NDIS Worker Qualification Tracking: What Providers Are Getting Wrong
A qualification expires and nobody notices until an incident or audit. Here is why that happens, what a proper qualification register must contain, and how to connect tracking directly to rostering.
The failure mode nobody catches in time
Here is how it usually happens. A support worker completed their first aid certificate two years ago. The cert was uploaded to the HR folder at onboarding. Since then, nobody has checked whether it has been renewed. The worker has been rostered to shifts that require current first aid certification — shifts they are delivering competently and without incident.
Then one of three things happens: there is an incident and the investigation reveals the worker was not currently qualified at the time; an NDIS auditor reviews a sample of worker files and finds the expired certificate; or the organisation itself runs a compliance check and discovers the gap after the fact.
In all three scenarios, the provider has a documentation problem that is difficult to explain away. The support was delivered by a worker who did not hold a current qualification for that support type. The question from the auditor is not "did anything go wrong?" — it is "how did your systems allow this to happen?"
Why spreadsheets fail at qualification tracking
Most providers track worker qualifications in a spreadsheet. A single shared file, or sometimes one file per worker, listing certificates with issue dates and expiry dates. The approach is not wrong in principle — the problem is what spreadsheets cannot do.
Version control
A spreadsheet that multiple people can edit has no reliable version history. When a worker renews their first aid cert, whoever updates the file is working from a printout or a forwarded email. If two people update the same file at different times, or if the renewal goes unrecorded because the worker forgot to send through the new certificate, the record diverges from reality.
No automated alerts
A spreadsheet does not know that a certificate expires in 30 days. It does not send a reminder to the worker, a notification to their manager, or a flag to the person who builds the roster. Someone has to open the spreadsheet, sort by expiry date, and check manually. That task gets skipped when the team is busy — which is most of the time.
Disconnected from rostering
Even if your spreadsheet is accurate, it has no connection to who is being rostered for what. A coordinator building next week's roster is working from a separate system. They are not cross-referencing the qualification spreadsheet for every shift assignment. The gap between "qualifications on file" and "qualifications required for this shift" is managed by institutional memory, and institutional memory is unreliable under pressure.
Qualification types providers must track
The specific qualifications required depend on the supports being delivered. The following are the most commonly required across disability, aged care, and community health services.
First aid and CPR. Required for any worker delivering personal care or physical supports. First aid certificates typically expire after three years; CPR component after one year. Many providers maintain these as separate tracked items.
Manual handling and moving and positioning. Required where supports involve physical assistance with mobility, transfers, or repositioning. Expiry cycles vary; some providers require refreshers annually, others every two years.
Medication administration. Required for workers who administer or prompt medications. A specific competency assessment is often required in addition to a formal course, particularly for complex medications.
Behaviour support. Workers delivering supports under a behaviour support plan must be trained in the plan's strategies and, in many cases, hold specific positive behaviour support training. Where restrictive practices are involved, additional training is mandated by the NDIS Commission.
High intensity daily activities. Certain supports — PEG feeding, tracheostomy care, catheter management, complex wound care — require specific clinical competency, not just a certificate. These are covered in more detail in the article on clinical competency management.
Infection control. Became a formal requirement for many providers following COVID-19. Usually a short online module, but it needs to be on file.
The "qualified at time of service" requirement
This is the point that catches many providers off guard at audit: auditors are not only checking whether a worker's qualifications are current today. They are checking whether the worker held a valid qualification at the time each service was delivered.
A qualification that expired six months ago but was renewed last month is current today. But for every shift delivered between expiry and renewal, the worker was not qualified. If those shifts are on the roster, an auditor can identify the gap.
This means your qualification register needs to preserve history, not just current status. It needs to show what qualifications were held on a given date, not only what is on file now.
What a proper register must contain
For each worker, for each qualification type:
- Qualification name and issuing body
- Issue date
- Expiry date (or "no expiry" where applicable)
- Document evidence (uploaded certificate or competency record)
- Date evidence was verified by the organisation
- Verified by (name/role)
- Renewal status if currently expired (pending, not started, waived with reason)
For organisations delivering high intensity or clinical supports, a supervision status field may also be required — noting whether the worker is currently authorised to practise independently or requires supervision for a given procedure.
Handling expired qualifications while renewal is pending
A worker's first aid certificate lapsed last week. They have a renewal course booked for next Thursday. In the meantime, can they work?
The answer depends on your internal policy and what supports are being delivered. Many organisations allow a short gap period — typically up to 30 days — where a worker can continue in non-high-risk roles while renewal is pending, provided the gap is documented and the booking is confirmed. The key is that the decision is made deliberately, recorded, and time-limited. What you cannot do is leave the expired qualification on file with no notation and continue rostering the worker as if nothing has changed.
Your register should have a field for this: "renewal in progress, expected completion [date], approved by [name]". That notation is your audit protection for the gap period.
The supervisor sign-off question
Some qualification types require a supervisor sign-off to be valid — a competency assessment witnessed and signed by a qualified assessor, for example. A certificate alone is not sufficient for these qualifications. The sign-off record needs to be in the file and linked to the qualification entry.
If you are using a shared folder system, sign-off records end up in a different folder from the certificates they relate to. An auditor reviewing a worker's file has to locate both and connect them manually. A register that holds the certificate, the sign-off record, and the assessor details as a single linked entry is faster to review and harder to challenge.
Connecting tracking to rostering is the missing link
A qualification register that is accurate but disconnected from the scheduling system does not prevent unqualified workers from being rostered. It just means you can find out about the problem after it happened.
The solution is a system where the booking type specifies which qualifications are required, and the worker's profile holds their current qualifications. When an assignment is made, the system checks whether the worker holds all required qualifications — and flags the mismatch before the shift is confirmed.
This is covered in more detail in the article on qualification-matched rostering.
Teiro's qualification register is linked directly to the rostering engine. Expired or missing qualifications are flagged at the point of assignment — not discovered after the shift has been delivered. Book a demo to see how it works, or sign up to explore the platform.