NDIS Audit Preparation

Meet your audit with the evidence already in order

An NDIS audit is not a test of how well you can describe your organisation. It is a test of whether the way you actually operate can be evidenced against the NDIS Practice Standards. Most providers who struggle are not poor providers — they are good providers whose evidence is scattered across inboxes, shared drives and people's memories. Audit preparation is the work of turning that into a pack an auditor can sample from.

What an auditor is actually looking for

Auditors work from the standards that apply to your registration groups, and they triangulate. For any given requirement they will typically want three things to agree:

• The policy — a written procedure that says what your organisation does, specific enough to be followed.
• The record — evidence that it was followed on real dates, for real participants, by named staff.
• The practice — a worker who, when interviewed, describes doing what the policy says.

A non-conformity is usually one of those three going missing. A polished policy nobody follows fails as surely as good practice nobody wrote down.

How we prepare you

Gap analysis against the applicable standards

We start by establishing which standards apply to your registration groups, then work through them against what you actually hold. You finish with a written list of what exists, what is missing, and what exists but will not survive being sampled. Our gap analysis and pre-audit reviews go into this in detail.

Closing the gaps

We prepare the policies, procedures and registers the audit will test — built around how your organisation runs, not generic templates that describe someone else's provider. Where the gap is documentation rather than practice, our policy development and documentation management work closes it.

The mock audit

We run the audit before the auditor does: evidence sampled against the standards, staff interviewed the way an auditor interviews them, findings written up as they would be written up. Teams who have been through a mock audit walk into the real one having already answered the hard questions once.

Preparing your team

Auditors interview frontline workers, not just managers. We prepare your staff to speak accurately about what they do — which is a matter of genuine understanding, so it sits alongside our compliance training rather than replacing it.

Verification or certification?

The depth of preparation depends on the audit you face. Lower-risk registration groups are assessed by verification — largely a document-based check. Higher-risk supports, including Supported Independent Living, require certification: a fuller audit with site visits, participant and staff interviews, and sampling against the full applicable standards. If you are not yet registered, our registration services cover the pathway from the beginning.

The stages of a certification audit

A certification audit runs in two stages, and each one tests something different:

• Stage 1 is a desktop audit of your documented information and evidence, usually off-site. It tests whether your policies and registers cover the standards in scope.
• Stage 2 is on-site: records viewed, sites visited, supports observed, and staff and participants interviewed. It tests whether what you documented is what actually happens. The Commission expects Stage 2 within three months of Stage 1, so the time to fix a practice gap is before Stage 1, not between the two.

Registration is not one audit either. A certification registration also carries a mid-term audit 18 months in, an out-of-cycle audit if you change the supports you deliver, and a possible condition audit at the Commission's request. Preparation that only targets the first audit has to be repeated for each of them; evidence that is kept current does not.

Signs you are audit-ready

Before the audit date is set, you should be able to say yes to each of these:

• You know which standards apply to every registration group in your scope, including any supplementary modules.
• Each applicable standard maps to a named policy, and each policy to the record that shows it operating.
• Worker screening, induction and training records are complete for every worker an auditor could sample.
• Incidents and complaints from the last year are closed out, with the learning recorded.
• A frontline worker could describe your incident, complaint and restrictive practice procedures without reading them.

Any "no" is a likely finding. Our SIL audit checklist and NDIS compliance checklist go through these standard by standard.

What an NDIS audit costs

The Commission charges no fee for registration. The audit itself is priced by the approved quality auditor you engage, and the price follows the scope: your registration groups, the number of sites, workers and participants, and whether you face verification or certification. The Commission recommends requesting more than one quote using your Initial scope of audit. What preparation costs is set out on our consultant cost comparison, and the full picture for SIL providers is on the cost of SIL registration.

After the audit: non-conformities

An audit report records conformities and non-conformities against each standard sampled. A non-conformity is not the end of a registration. It is a gap you close with a corrective action plan, evidenced and accepted within the timeframe the report sets. The work is the same as preparation, done under a deadline: find the root cause, fix the practice, and produce the record that shows it fixed. We support providers through corrective actions as well as before the audit.

What we do not do

We do not conduct your audit, and we have no influence over its outcome. Your audit is conducted by an independent approved quality auditor and your registration is decided by the NDIS Quality and Safeguards Commission — that independence is the point of the scheme, and it is what makes registration worth holding. What we bring is competence in the standards themselves and in what auditable evidence looks like, so that the audit assesses your organisation at its best rather than at its least organised.

Frequently asked questions

What does NDIS audit preparation involve?

Having the evidence an auditor will ask for, in the form they expect it, before the audit begins: policies mapped to the applicable Practice Standards, records showing those policies were followed, and staff who can describe what they do. We work through a gap analysis, close what is missing, and rehearse the audit so nothing in the real one is a surprise.

How long before an audit should we start preparing?

Three months is comfortable; six weeks is workable if your policies are already in place. The constraint is rarely paperwork — some evidence can only accumulate over time. A worker competency record or a completed plan review cannot be produced retrospectively, so starting earlier means more of your evidence is genuine operating history.

Can a consultant guarantee we pass our NDIS audit?

No, and be wary of anyone who says otherwise. The audit is conducted by an independent approved quality auditor and the decision belongs to the Commission. What preparation changes is your side of it: whether your evidence exists, whether it is organised, and whether your team can speak to it.

What is a mock audit?

A rehearsal run the way a real audit runs — evidence sampled, staff interviewed, findings written up as conformities and non-conformities. It surfaces gaps while you still have time to close them.

How much does an NDIS audit cost?

There is no Commission fee. The approved quality auditor you engage sets the price, based on your registration groups, sites, workers and participants, and on whether the audit is verification or certification. Request more than one quote using your Initial scope of audit.

Start before the audit date is set

The best time to prepare is while you still have room to build evidence rather than assemble it. Book a discovery call to talk through your registration groups and timing, or work through the free NDIS compliance checklist to see where you stand today.