Business News

Altamash Khan Decodes Citadel Compliance’s NDIS & Aged Care Strategy

A Framework Designed For a High-Pressure Sector When something goes wrong in an aged care facility or an NDIS provider organisation, the story that tends to follow is a familiar one. A provider failed to meet its obligations, standards were not upheld, and the organisation is held accountable. What that story often overlooks, in Khan's view, is the system those providers were working within before anything went wrong. Altamash Khan has spent half a decade inside that system. As a Registered Nurse with frontline experience across regional Northern Territory, Victoria, and Western Australia, and as a Doctor of Medicine final-year student at the University of Melbourne — one of Australia's most prestigious medical schools — with a deep interest in how technology and systems design intersect with care delivery, he has observed the same pattern repeat itself across organisations of different sizes, in different parts of the country, working with different client populations. In his assessment, the problem in most cases is not bad faith, but poor architecture. Australia's disability support and aged care sectors are navigating the most significant period of regulatory change they have faced in years. Mandatory NDIS provider registration is now in effect for supported independent living and platform providers, with the introduction of the new registration group 0138, which has replaced the previous module for shared living arrangements. Strengthened quality standards under the new Aged Care Act are placing new demands on organisations that are already stretched. Khan's observation is that the narrative, when things go wrong, consistently places responsibility on providers in a way that does not always reflect the underlying structural challenges those organisations are working within. Khan's view, developed through years of working directly with those providers, is that many smaller and mid-sized organisations are operating within compliance frameworks that were never designed with audit readiness, scalability, or operational integration in mind. They have policies. They have procedures. They have documentation that satisfies a regulator on a given day. What they often do not have, in Khan's experience, is a system that is actually built into how care is delivered. "The goal is not to prepare providers for audit," Khan explains. "It is to ensure their governance systems genuinely reflect how care is delivered within their organisation." That distinction — between documentation that exists and systems that function — is where Khan identified the gap. And it is the gap Citadel Compliance was built to close. The Founder Behind the Business Khan's path to founding a compliance consultancy is not a conventional one. His background is clinical first. Years of nursing across some of Australia's most complex and under-resourced healthcare environments gave him a ground-level understanding of what safe care delivery actually requires day to day, and what gets in the way of it. Alongside his nursing career, Khan is currently completing the Doctor of Medicine at the University of Melbourne. He has also been actively engaged in the intersection of healthcare and innovation, involved in organising events for medical students focused on emerging areas including telesurgery, artificial intelligence, and the future of clinical practice, and leads one of the larger surgical student organisations in the country. These interests reflect a consistent orientation toward how systems and technology can be applied to improve how healthcare is delivered, not just experienced. That orientation is what distinguishes his approach to compliance consulting. Where most compliance providers bring an administrative or financial lens to governance, Khan brings a clinical one. He understands not just what the regulations require, but what safe care actually looks like in practice, and how the two can be designed to work together. What Three Years in the Compliance Space Revealed Three years of working directly with NDIS and aged care providers in a compliance capacity revealed a pattern Khan describes with precision. A significant proportion of organisations rely on templated, off-the-shelf documentation that may pass an audit but rarely reflects how care is actually delivered within that specific organisation, by those specific staff, with those specific clients. The consequences of this tend to be subtle at first. Policies that exist on paper but are unknown to frontline teams. Complaints management systems that are technically in place but inaccessible to the people they are meant to serve. Incident reporting frameworks that capture data without generating learning. Strong governance systems, in Khan's assessment, are not defined by the absence of incidents or complaints. They are defined by how effectively those are identified, reported, and managed. A key part of his framework involves helping providers recognise and build on what they already have. In many cases, organisations have strong workforce capability and solid service delivery foundations that are simply not structured or presented in a way that aligns with regulatory expectations. By refining and extending existing systems, providers can often expand their services, support a broader range of individuals, and grow sustainably without the disruption of starting from scratch. The Technological Dimension Khan's longer-term direction for Citadel Compliance centres on how technology can change the relationship between compliance and care delivery entirely. The software platform he is currently developing is designed to allow providers to capture implementation evidence in real time, so that governance is continuously demonstrated through daily operations rather than assembled retrospectively ahead of an audit. The vision, in Khan's framing, is a system in which compliance is not a separate function but an embedded one — where the evidence of good care and the evidence of regulatory compliance are the same evidence, captured in the same moment, without additional burden on frontline teams. That ambition connects directly to his broader interest in how AI and emerging technology can support safer, more efficient healthcare systems across the sector. About Citadel Compliance Citadel Compliance is a Melbourne-based NDIS and aged care consulting firm founded by Altamash Khan, offering clinical governance frameworks, NDIS provider registration support, aged care compliance systems, and quality management for disability support services across Australia. For more information visit www.citadelcompliance.com.au . Sources: NDIS Quality and Safeguards Commission, Mandatory Registration: ndiscommission.gov.au/about-us/ndis-commission-reform-hub/mandatory-registration | Aged Care Quality and Safety Commission, Strengthened Quality Standards: agedcarequality.gov.au