The NDIS quality audit is a key part of the provider registration process. Organisations applying to become registered NDIS providers must undergo an independent audit conducted by an approved quality auditor.

The purpose of the audit is to assess whether an organisation has governance systems, operational procedures and safeguarding frameworks aligned with the NDIS Practice Standards and Quality Indicators.

Understanding how the NDIS audit process works can help organisations prepare more effectively and avoid delays during provider registration.

This guide explains the NDIS audit process including verification audits, certification audits, Stage 1 and Stage 2 audits, and how organisations prepare for the audit process.


Important Regulatory Note

NDIS provider audits are conducted by independent approved quality auditors and reviewed by the NDIS Quality and Safeguards Commission.

Consultants, advisors and documentation providers do not determine audit outcomes and cannot guarantee registration approval.

Organisations remain responsible for ensuring their governance systems, operational frameworks and service delivery practices meet the requirements of the NDIS Practice Standards and Quality Indicators.


Why NDIS Providers Must Complete an Audit

NDIS provider audits ensure that organisations delivering supports within the NDIS have systems in place to protect participants and deliver safe services.

During the audit process, auditors assess whether organisations have established operational systems covering areas such as:

Audit findings are then provided to the NDIS Quality and Safeguards Commission, which determines whether provider registration requirements have been satisfied.

Understanding the broader NDIS provider registration process can help organisations prepare for the audit.


Certification vs Verification Audits

The type of audit required depends on the registration groups the organisation applies for.

Some services are considered lower risk, while others involve more complex supports and require a deeper level of regulatory assessment.


Verification Audits

Verification audits apply to lower risk registration groups.

These audits focus primarily on confirming that the organisation has established appropriate governance systems and operational documentation.

Verification audits typically involve:

Verification audits are generally less complex than certification audits and may be completed more quickly.


Certification Audits

Certification audits apply to higher risk registration groups.

These may include services such as:

Certification audits involve a more comprehensive assessment of the organisation’s governance systems and operational practices.

These audits usually occur in two stages.


Stage 1 Audit – Documentation Review

The Stage 1 audit focuses on reviewing the organisation’s governance framework and documentation.

During this stage auditors review whether the organisation has established policies and procedures aligned with the NDIS Practice Standards.

Areas typically reviewed include:

The Stage 1 audit focuses on whether appropriate systems exist.

Understanding NDIS policies and procedures required for registration can assist organisations preparing these frameworks.


Stage 2 Audit – Implementation Assessment

The Stage 2 audit assesses whether governance systems are actually implemented within the organisation.

This stage typically includes:

Auditors examine whether documented procedures are being applied consistently in practice.

The Stage 2 audit therefore focuses on implementation rather than documentation alone.


What Auditors Look For During an NDIS Audit

During the audit process, auditors typically assess several key areas.

Governance Systems

Organisations must demonstrate leadership oversight and operational accountability.

Participant Safeguarding

Providers must show systems that protect participant rights and wellbeing.

Incident Management

Providers must maintain processes for identifying, reporting and managing incidents affecting participants.

Complaints Handling

Participants must have accessible pathways for raising complaints or feedback.

Workforce Screening and Supervision

Organisations must ensure staff meet worker screening requirements and operate within appropriate supervision frameworks.

Understanding NDIS provider compliance requirements can help organisations establish these systems effectively.


Documentation and Evidence

Operational documentation plays a significant role in the audit process.

Auditors often review documentation such as:

Understanding NDIS file note examples and documentation standards can assist organisations implementing appropriate documentation systems.


Preparing for an NDIS Audit

Organisations preparing for an NDIS audit may wish to consider the following steps.

Establish Governance Frameworks

Ensure leadership structures, risk management systems and operational oversight frameworks are documented.

Implement Operational Policies

Policies and procedures should align with the NDIS Practice Standards and Quality Indicators.

Develop Incident and Complaints Systems

Providers must demonstrate clear processes for managing incidents and complaints.

Ensure Workforce Compliance

All workers must meet relevant screening and supervision requirements.

Maintain Operational Documentation

Service delivery records should clearly demonstrate how supports are delivered and monitored.


Common Issues Identified During NDIS Audits

Auditors frequently identify similar issues when reviewing provider organisations.

Common challenges include:

Preparing governance systems early can help organisations navigate the audit process more effectively.


NDIS Audit Preparation Checklist

Organisations preparing for an NDIS audit may wish to review the following checklist.

These systems form the foundation of a compliant provider organisation.


Preparing for NDIS Provider Registration

For many organisations, the audit process forms part of the broader process of establishing a registered NDIS provider.

Providers preparing to enter the sector may wish to understand how to start an NDIS provider business.


When Organisations Seek Operational Guidance

Some organisations prepare governance frameworks internally, while others seek guidance when preparing for audit.

DSP provides consulting and operational guidance to organisations navigating provider registration, governance frameworks and compliance systems within the NDIS.

Providers navigating operational, governance or compliance questions within the NDIS may wish to explore NDIS provider consulting through DSP.


Related NDIS Operational Guides

Understanding the 1:3 support ratio in Supported Independent Living

Understanding NDIS file note examples and documentation standards

Understanding TSP and streaming factors in the NDIS

Understanding NDIS plan reassessment timeframes

Understanding SCHADS Award break times for NDIS providers


Author

Phil Bamback is a Director within regulated disability services, focused on governance frameworks and structured operating pathways across the NDIS.