Hear the words "risk assessment" and it's easy to picture a stack of compliance paperwork, or worse, a list of things a person isn't allowed to do. That's not what a good NDIS risk assessment is. Done well, it's a plan built with you, not about you. It's a way for a participant, their family and their support team to look honestly at the life someone wants to live, spot anything that could get in the way, and work out together how to manage it safely.
This guide explains how the process works, what a quality provider should be doing, and the questions participants and families ask us most often.
What a risk assessment is really for
A good risk assessment is the art of balancing two things that matter equally. On one side sits a participant's right to the dignity of risk, the freedom to make choices, try new things and sometimes get it wrong, because that's how all of us learn and grow. On the other sits a provider's non-negotiable duty of care to keep the people they support safe.
The aim is never to wrap anyone in cotton wool. The question a provider should be asking is not "what can't this person do?" but "what does this person want to achieve, and how do we support them to do it safely?"
A well-run assessment does a few key things:
- Identifies potential hazards. Anything in a person's home, routine or activities that could cause harm.
- Weighs up likelihood and impact. How likely is it to happen, and how serious would it be if it did?
- Creates practical safeguards. Sensible, agreed strategies that manage the risk without shrinking the person's life.
- Protects choice and control. The participant stays in the driver's seat for decisions about their own life.
Eliminating all risk from life is impossible, and honestly, undesirable. The point is to make conscious, informed decisions together, so a person can live a richer and more independent life with confidence.
The three pillars of managing risk
Every effective NDIS risk assessment follows the same logical sequence. You can't solve a problem until you know what it is, and you can't prioritise solutions until you understand the scale of it.
- Risk identification. The discovery phase. This means systematically looking for potential hazards in a participant's environment, daily routines and support activities. It might be something as simple as a loose rug, or something more complex like the risk of social isolation or difficulty managing medication.
- Risk analysis and evaluation. Once a hazard is spotted, it gets weighed up. How likely is something to go wrong, and how severe would the harm be? A minor inconvenience and a serious injury demand very different responses, and this step decides what needs action first.
- Risk control and treatment. The action phase. Practical strategies, called control measures, are put in place to remove the risk entirely or reduce it to an acceptable level. That could mean modifying the home, extra training for support workers, or introducing assistive technology.
These three stages come straight from the framework set out in the NDIS Practice Standards, which registered providers are assessed against by the NDIS Quality and Safeguards Commission.
Where risks usually show up
It helps to think about the common areas, or domains, where risks tend to appear in disability support.
| Risk domain | What it covers | Example |
|---|---|---|
| Participant safety | Risks to a person's physical and emotional wellbeing | A participant with limited mobility managing stairs at home |
| Environmental risks | Hazards in the places where support is delivered | Poor lighting in a hallway, or a slippery bathroom floor |
| Mealtime management | Eating, drinking and swallowing difficulties (dysphagia) | Choking hazards for someone who needs texture-modified food |
| Medication management | The potential for errors with medicines | A participant taking several medications with a risk of incorrect dosage |
| Community access | Risks that arise out in the wider community | Crossing busy roads, using public transport, managing social situations |
| Worker safety | Risks to the support workers delivering care | Manual handling injuries when assisting with transfers |
Thinking in these domains keeps an assessment complete. Some of them have their own detailed processes too. Medication, for example, is usually managed through a formal record, and our guide to NDIS medication charts explains how that works in practice.
Keeping the plan person-centred
A generic, one-size-fits-all risk assessment is a failed risk assessment. The most important part of the whole process is tailoring it to the individual: their disability, how they communicate, their goals, their cultural background and the reality of their daily life.
This matters most for people with complex or less common conditions, whose needs are exactly the ones that fall through the cracks of tick-box templates. A plan that ignores the person behind the diagnosis is just a piece of paper.
The answer is co-design, a simple but powerful shift from doing something for a participant to doing it with them. In practice that means:
- Communicating their way. Use the participant's preferred communication, which might be plain language, visual aids or assistive technology.
- Starting with goals. Open the conversation with what the person wants to achieve. The plan is a roadmap to get there safely, not a list of restrictions.
- Respecting their expertise. The participant is the expert in their own life. Their knowledge of what works and what doesn't is the most valuable input in the room.
When a plan is built together, the participant owns it, and a plan someone owns is a plan that actually gets used.
Making the plan work day to day
A risk assessment that sits in a folder is worth nothing. The real test is whether it shapes what happens during support, every shift, every outing, every meal.
For that to happen, a provider needs a few ingredients in place:
- Trained staff. Support workers need more than the ability to fill in a form. They need the skills to have respectful, person-centred conversations about risk. It's a core part of how we train our team at Vana Care, and if that approach to support appeals to you, we're always looking for good people on our careers page.
- Plain-language documentation. The plan should be written so the participant, their family and every support worker can understand it at a glance. No jargon.
- Regular reviews. Life changes, and so do goals. A plan should be revisited whenever circumstances shift, especially when someone takes on something new, like building confidence in the community through community access support.
The same thinking applies across every kind of support, from a few hours of in-home support each week through to 24/7 supported independent living. The setting changes, but the principle doesn't: understand the person, understand the risks, and manage them together openly.
Common questions
How often should a risk assessment be reviewed?
Think of it as a living document, not a set-and-forget task. It should be reviewed at least once a year, and sooner whenever something significant happens: a move to a new home, a change in mobility or support needs, any reported incident, or a new activity with its own challenges. Keeping it current is what keeps it useful.
What's the difference between a hazard and a risk?
The two words get used interchangeably, but they mean different things. A hazard is anything with the potential to cause harm. A risk is the likelihood of that hazard actually causing harm, combined with how serious the harm could be. A wet floor is a hazard. The risk is that someone slips, falls and gets hurt. A good assessment spots the hazards first, then works out the level of risk each one poses so the team knows what to tackle first.
Can a participant refuse a risk assessment?
The NDIS is built on choice and control, but providers also carry a legal duty of care, and the NDIS Practice Standards require them to manage risks so services stay safe for everyone. In practice, it's less about refusal and more about collaboration. The assessment should always be done with the participant, never to them. If someone is hesitant, the provider's job is to listen, understand the concern, and shape a plan that honours their choices while still meeting safety obligations.
Safety and independence belong together
A risk assessment done properly isn't a brake on someone's life. It's the thing that makes bigger goals possible, because everyone involved knows the plan, trusts each other and can say yes to new experiences with confidence. At Vana Care, we've supported Adelaide families this way since 2021, and our team of more than 100 support workers builds every plan around the person, not the paperwork. If you'd like to see what that could look like for you or someone you love, you can build a personalised quote in a few minutes at Get Support, or call us on 08 7228 6202 for a chat.