Back to Providers Hub

Preparing for Your NDIS Audit

A step-by-step guide to preparing for your NDIS verification or certification audit, including documentation, policies, staff training, and timeline recommendations.

General information only, not advice: This information is provided for general guidance. It is not legal, financial, or professional advice. Registration requirements and processes may change. Always verify current requirements with the NDIS Commission or seek professional advice.

Step 1: Understand Your Audit Type and Requirements

Before you begin preparation, confirm:

  • Which audit type: Verification or certification? (Use our Registration Pathway Checker)
  • Which modules apply: Core Module (always) plus any supplementary modules for your registration groups
  • Your timeline: Are you subject to mandatory registration deadlines?

Step 2: Select an Approved Quality Auditor

Choose from the NDIS Commission's list of approved auditors. Consider:

  • Experience with your registration groups
  • Geographic coverage (especially for on-site inspections)
  • Pricing and payment terms
  • Availability and turnaround times
  • Reputation and referrals from other providers
Tip: Contact your chosen auditor early for a pre-audit consultation. Many auditors offer gap analysis or readiness assessments to help you identify what needs work before the formal audit.

Step 3: Establish Required Policies and Procedures

You must have documented policies covering all relevant NDIS Practice Standards. Core Module requirements include:

Participant rights and responsibilities — How you uphold the rights of people with disability
Violence, abuse, neglect, exploitation, and discrimination — Prevention, identification, and response
Feedback and complaints — Accessible process for participants to provide feedback and make complaints
Governance and operational management — Organisational structure, accountabilities, and continuous improvement
Service agreements — Clear, written agreements with every participant
Worker screening, training, and supervision — NDIS worker screening checks, qualifications, induction, ongoing training
Records and information management — Secure storage, privacy, retention
Incident management — Identifying, responding to, and reporting incidents (including reportable incidents to the Commission)

For certification audits, you'll also need comprehensive policies for medication management, restrictive practices, positive behaviour support, living environment standards, and 24-hour support arrangements (for SIL).

Step 4: Implement Your Systems

Policies alone aren't enough — you must demonstrate that they're implemented in practice:

  • Train all staff on relevant policies and procedures
  • Conduct worker screening checks and keep records
  • Create service agreements with participants
  • Set up your incident management register
  • Establish your feedback and complaints process (and make it accessible)
  • Maintain participant records securely
  • Document evidence of implementation (meeting minutes, training records, signed agreements)

Step 5: Gather Evidence and Documentation

Your auditor will request evidence. Prepare:

Organisational Documents

  • Organisational chart and governance structure
  • Business registration, insurance certificates, ACN/ABN
  • All policies and procedures relevant to the NDIS Practice Standards

Worker Records

  • NDIS worker screening clearances for all workers
  • Qualifications and professional registrations (where required)
  • Induction and training records
  • Supervision and performance review records

Participant Records

  • Service agreements (sample)
  • Support plans or care plans
  • Incident reports and how they were managed
  • Feedback and complaints records (if any)

For Certification Audits (SIL)

  • Medication management records and protocols
  • Restrictive practice authorisations and monitoring
  • Staff rosters demonstrating appropriate ratios
  • Living environment safety checks and maintenance records
  • Positive behaviour support plans

Step 6: Conduct a Self-Assessment

Before your formal audit, conduct your own gap analysis:

  • Use our Audit Readiness Checklist to identify gaps
  • Consider engaging your auditor for a pre-audit or mock audit
  • Address any identified issues before the formal audit

Step 7: Schedule and Complete Your Audit

When you're confident your systems meet the standards:

  1. Schedule the audit with your chosen auditor
  2. Provide requested documentation in advance (desktop review phase)
  3. Arrange on-site visits if required
  4. Make staff and participants available for interviews
  5. Address any clarification requests during the audit
  6. Receive your audit report
  7. If successful: submit your report through the Commission portal
  8. If issues identified: address them and arrange follow-up audit

Recommended Timeline

Verification Audit: 2-4 Months

  • Months 1-2: Develop policies, implement systems, train staff
  • Month 2-3: Gather evidence, conduct self-assessment, engage auditor
  • Month 3-4: Complete audit, address any issues, submit to Commission

Certification Audit: 4-6+ Months

  • Months 1-3: Develop comprehensive policies and systems
  • Month 3-4: Implement, train, and build evidence trail
  • Month 4-5: Pre-audit consultation, gap analysis
  • Month 5-6: Complete formal audit, address issues if needed
  • Allow extra time for complex organisations or new SIL services

Additional Resources

Frequently Asked Questions

Official Sources