; 12 have no confident match and need a merged/retired/dropped decision. Any history mapping must be done on risk title.
R001 Risk Management Framework CEO Quarterly Board Confidential In portal
7. Quality Management/Audit/Auditor Evidence List/12 Business Risk Register — DAS Enterprise Risk Register v4.xlsx
Key Risk Indicators not in B043
17 leading indicators with green/amber/red thresholds, introduced in the v4 redesign. They are the only forward-looking signal in the whole register suite — everything else records what already happened. ⚠ Thresholds and current values are stored as text with units ('≤55%', '2.4 mo'), so the portal shows them as recorded and does not compute a status; parsing them into numbers is a follow-up.
R001 Risk Management Framework CEO quarterly Internal In portal
DAS Enterprise Risk Register v4.xlsx — '06KRIs' sheet
Operational Risk Register
R001 splits strategic from operational risk. Only the enterprise/strategic register exists; operational risk is currently carried inside it or not at all.
R001 Risk Management Framework Operations Manager monthly Internal Not started Not started
Safeguarding Concerns Register Board
Highly Confidential — never migrated into the portal. Currency tracked here; contents stay in restricted-access storage.
B013 CEO Continuous + quarterly Board summary Highly Confidential Linked file
Child Safety Concerns Register Board
Highly Confidential — never migrated into the portal.
B023 CEO Continuous + quarterly Board summary Highly Confidential Linked file
Reportable Conduct Register Board
Highly Confidential, permanent retention — never migrated into the portal.
B022 CEO Continuous (permanent retention) Highly Confidential Linked file
Reportable Incidents Register (NDIS s 73Z)
Highly Confidential, permanent retention — never migrated into the portal.
B022 CEO Continuous (permanent retention) Highly Confidential Linked file
Critical Incident Debrief Log
Highly Confidential — never migrated into the portal.
B028 CEO Continuous + annual de-identified Board summary Highly Confidential Linked file
Whistleblower Disclosures Register
Highly Confidential, permanent retention — never migrated into the portal.
B020 CEO (Board Chair where the CEO is the subject) Continuous (permanent retention) Highly Confidential Linked file
Fraud Risk Register Board
Specified by B030 and Board-reported quarterly. No register file found.
B030 CEO + Treasurer quarterly Confidential Not started Not started
WHS Incident Register W001 Work Health and Safety Policy Operations Manager Continuous + monthly review Confidential In portal
7. Quality Management/Audit/Auditor Evidence List/20 Incident Form and Register
Hazard Register
W001 requires a hazard register distinct from the incident register. The WHS workplace inspection checklist is the closest artefact and is not a register.
W001 Work Health and Safety Policy Operations Manager Quarterly + on report Internal Not started Not started
Complaints Register Board B010 Complaints, Disputes and Feedback Policy CEO Continuous + quarterly Board summary Confidential In portal
7. Quality Management/Audit/Auditor Evidence List/21 Complaint Form and Register
Privacy Incident and Data Breach Register (NDB) not in B043 Board
DAS holds NDIS plans, health information and case files for a 7-person org, so a data breach is a live risk with a statutory clock: contain, assess likely serious harm within 30 days, notify the OAIC and affected individuals if the threshold is met. B043 v1.0 §5 catalogues no such register and no file exists — this row is the gap, stated rather than omitted. It was briefly scaffolded inside the advocacy CRM (28 Aug 2026, das-path-planner#17) and removed: a whole-of-organisation privacy obligation cannot live behind an advocacy login where only PII-cleared caseworkers can see it and the audit catalogue does not know it exists.
Privacy Act 1988 Pt IIIC (Notifiable Data Breaches) / B029 2IC On discovery + quarterly Board summary Confidential Not started Not started
Feedback Register not in B043 Board
B043 §5.2 catalogues the Complaints Register but not the Feedback Register, even though B010 covers both and they share a workbook. Compliments and suggestions are the positive half of the feedback evidence an auditor looks for.
B010 Complaints, Disputes and Feedback Policy CEO quarterly Confidential In portal
7. Quality Management/Audit/Auditor Evidence List/22 Feedback Form — same workbook as Complaints
Provider Conduct Register not in B043 Board
Concerns about OTHER NDIS providers that DAS becomes aware of through advocacy, and what DAS reported to the Commission. Distinct from the s 73Z Reportable Incidents Register, which covers DAS's own incidents. B043 v1.0 catalogues neither this nor its distinction.
B022 / NDIS Commission reporting CEO quarterly Confidential In portal
7. Quality Management/Audit/Auditor Evidence List/20 Incident Form and Register — 'Provider Conduct Register' sheet
Workforce · 6
Worker Screening Register B024 2IC Continuous + monthly review Confidential Linked file
3. People & HR — plus Employment Hero certifications
Authorised Driver Register B032 2IC Continuous + annual review Confidential Not started Not started
Training Register
15 entries across 4 staff plus 4 all-staff items. Three are Expired or Due for renewal and one has no completion date at all — those are the reason this register is worth having, and they are in the action queue.
B042 2IC Continuous + monthly review Internal In portal
3. People & HR/Training/Staff Training Register 2026.xlsx (audit copy under 7. QM/Audit/…/16)
Volunteer Register B033 2IC continuous Confidential Not started Not started
Flexible Work Register B039 2IC On approval + annual Confidential Not started Not started
Supervision Records B019 Each supervisor; Operations Manager oversight Per session Confidential Linked file
3. People & HR — see also DAS Performance Review Schedule 2026.xlsx
Operational · 13
Information Asset Register B029 2IC Annual + on change Internal Not started Not started
Records Disposal Register B029 2IC Annual sentencing Internal Not started Not started
Approved AI Tools List IT002 CEO On approval + annual Internal Not started Not started
Vehicle Register B032 2IC Continuous + monthly review Internal Not started Not started
Trip Plan Register B032 2IC Per trip + monthly review Internal Not started Not started
Supplier Register B017 2IC Continuous + annual review Internal Not started Not started
Supplier Risk Register (modern slavery) B040 2IC annual Internal Not started Not started
Insurance Register B031 / W001 Treasurer / CEO Annual + on policy event Confidential Linked file
7. Quality Management/Audit/Company Details/Insurance 2026-27
Asset Register (capital and IT) B004 2IC + Treasurer Annual stocktake + continuous Internal Not started Not started
Donor Register B007 CEO continuous Confidential Not started Not started
Sponsorship Register B014 CEO Continuous + annual review Internal Not started Not started
Conflict of Advocacy Log
Conflicts between two clients' advocacy interests are recorded on the matter in IVO. Casework stays in IVO; this row tracks that the log exists and is current.
B025 Operations Manager continuous Confidential Linked file
IVO — recorded against the matter
Community Engagement Log
Already partly systematised: CB&PLG outreach campaigns and CoP meetings in this portal are the engagement record. Worth pointing B036 at them rather than starting a separate log.
B036 2IC Per engagement Internal Linked file
DAS HQ portal — CB&PLG outreach + PATH CoP surfaces