NDIS Behaviour Support Plans and SIL: What You Must Have for Your Audit

Why behaviour support hits SIL providers hardest

Supported Independent Living is, by its nature, where behaviour support lives. SIL participants often have higher and more complex support needs, and the supports are delivered 24/7 in a shared home where one person's behaviour affects others. That combination means a large share of SIL participants have a behaviour support plan — and a meaningful number of those plans authorise regulated restrictive practices, such as locked medication or food storage, or as-needed medication used to manage behaviour.

Because of this, behaviour support is one of the most heavily scrutinised areas of a SIL audit. The NDIS Quality and Safeguards Commission treats restrictive practices as an inherent risk to a person's rights and freedom, so the rules around them are strict and the evidence requirements are specific. For a small provider, the danger is not usually that you are doing something abusive — it is that the paperwork doesn't keep up with the support. A plan lapses, a worker uses a PRN medication without it being recorded, a monthly report is missed. Each of those is a finding.

The good news: once you understand the framework, behaviour support evidence is very systematic. It is one of the few areas of SIL compliance where the auditor's expectations are written down clearly. This article maps those expectations onto what you actually need in your files.

The two roles: who writes the plan, who implements it

The single most important thing to get straight is that there are two completely separate roles in NDIS behaviour support, and as a SIL provider you are almost always the second one.

This matters because providers regularly get the responsibilities backwards. You are not expected to write the behaviour support plan — and you should be cautious of any consultant who offers to "write your behaviour support plans" as a template, because a genuine plan must be developed by an approved practitioner who has assessed the individual. What you are expected to do is implement someone else's plan correctly, prove you did, and escalate when something is missing.

If a SIL participant clearly needs a behaviour support plan and doesn't have one, your obligation is to facilitate the referral to a specialist behaviour support provider and keep the person safe in the meantime — not to leave it and not to fabricate a plan. The Commission's own guidance for implementing providers is explicit that facilitating the development of a plan is part of your role.

The link between behaviour support and restrictive practices

Behaviour support plans and restrictive practices are tightly bound together in the NDIS framework, but they are not the same thing. A behaviour support plan is the document. A restrictive practice is a specific intervention that the plan may authorise.

Under the NDIS Act 2013 and the NDIS (Restrictive Practices and Behaviour Support) Rules 2018, a regulated restrictive practice is any practice that has the effect of restricting the rights or freedom of movement of a person with disability. The Commission recognises five categories:

• Seclusion — confining a person alone in a room or space they cannot freely leave.
• Chemical restraint — using medication to influence behaviour, rather than to treat a diagnosed condition. In SIL this most often shows up as as-needed (PRN) medication used during escalation.
• Mechanical restraint — using a device to restrict movement for behavioural purposes (not for a therapeutic or postural purpose).
• Physical restraint — using physical force to restrict a person's movement.
• Environmental restraint — restricting free access to parts of the environment, such as a locked kitchen, locked cupboards, or restricted access to certain items. This is the category SIL providers trip over most, because locks in a shared home feel routine.

The key point: a behaviour support plan is the only legitimate vehicle for a regulated restrictive practice. If a restrictive practice is being used on a SIL participant, there must be a current plan that includes it, that restrictive practice must be authorised under your state or territory process, and the use must be reported monthly to the Commission. No plan, no authorisation, no report — that is unauthorised use, and it is a reportable incident. For the detail on getting practices authorised, see our guide on restrictive practice authorisation for SIL providers.

Interim vs comprehensive plans (and the timeframes)

One distinction auditors check closely is the difference between an interim and a comprehensive behaviour support plan — and the timeframes attached to each. Getting this wrong is one of the more avoidable findings, because the timeframes are published.

As the implementing SIL provider, you do not control these timeframes directly — the specialist provider does. But you are the one who will be holding the file at audit, so you need to know where the plan sits. An interim plan is perfectly acceptable early on. An interim plan that has been in place for a year, with no functional assessment and no comprehensive plan in sight, signals a stalled safeguarding pathway and will draw a finding. If a comprehensive plan is overdue, your file should show that you have raised it with the specialist provider.

Your obligations as an implementing SIL provider

The NDIS Commission sets out specific obligations for implementing providers. These are the duties you own, regardless of who wrote the plan:

• Hold and implement the current plan. Keep the participant's current behaviour support plan on file and make sure the strategies are followed in practice.
• Activate the plan and lodge authorisation evidence. Once the specialist provider lodges the behaviour support plan in the NDIS Commission portal, you activate it and lodge evidence of state or territory authorisation for any regulated restrictive practice.
• Report monthly. Submit monthly reports on the use of regulated restrictive practices through the registered providers portal. These are due within five business days of the end of each month — and you report even in a month where the practice was not used, if the participant has an authorised practice in their plan.
• Train your workers in the specific strategies. Every worker who supports that participant must be trained in that participant's plan — not behaviour support in general, but the actual strategies for that person.
• Record every use. Maintain a restrictive practices register and document each instance of restrictive practice use, including the date, the worker, and the circumstances.
• Report unauthorised use. If a regulated restrictive practice is used without authorisation — including in an emergency outside the documented protocol — report it to the Commission as a reportable incident within five business days of becoming aware of it, and notify the behaviour support practitioner.
• Facilitate plan development and review. Where a participant needs a plan or a review, support the referral and provide the practitioner with the information they need.

