Why Behaviour Support Plans are a high-risk audit focus
Behaviour Support Plans (BSPs) sit at the intersection of participant rights, restrictive practices regulation, and the NDIS Practice Standards — making them one of the most scrutinised areas in any NDIS quality audit. For SIL and disability-support providers, non-conformances in this domain attract serious consequences: enforceable undertakings, banning orders, and mandatory incident notifications to the NDIS Commission.
The strengthened NDIS Practice Standards framework, progressively taking effect through 2025–2026, has sharpened auditor expectations around evidence quality. A BSP is no longer simply a document on file — auditors will trace the plan through consent, authorisation, staff competence, implementation fidelity, and outcomes review. This checklist walks you through each evidence layer.
The core regulatory framework
Before reviewing what auditors check, understand the rules driving those checks:
- NDIS Practice Standards — the Behaviour Support module sets specific outcomes for providers who implement BSPs, including requirements for using a registered Positive Behaviour Support (PBS) practitioner and having written, consent-based plans.
- NDIS (Restrictive Practices and Behaviour Support) Rules 2018 — governs who can authorise regulated restrictive practices, timelines for transitioning to less-restrictive approaches, and mandatory reporting obligations.
- NDIS Code of Conduct — providers and workers must take reasonable steps to implement BSPs and report restrictive practices accurately.
- State and Territory Authorisation — regulated restrictive practices require prior written authorisation from the relevant state or territory disability authority before implementation. Absence of this authorisation is a critical non-conformance.
Behaviour Support Plan audit evidence checklist
Use the following tick-list to assess your readiness before an approved quality auditor visits. Each item corresponds to an auditor evidence request you should anticipate.
1. Plan development and practitioner registration
- BSP developed or reviewed by a registered PBS practitioner — confirm registration on the NDIS Commission portal.
- Evidence of functional behaviour assessment underpinning the plan (assessment report or summary on file).
- Plan includes a clear description of the behaviour of concern, its function, and proposed positive support strategies.
- Plan authored or countersigned within the practitioner's recorded scope of practice.
2. Consent and participant involvement
- Written consent from the participant (or their authorised representative where the participant lacks decision-making capacity) on file and dated.
- Evidence that the plan was explained to the participant in an accessible format appropriate to their communication needs.
- Where applicable, substitute decision-maker consent documented with a copy of the relevant guardianship or administration order.
- Participant and/or family goals reflected in the plan content — not just clinician-determined outcomes.
3. Restrictive practice authorisation
- Each regulated restrictive practice listed separately with its category (chemical, mechanical, physical, environmental, or seclusion).
- Current written authorisation from the relevant state or territory authority for each regulated restrictive practice — not expired.
- Authorisation is time-limited and the expiry date is tracked in a register or calendar system.
- Evidence that unauthorised restrictive practices are reported to the NDIS Commission as required (reportable incidents).
- Where a restrictive practice is used in an emergency, evidence of post-incident reporting within the required timeframe.
4. Staff training and competence
- All staff who implement the BSP have completed documented training specific to the plan — not generic behaviour support training only.
- Training records include date, content covered, and delivery method.
- Any new staff who commence after plan implementation receive BSP-specific training before working with the participant.
- Evidence that staff understand de-escalation strategies and what constitutes an unlawful use of a restrictive practice.
5. Implementation records
- Daily or shift-based progress notes that reference BSP strategies (not generic notes that make no mention of the plan).
- Data collection tool in use that captures frequency, duration, or intensity of the behaviour of concern as specified in the plan.
- Records of restrictive practice use (each instance) including time, duration, staff involved, and participant response.
- Completed restrictive practice reports submitted to the NDIS Commission within the required timeframe for each regulated use.
6. Review and outcomes evidence
- BSP reviewed at the frequency specified in the plan and at minimum in line with NDIS Commission expectations (review timelines align with authorisation periods and participant support plan reviews).
- Review documentation signed by the PBS practitioner and includes analysis of whether behaviours of concern have changed.
- Where a restrictive practice has not been reduced or eliminated, the plan records the reason and revised reduction pathway.
- Evidence of a reduction plan with measurable milestones toward elimination of regulated restrictive practices.
7. Incident linkage and reporting
- Incident reports linked or cross-referenced to the relevant BSP where the behaviour of concern is involved.
- Post-incident debrief records demonstrating whether the BSP was followed at the time of the incident.
- NDIS reportable incidents involving restrictive practices lodged in the NDIS Commission portal with required follow-up actions completed.
Common non-conformances auditors find
| Non-conformance | What it looks like on the ground | Fix |
|---|---|---|
| Restrictive practice without current authorisation | Authorisation expired; practice continuing | Build expiry reminders into your compliance calendar; cease or escalate immediately on expiry |
| BSP not developed by a registered practitioner | Plan written by internal coordinator or unregistered person | Engage a registered PBS practitioner; confirm registration before engagement |
| Training records incomplete or generic | Induction records do not reference the specific BSP | Create a per-plan staff sign-off sheet; attach to the BSP folder |
| Consent not documented | Verbal consent only or consent form undated | Use a dated consent form that names each restrictive practice; re-obtain at each review |
| No reduction pathway | Plan states restrictive practice is in use but sets no milestones for reduction | PBS practitioner must include a time-bound reduction plan as a plan requirement |
| Progress notes generic | Notes say "good day" with no reference to BSP strategies used | Embed BSP strategy prompts in your progress note template |
Sample evidence folder structure
Auditors typically expect a participant-specific BSP folder (physical or digital) containing:
- Current BSP document (version-controlled, dated)
- Functional behaviour assessment report
- Practitioner registration confirmation (screenshot or certificate)
- Consent form (signed, dated)
- State/territory restrictive practice authorisation letters (all current, expiry highlighted)
- Staff training records specific to this BSP
- Monthly restrictive practice use logs
- NDIS Commission restrictive practice reports submitted (PDF copies or portal confirmation)
- Review meeting minutes and updated plan versions
- Incident reports cross-referenced to this plan
Preparing your organisation
A practical first step is running an internal audit against this checklist for your highest-complexity participants — those with regulated restrictive practices in place — before scheduling your formal quality audit. Gaps are far easier to remediate when you have lead time.
If your organisation supports multiple SIL participants and manages several BSPs simultaneously, a register that tracks authorisation expiry dates, review due dates, and training currency for each participant is not optional — it is the only reliable way to stay ahead of compliance deadlines.
For providers building out their full audit-readiness documentation, the 74-document SIL compliance kit available at ndiscompliant.com.au includes BSP consent templates, restrictive practice registers, staff training sign-off sheets, and review meeting minutes — all formatted to the current NDIS Practice Standards.
Stay current with NDIS Commission guidance as the strengthened Practice Standards continue to be implemented. Auditor expectations for behaviour support evidence are only increasing, and early preparation is the lowest-risk path through your next audit.
Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.