NDIS continuity of supports plan: what auditors look for

Why a continuity of supports plan is non-negotiable for SIL providers

For registered SIL (Supported Independent Living) providers, a continuity of supports plan is not optional documentation — it is a core obligation under the NDIS Practice Standards. The plan must demonstrate that your organisation has thought rigorously about what happens when normal operations are disrupted: a staff member calls in sick, a key contractor withdraws, a natural disaster restricts access, or a sudden participant health crisis escalates overnight.

The NDIS Quality and Safeguards Commission treats continuity planning as a direct indicator of provider capability. Auditors are not looking for a polished template; they are assessing whether your plan would actually function under pressure. The strengthened Practice Standards framework — applying to providers seeking or renewing registration from 2026 — has raised the bar for what "adequate" looks like.

The regulatory foundation auditors reference

Auditors conduct their assessment against the NDIS Practice Standards made under the National Disability Insurance Scheme Act 2013 (Cth). For SIL providers, the relevant modules include the Core Module (which applies to all registered providers) and the Specialist Support Module covering SIL and SDA. Within those modules, the following standards directly bear on continuity planning:

• Rights and responsibilities — participants must be informed of any disruption that affects their supports and have a say in how it is managed.
• Governance and operational management — providers must maintain systems and processes that ensure continuity and safe transitions.
• Incident management — a breakdown in support continuity that causes harm or risk of harm is a reportable incident under the Commission's rules.
• Emergency and disaster management — SIL providers are specifically required to maintain plans that address emergencies affecting supported living environments.

Auditors cross-reference your written plan against each of these standards. A plan that covers only natural disasters but ignores workforce failure will trigger a non-conformance.

What approved quality auditors actually check

When an approved quality auditor (AQA) reviews your continuity of supports plan, they work through a structured evidence-gathering process. The following covers the primary areas of scrutiny.

1. Scope and risk identification

Auditors expect to see that you have identified every category of disruption that could affect support delivery. This is not a generic list — it must be specific to your client group and service model. For a SIL house supporting participants with high care needs, the risk register should address:

• Unplanned staff absences (including keyworker illness, resignation, suspension)
• Critical subcontractor failure (allied health, transport, maintenance)
• Technology or communication system outage (including rostering software)
• Participant hospitalisation requiring rapid support reconfiguration
• Natural disaster or public health emergency restricting site access
• Loss of a SIL house (lease termination, property damage)

A common non-conformance at this stage is a plan that lists risks at a high level but does not connect each risk to a corresponding control or response action.

2. Roles, responsibilities and escalation pathways

Auditors will look for named roles — not just job titles — responsible for activating the plan, making decisions, and communicating with participants and the Commission. They check whether:

• There is a clearly designated continuity lead with documented authority to act
• Escalation thresholds are defined (e.g., when to contact the Commission, when to notify participants' nominees)
• Backup decision-makers are named for when the primary lead is unavailable
• Contact lists for staff, participants, families, and external services are current and stored accessibly

Outdated contact lists are one of the most frequently cited non-conformances in SIL audits. If the list has not been reviewed in six months, auditors will note it.

3. Participant-centred response protocols

The Practice Standards place the participant's safety and rights at the centre of every operational requirement. Auditors will assess whether your plan:

• Specifies how each participant will be individually notified of a disruption, in a format that suits their communication needs
• Describes how participant preferences and NDIS plan goals are maintained during the disruption period
• Addresses the needs of participants with restrictive practice authorities — particularly around who is authorised to implement behaviour support if the keyworker is unavailable
• Identifies any participant who is especially vulnerable during transitions (e.g., high medical needs, communication barriers)

A plan that treats all participants identically will not satisfy auditors reviewing a mixed-needs SIL setting.

4. Evidence of testing and review

This is where many providers fall short. A continuity of supports plan that has never been tested is treated with scepticism by auditors. They will ask for:

• Records of desktop exercises or tabletop simulations (at least annually in most frameworks)
• Evidence that lessons from real incidents have been incorporated into the plan
• A documented review cycle with sign-off from senior leadership
• Staff training records demonstrating familiarity with the plan's contents and their role in it

Auditors may interview frontline workers and ask them to explain what they would do in a specific scenario. If staff answers diverge significantly from the written plan, this suggests the plan exists in isolation from actual operations.

5. Linkage to incident management and reporting obligations

Your continuity plan must not exist as a standalone document. Auditors check that it is integrated with your incident management system. Specifically, they look for:

• A clear definition of when a continuity failure becomes a reportable incident under the NDIS (Incident Management and Reportable Incidents) Rules
• Procedures for notifying the Commission within required timeframes when participant safety has been or may be compromised
• Integration with your complaints management process, so participants affected by a disruption know how to raise concerns

Common non-conformances found in SIL audits

A practical step-by-step approach to audit readiness

1. Map all critical supports — list every support type you deliver and identify which would cause immediate participant harm if interrupted.
2. Conduct a risk assessment — for each critical support, rate likelihood and consequence; document the assessment as a formal attachment.
3. Draft participant-specific annexes — for each participant or household, note their specific vulnerabilities and communication needs during a disruption.
4. Assign and document roles — name the continuity lead, deputy, and communication officer; obtain written acknowledgement from each.
5. Integrate with your incident management system — define the thresholds that trigger Commission notification.
6. Test the plan — run a tabletop exercise using a realistic scenario; document the date, participants, findings, and actions taken.
7. Set a review cadence — review after every real incident, and at a minimum annually; capture sign-off in a version history table within the document.
8. Train all staff — include the plan in induction packs and record completion in your learning management system.

Preparing your documentation package

Auditors expect to receive a coherent bundle of evidence, not a folder of loosely related policies. Your continuity of supports plan should sit alongside — and cross-reference — your incident management policy, emergency management plan, behaviour support procedures, and participant communication guides.

If you are working toward registration or renewal in 2026 and need to accelerate your document readiness, ndiscompliant.com.au offers a 74-document audit-ready SIL compliance kit that includes a customisable continuity of supports plan aligned to the strengthened Practice Standards framework.

Regardless of whether you use a pre-built kit or develop documents in-house, the principle is the same: every document in your evidence bundle must show clear internal consistency, and every claim must be backed by a record that an auditor can verify on the day.