NDIS Incident Report Template: What a Good One Must Capture

The incident report form is the first record of anything that goes wrong, and auditors follow it through your register to the outcome. Here is what a form needs to contain, where forms usually fall short, and how to make one fit your supports.

Last updated: 8 October 2026

What it is and who needs it

An incident report form is the structured record a worker completes when something happens in connection with your supports. Every registered provider needs one as part of its incident management system, and the Commission says all providers should have a system. The form is not the system, but it is the document workers touch most.

What it provides evidence for

The Core Module outcome on incident management expects a system that complies with the NDIS (Incident Management and Reportable Incidents) Rules 2018. It also expects participants to be told how incidents involving them were managed, regular review of causes and outcomes, and workers who are trained in the procedure. The Commission's incident management guidance sets out the steps the form supports. For the system behind it, read our guide to incident management.

What auditors check

Auditors pick an entry from your register and follow it back to the form. They look for a form completed soon after the event, a clear account of what the worker saw, evidence the person affected was looked after, and a link to the outcome. In Stage 2 they ask workers where the form lives and when they would use it.

Must-include checklist

Who was involved, and their role, kept private to the file of the person affected.
Date, time and place of the incident, and the date and time you became aware of it.
A factual description, separating what was seen from what was assumed.
Immediate actions taken to look after anyone affected, including any call to emergency services.
Whether the incident is, or could be, reportable, and the category if it is.
Who was told, including the participant, their supporters and key personnel.
For a reportable incident, the date and time the Commission was notified.
The person's own account or view, where they can and wish to give it.
Assessment of why it happened and whether it could have been prevented.
Actions to prevent a repeat, with an owner and a date, and the final outcome.

Common mistakes

A single narrative box. Workers write a paragraph and skip the decisions that matter, such as whether the incident is reportable.
No awareness timestamp. You cannot prove a 24 hour notification was on time without it.
Opinion in place of fact. "Staff member was rude" tells the reader nothing about what happened.
Other participants named in the wrong file. This breaches privacy and makes the form unshareable.
The form never closes. It records the event but not the lesson or the change.

How to adapt it to your organisation

Start from the supports you actually deliver. A home-based personal care provider and a community access provider face different incidents, so prompt for the ones your workers are likely to meet. Name your own key personnel and the person authorised to submit notifications in the portal. Decide whether the form is paper or electronic and where it is stored, and say so in your procedure. Write the prompts in plain words your workers use, and offer an accessible version for participants who want to report something themselves.

Check the reportable categories and timeframes on the Commission's reportable incidents page. Notification is within 24 hours for a death, serious injury, abuse or neglect, unlawful sexual or physical contact or assault, or sexual misconduct. An unauthorised restrictive practice is within five business days, or 24 hours if a person was harmed.

How the package covers it

The package includes incident report forms, the incident register, investigation templates and a procedure with reportable incident workflows. See the full list of what is included and pricing. Any form still needs editing to match your own supports.

This page is general information based on NDIS Commission and government sources at the date shown. It is not legal or professional advice, and the rules can change. Check the NDIS Commission's current requirements and read our disclaimer. The checklists on this page describe good practice, not an official list of requirements, and our documents do not guarantee registration.

Frequently Asked Questions

Do I fill in the Commission's forms as well as my own incident report?

If an incident is reportable, yes. Registered providers notify the NDIS Commission through the NDIS Commission Portal using the Immediate Notification Form and, within five business days, the 5 Day Form. Your own incident report is the internal record that feeds both, so it should capture the facts you need to complete them.

Should near misses go on the form?

Yes. The Commission defines an incident as an act, omission, event or circumstance that has or could have caused harm to a person with disability. A near miss fits that definition, and recording it shows an auditor that workers report freely.

When does the reporting clock start?

The Commission calculates its timeframes from when a registered provider became aware of the incident. Record the date and time you became aware on the form, so you can show the notification was on time.

Do unregistered providers need an incident report form?

The Commission says all providers should have an incident management system, and the NDIS Code of Conduct requires every provider to respond to incidents. Only registered providers must report reportable incidents to the Commission.