What Happens During an NDIS Audit? A Step-by-Step Walkthrough

Preparing for an NDIS audit can feel overwhelming, especially if you're going through it for the first time. Understanding the NDIS audit process is crucial for providers who want to achieve and maintain certification. This comprehensive guide walks you through every stage of the NDIS audit process, from initial notification to final outcome, so you can approach your audit with confidence and clarity.

Whether you're preparing for an NDIS certification audit or an NDIS verification audit, knowing what to expect at each stage helps you allocate resources effectively, prepare your team, and ensure all documentation is in order. The NDIS audit process is designed to verify that providers meet the NDIS Practice Standards and deliver quality services to participants.

Receiving Your Audit Notification

The NDIS audit process begins when you receive formal notification from your chosen auditing body. This notification typically arrives 4-6 weeks before your scheduled audit date, giving you adequate time to prepare. The notification will outline the scope of your audit, the standards being assessed, and the expected duration.

During this phase, you'll need to confirm your audit date and provide preliminary documentation. The auditing body will request access to your policies, procedures, and evidence that demonstrates your compliance with NDIS Practice Standards. This is also when you'll be informed whether you're undergoing a certification audit (for new providers) or a verification audit (for existing providers seeking to maintain or upgrade their registration).

Preparing for the Audit

Preparation is the most critical phase of the NDIS audit process. This is your opportunity to review all documentation, train staff, and ensure your organization's practices align with the NDIS Practice Standards. Start by conducting an internal audit to identify any gaps in your compliance.

Key preparation activities include:

• Organizing all policies and procedures in an easily accessible format
• Ensuring all staff records, including training certificates and police checks, are current
• Reviewing participant files and service agreements for completeness
• Preparing evidence of continuous improvement activities
• Briefing staff members who will be interviewed during the audit
• Setting up a dedicated space for the auditor to work

The Opening Meeting

On the day of your NDIS certification audit or verification audit, the process begins with an opening meeting. The auditor will introduce themselves, explain the audit methodology, and confirm the audit schedule. This is your opportunity to ask questions and clarify any concerns about the process.

The opening meeting typically covers the audit scope, timelines, confidentiality arrangements, and the communication protocol throughout the audit. The auditor will also request a tour of your facilities and confirm which staff members they'll need to interview. This meeting sets the tone for the entire audit, so approach it with professionalism and transparency.

Documentation Review and Assessment

The documentation review forms the backbone of the NDIS audit process. The auditor will systematically examine your policies, procedures, and records to verify compliance with relevant NDIS Practice Standards. They'll look for evidence that your documented processes are not only comprehensive but also implemented in practice.

During this phase, auditors assess:

• Governance and operational management systems
• Risk management frameworks and incident reporting processes
• Participant service agreements and care plans
• Staff recruitment, screening, and training records
• Complaint handling and feedback mechanisms
• Quality improvement activities and outcomes

Staff and Client Interviews

Interviews are a crucial component where auditors verify that your documented procedures translate into actual practice. The auditor will speak with management, frontline staff, and potentially participants or their representatives. These conversations help auditors understand how well your team understands and implements organizational policies.

Staff should be prepared to discuss their roles, responsibilities, and how they apply NDIS Practice Standards in their daily work. Encourage your team to be honest and specific in their responses. If they don't know an answer, it's better to admit it than to guess. These interviews also provide insight into your organizational culture and commitment to quality service delivery.

Closing Meeting and Findings

At the conclusion of the on-site assessment, the auditor will conduct a closing meeting to present their preliminary findings. They'll outline areas of conformance, any non-conformances identified, and observations for improvement. This is not the final audit report, but it gives you an indication of the audit outcome.

Non-conformances are categorized as either critical, major, or minor, depending on their severity and impact on service quality. Critical non-conformances require immediate action, while major and minor issues will need to be addressed within specified timeframes. The auditor will explain the corrective action process and timelines for responding to any identified issues.

Post-Audit Outcome and Certification

Following the audit, you'll receive a detailed audit report outlining all findings. If your NDIS verification audit identified non-conformances, you'll need to submit a corrective action plan addressing how you'll resolve each issue. The auditor will review your plan and may conduct a follow-up assessment to verify implementation.

Once all non-conformances are satisfactorily addressed, the auditing body will recommend certification to the NDIS Quality and Safeguards Commission. Upon approval, you'll receive your certificate of registration, valid for up to three years depending on your registration group. Remember that maintaining certification requires ongoing commitment to the NDIS Practice Standards and continuous improvement.

Frequently Asked Questions

What is the difference between an NDIS certification audit and verification audit?

An NDIS certification audit is conducted when a provider is seeking NDIS registration for the first time. An NDIS verification audit is performed for providers who are already registered and are either renewing their registration, adding new registration groups, or upgrading their certification. Both audit types assess compliance with NDIS Practice Standards, but certification audits are typically more comprehensive as they establish baseline compliance.

How long does the NDIS audit process typically take?

The duration varies depending on the size of your organization and the scope of services being audited. On-site audits typically range from one to three days. However, the entire NDIS audit process from notification to receiving your certificate can take 8-12 weeks, including time for preparation, the audit itself, addressing any non-conformances, and administrative processing by the NDIS Commission.

What happens if we fail our NDIS audit?

Failing an audit outright is rare. More commonly, auditors identify non-conformances that must be addressed. You'll be given an opportunity to submit corrective action plans and demonstrate how you've resolved the issues. The auditor may conduct a follow-up assessment to verify your corrective actions. Only after persistent failure to address critical non-conformances would registration be denied.

Can we choose our own auditing body?

Yes, you can select from NDIS Commission-approved auditing bodies. It's important to choose an auditor with experience in your specific service types and registration groups. Consider factors such as their availability, pricing, and reputation within the disability sector when making your selection.

How often will we be audited after initial certification?

After your initial NDIS certification audit, surveillance audits may be conducted periodically throughout your registration period. When your registration is due for renewal (typically every three years), you'll undergo another verification audit. The NDIS Commission may also conduct spot audits if concerns arise about your service quality or compliance.

TamCare is a mobile-first care app for NDIS providers. We help providers manage rostering, invoices, care notes, timesheets, and much more.