NDIS certification vs verification audit: a worked example

Why the audit pathway you are on matters more than you think

When a disability support organisation applies for or renews NDIS registration, the NDIS Quality and Safeguards Commission assigns one of two audit pathways: certification or verification. The pathway is determined by the registration groups the provider holds — specifically, the risk profile of the supports delivered. Getting this wrong is not a minor administrative slip. A SIL provider that prepares only for a document review and then receives an on-site certification audit is almost certain to emerge with non-conformances that delay registration.

This article walks through both pathways using a realistic SIL organisation as the example, so you can see exactly what each audit looks like in practice.

The core difference in plain terms

Under the NDIS (Provider Registration and Practice Standards) Rules 2018 and the strengthened framework rolling out through 2026, the Commission has been tightening both pathways. The 2026 changes place additional emphasis on worker screening verification, incident management maturity, and the lived experience of participants — all of which are actively tested at certification.

Worked example: Sunrise SIL Services Pty Ltd

Sunrise SIL Services is a mid-sized SIL provider operating two shared accommodation houses and one SIL arrangement in an individual's own home. They are preparing for their first full certification audit ahead of the 2026 registration cycle. Here is what that process looks like step by step.

Step 1 — Confirm the audit pathway

Sunrise holds registration group 0115 (Daily Activities — SIL). This places them unambiguously on the certification pathway. Their approved quality auditor (AQA) — an organisation accredited by JAS-ANZ to conduct NDIS audits — confirms they will complete a two-stage audit.

Step 2 — Stage 1 desktop review

The AQA requests the following document categories, assessed against the Core and Supplementary Practice Standards:

• Governance documents: board structure, organisational chart, delegation framework, insurance certificates
• Risk management policy and the current risk register
• Incident management policy, procedures, and a sample of incident reports from the previous 12 months (including evidence of NDIS Commission notifications where required)
• Complaints management policy and the complaints register
• Worker orientation module completion records and NDIS Worker Screening clearance register for all workers in risk-assessed roles
• Restrictive practices policy, behaviour support plan summaries (where applicable), and evidence of authorisation processes under state/territory legislation
• Sample support plans demonstrating participant goal-setting and review processes
• Provider Travel and Transition Policy (relevant under the SIL supplementary module)

The Stage 1 report identifies gaps before the on-site visit. Sunrise receives a finding that three incident reports from the previous year lacked documented follow-up actions. They address this before Stage 2.

Step 3 — Stage 2 on-site audit

The on-site visit at Sunrise typically spans two days across two sites. The auditor programme includes:

1. Opening meeting — auditor confirms scope, introduces the process to the management team
2. Site walkthrough — physical environment check: safety equipment, medication storage, emergency evacuation plans displayed, accessible bathrooms and communal areas
3. Participant interviews — a sample of participants (or their nominees/representatives where communication needs require) are spoken with privately. Questions explore whether participants feel safe, whether their goals are worked on, whether they know how to make a complaint, and whether they feel respected by staff
4. Worker interviews — a sample of support workers and at least one team leader are interviewed. Questions probe knowledge of the Code of Conduct, what to do if they witness abuse or neglect, how restrictive practices are authorised and recorded, and incident reporting obligations
5. Record sampling — the auditor cross-references on-site records (medication administration logs, behaviour support plan reviews, progress notes) against the documents submitted at Stage 1
6. Closing meeting — preliminary findings shared with management; formal report to follow

What the auditor is actually scoring

Against the NDIS Practice Standards, each outcome is rated as Conformant, Minor Non-Conformance, or Major Non-Conformance. A major non-conformance (or multiple minors in the same outcome area) must be resolved before certification is granted. Common non-conformances at SIL certification audits include:

• Incident notification to the Commission not completed within the required timeframe
• Behaviour support plans not reviewed within the required period, or restrictive practices used without written authorisation
• Worker screening checks not current for all workers in risk-assessed roles — a strengthened focus area from 2026
• Support plans present but lacking evidence participants actively participated in developing their own goals
• Emergency and evacuation plans not site-specific or not tested within a reasonable period

How this differs from a verification audit at the same organisation

If Sunrise were instead a plan management provider (no SIL), their auditor would receive a document package by email and conduct the entire assessment at a desk. There is no site visit, no participant interview, no worker interview. The auditor assesses whether the submitted documents adequately demonstrate conformance with the applicable outcomes. Gaps are identified through document analysis alone. This is faster and less intensive — but it is not available to SIL providers.

Preparing your evidence file: a practical checklist

For SIL providers preparing for certification, organise your evidence into folders matching each Practice Standard outcome before the AQA requests anything. Auditors work to tight timelines; a well-labelled evidence file demonstrates organisational maturity and speeds up Stage 1.

• Core module: rights, governance, risk management, incident management, complaints, worker screening
• Supplementary — Support Provision: person-centred planning, support delivery, transitions
• Supplementary — Implementing Behaviour Support: restrictive practice authorisation, reporting to Commission, PBS plan reviews
• Supplementary — High Intensity Daily Personal Activities (if applicable): competency evidence for specific tasks

The 2026 strengthened standards: what is changing

The NDIS Commission's strengthened Practice Standards framework, phased in through 2026, introduces clearer outcome statements and a greater emphasis on demonstrating real-world participant experience — not just document existence. For certification audits, this means auditors will place more weight on what participants and workers say during interviews relative to what policies claim. Providers who have policies on paper but inconsistent practice on the floor are at heightened risk of non-conformances under the strengthened framework.

Providers preparing now should treat the participant interview component as a quality test of their daily practice, not just an audit formality.

Getting your documents audit-ready

Assembling the required policy and procedure suite from scratch is the most time-consuming part of certification preparation. The ndiscompliant.com.au 74-document SIL compliance kit was built specifically to address this — covering every policy category an approved quality auditor will request, formatted to align with the Practice Standards outcomes. It is a practical starting point, not a substitute for tailoring documents to your actual organisation.

Summary

Certification and verification are not interchangeable — they serve different provider risk profiles and operate very differently. SIL providers will always be on the certification pathway. Understanding the two-stage process, what auditors assess at each stage, and the non-conformance categories most likely to delay registration gives you the clearest possible preparation roadmap heading into 2026.