The Two NDIS Audit Pathways: An Overview

When a provider registers with the NDIS Quality and Safeguards Commission, their registration is assigned to one of two audit pathways: certification or verification. The pathway is not chosen by the provider — it is determined by the risk profile of the support types (registration groups) the provider seeks to deliver.

Understanding the difference is not merely administrative. Getting the wrong audit type, or preparing for the wrong scope, can result in a failed audit, delayed registration renewal, or — in serious cases — cancellation of registration. For SIL providers operating in 2026 under the strengthened NDIS Practice Standards framework, the stakes are higher than ever.

Verification Audits: Lower-Risk Supports

Verification audits are designed for providers delivering lower-risk supports where participants have greater ability to direct their own services and the potential for harm is comparatively limited. Examples include plan management, support coordination (in some configurations), and a range of community participation supports.

What a verification audit involves

Verification audits are generally less resource-intensive than certification audits, but providers still need documented, current policies and evidence of actual practice — not just paper frameworks.

Certification Audits: Higher-Risk Supports Including SIL

Certification audits apply to registration groups involving higher-risk supports where participants may be more vulnerable, where the provider has significant influence over a participant's daily life, or where the consequences of poor practice are more severe. Supported Independent Living (SIL) sits firmly in the certification pathway.

Other registration groups requiring certification include specialist disability accommodation (SDA), behaviour support, early childhood supports, and any supports involving the use of restrictive practices.

What a certification audit involves

The 2026 Strengthened Practice Standards: Key Changes for SIL Providers

From 2026, the NDIS Commission has progressively introduced strengthened Practice Standards and associated audit evidence guides. These changes reflect recommendations from independent reviews and raise the bar for what auditors expect to see at certification.

SIL providers should be aware of the following shifts in audit focus:

  1. Participant outcomes, not just process compliance. Auditors are increasingly looking for evidence that supports are achieving meaningful outcomes for participants, not merely that documented policies exist.
  2. Worker screening and training records. NDIS Worker Screening Checks must be current for all workers in risk-assessed roles, and induction and ongoing training records must be maintained and available on audit.
  3. Incident management systems. The Commission expects a genuine closed-loop incident management process: reporting, investigation, corrective action, and evidence that learning has been applied. SIL providers must report certain incidents to the Commission within prescribed timeframes.
  4. Restrictive practice authorisation. Where any restrictive practices are used in a SIL setting, providers must demonstrate written authorisation from the relevant state or territory body, a behaviour support plan developed by a qualified practitioner, and regular review. Missing authorisation is a common high-risk non-conformance at certification audit.
  5. Complaints management. An accessible, functioning complaints system — with evidence it is promoted to participants and acted upon — is assessed at every certification audit.
  6. Governance and quality management. The Board or senior leadership must demonstrate active oversight of quality and safety, not merely delegate it downward.

How Certification Audits Are Conducted: Stage by Stage

Stage 1 — Document Review

The auditor reviews your policy and procedure suite, governance documentation, staff training records, risk registers, and participant file samples against the applicable Practice Standards. This is conducted prior to the site visit and generates a list of areas requiring further examination on-site.

Stage 2 — On-Site Assessment

The auditor visits your SIL premises (typically across multiple sites if you operate more than one). This includes:

Audit Findings and Conformance

Following Stage 2, the auditor issues a report categorising findings as conformant, non-conformance (minor or major), or opportunity for improvement. Major non-conformances must be resolved before registration can be granted or renewed. The NDIS Commission makes the final registration decision — not the auditor.

Common Non-Conformances at SIL Certification Audits

Non-Conformance Area What Auditors Find How to Address It
Restrictive practices No written authorisation, or plan not reviewed within required timeframe Audit all behaviour support plans; confirm state/territory authorisation is current
Incident reporting Incidents logged internally but not reported to Commission within required timeframe Implement a reportable incident triage checklist; train all staff on categories
Worker screening NDIS Worker Screening Check expired or not obtained before commencement Maintain a screening register with expiry alerts; do not allow gap in coverage
Support plans Plans not current, not person-centred, or not signed by participant Schedule annual reviews with six-month touchpoints; use a plan review register
Complaints system Complaints process not accessible or not promoted to participants Use Easy Read materials; document that the process was explained at onboarding

Preparing Your SIL Service for Certification Audit

  1. Map your registration groups to the correct Practice Standards modules — confirm with the Commission's registration guidance which supplementary modules apply to your specific supports.
  2. Conduct an internal gap analysis — systematically compare your current policies and practice evidence against each standard before the auditor does.
  3. Organise your documentary evidence — auditors need to locate documents quickly. A well-indexed policy and evidence folder reduces audit time and signals organisational maturity.
  4. Prepare your team — brief all staff, especially frontline workers, on the audit process, their role, and how to speak to their own practice in participant-centred terms.
  5. Review participant files against a checklist — ensure support plans, risk assessments, and consent documentation are current and signed.
  6. Check restrictive practice authorisation status — this is a high-risk area; resolve any gaps before the audit date.
  7. Confirm worker screening for all risk-assessed roles — no exceptions, no provisional arrangements left unresolved.

Providers seeking a comprehensive head start on documentation can refer to the 74-document audit-ready SIL compliance kit available at ndiscompliant.com.au, which is structured around the current Practice Standards modules and includes policies, procedures, and evidence templates mapped to certification audit requirements.

Choosing an Approved Quality Auditor

Only auditors approved by the NDIS Quality and Safeguards Commission can conduct NDIS registration audits. The Commission maintains a list of approved auditors on its website. Providers should contact multiple auditors to compare availability, experience in SIL services, and fees. The cost of a certification audit is a provider expense and is not NDIS-funded.

Engage your auditor well ahead of your registration renewal date — approved auditors are in high demand, particularly as 2026 renewal cycles converge for many providers registered under the original 2020 framework.

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.