Two of these — the monthly reporting and the worker training — are where small providers most often fall down, because they require an ongoing system rather than a one-off document. A plan can be written once; a monthly report and a record of strategy use have to happen every single month and every single shift.

The evidence an auditor samples — file by file

An auditor does not assess behaviour support in the abstract. They pick a participant who has a plan and trace it. For each such participant, here is the evidence they expect to find on the file:

• A current behaviour support plan, developed by an approved behaviour support practitioner, that matches the participant's current needs
• The correct plan for the stage — interim early, comprehensive within six months, with evidence of progression
• Evidence the plan was activated in the NDIS Commission portal and, where regulated restrictive practices are used, evidence of state or territory authorisation lodged
• A restrictive practices register recording each instance the practice was used, with date, worker, and circumstances
• Copies or confirmations of the monthly restrictive practice reports submitted to the Commission
• Worker training records showing the staff who support this participant have been trained in this plan's specific strategies
• Shift notes / progress notes that show the strategies were actually applied and that restrictive practice use (or non-use) was recorded
• Incident reports for any incident involving behaviour or restrictive practices, with evidence of follow-up and notification
• Evidence of plan review at the scheduled time, and review triggered by significant change or incident

Notice that most of this is not the plan itself — it is the operational trail around the plan. That is the deliberate point of the audit: the plan proves intent; the register, the reports, the training records, and the notes prove the intent was carried out. A perfect plan with no implementation evidence is worth very little at audit. For a broader view of evidence expectations across the whole audit, see what auditors check for SIL providers.

How an auditor traces a single participant's file

It helps to picture the audit from the auditor's chair. Here is the kind of thread they pull:

1. They read the plan. Does it name regulated restrictive practices? Is it current? Was it developed by an approved practitioner? Is it interim or comprehensive, and is that appropriate for how long it has been in place?
2. They check authorisation. For each restrictive practice in the plan, is there evidence it was authorised under the relevant state or territory process, and lodged in the portal?
3. They open the register. Does the restrictive practices register show uses that line up with the plan? Are there uses recorded that are not in the plan — which would mean unauthorised use?
4. They cross-check the reports. Do the monthly reports to the Commission match the register? A use recorded in the register but missing from the monthly report is a reporting failure.
5. They read the shift notes. Do the notes for the days a practice was used describe it? Do the notes show the plan's proactive strategies being applied, or only reactive responses?
6. They check who was on shift. For the workers named in those notes, is there a training record showing they were trained in this participant's plan?
7. They look at incidents. Was any incident involving behaviour or restraint reported and followed up correctly?

If every link in that chain holds, behaviour support is one of your strongest areas. If a link is missing — an unreported use, an untrained worker, a lapsed plan — the auditor has found a thread to pull, and they will keep pulling. This is why a strong SIL incident management system sits so close to behaviour support: many of the threads they pull start with an incident.

The behaviour support failures that show up most

1. Unauthorised environmental restraints

Locked food, locked medication, locked doors that have been in place so long nobody questions them — but that were never authorised or named in a plan. This is the most common SIL behaviour support finding because it hides in plain sight as "how the house runs."

2. Plans that have lapsed or stalled

A comprehensive plan more than a year old with no review, or an interim plan that never progressed to comprehensive within six months. The plan was fine when written; the review system failed.

3. Missing or late monthly reports

The provider uses a regulated restrictive practice but does not submit the monthly report within five business days of month end — often because workers didn't record the use, so the report couldn't be completed accurately.

4. Workers not trained in the specific plan

Staff have done generic behaviour support training but cannot point to a record showing they were trained in this participant's plan. At audit, "we talked them through it" without a record is not evidence.

5. Shift notes that don't reflect the plan

Notes describe what happened but never mention the plan's strategies, and don't record when a restrictive practice was used. Without this, the provider can't prove the plan is being implemented or accurately complete its reports.

6. Unreported unauthorised use

A practice was used outside the plan and never reported as a reportable incident. This is the most serious of the six, because it undermines the integrity of the whole safeguarding system — and auditors and the Commission treat concealment far more harshly than the original use.

Getting your behaviour support evidence audit-ready

You can get ahead of all six of those failures with a short, practical preparation pass. For each SIL participant who has a behaviour support plan:

• Confirm the plan is current and developed by an approved practitioner — and chase a review if it is due
• List every lock, restriction, and PRN behaviour medication in the home and check each is named in a plan and authorised
• Reconcile your restrictive practices register against your monthly reports for the last few months
• Confirm every worker on that participant's roster has a training record specific to that plan
• Spot-check shift notes on days a practice was used — do they record it?
• Check that the plan stage (interim vs comprehensive) is appropriate for how long it has been in place, with a paper trail if a comprehensive plan is overdue

If you want to know where you stand before you start, the free SIL Readiness Scorecard walks you through the major audit domains — including behaviour support and restrictive practices — and shows you which areas are likely to draw findings. It takes a few minutes and gives you a prioritised list rather than a vague sense of unease.

And because so much of behaviour support evidence comes down to the quality of shift notes, the free Notes Rewriter tool can help your workers turn rough end-of-shift notes into structured progress notes that capture the strategies applied and any restrictive practice use — without ever inventing detail.