When E Learning Is the Weakest Link in Risk Management

Disability service providers operate in an environment where risk is not incidental. Much of the risk inherent in disability support is foreseeable, predictable, and well understood. The NDIS is clear on this point. When things go wrong, the regulator looks closely at whether the risk was reasonably predictable and whether the provider took appropriate steps to manage it.
Support workers are now routinely delivering high intensity supports that carry clinical and safety risk. Enteral feeding, urinary catheter care, complex bowel care, dysphagia support, medication assistance, epilepsy and seizure management, and wound care are no longer exceptional tasks. They are part of everyday service delivery for many participants. The risks associated with these supports are well documented. Choking, aspiration, infection, equipment misuse, medication errors, delayed response to deterioration, and preventable hospitalisation are not theoretical. They are foreseeable outcomes when skills or judgement are inadequate.
From a governance perspective, this is critical. Boards and senior leaders are accountable for ensuring predictable risks are identified and controlled. Management is responsible for implementing those controls in practice. Staff competence sits at the centre of that accountability. If workers are not genuinely capable of safely delivering the supports they are assigned, the organisation is exposed, regardless of how comprehensive its policies or clinical frameworks may appear.
This is where training choices matter. Many providers rely heavily on e learning to demonstrate compliance. While online learning has a role in building awareness and foundational knowledge, it does not establish competence in high risk, hands on tasks. It cannot assess whether a worker can correctly perform a procedure, recognise early signs of deterioration, or respond appropriately when something goes wrong in a real environment.
When e learning is used as the primary mechanism for preparing staff for high intensity supports, it effectively becomes the weakest link in the organisation’s risk management framework. It creates the appearance of control without providing assurance of capability. In the face of predictable risk, that is a fragile position.
The NDIS Practice Standards require providers to ensure workers are competent and suitably trained for the supports they deliver. Competence, in regulatory terms, is not theoretical understanding. It is demonstrated and assessed ability to perform tasks safely and consistently. In audits, serious incidents, and complaints, the NDIS looks beyond training records and certificates. It examines whether risks were foreseeable and whether the provider’s training model was sufficient to manage those risks.
Boards should consider this carefully. If an incident occurred tomorrow, could the organisation clearly explain how it ensured staff were practically trained, assessed, and supported for the specific support involved? Or would it rely on induction records, completed modules, and assumptions about transfer of learning?
Practical, skills based training is not about compliance theatre. It is a core risk control. It is one of the most defensible ways a provider can show that predictable risks were taken seriously and managed appropriately. A genuinely competent workforce reduces harm, supports consistent care, and protects both participants and the organisation.
Training is not a box to tick. For boards and executive leaders, it is evidence of risk governance in action. The question is whether current training arrangements would stand up to scrutiny when it matters most.
