How long do I have to submit a corrective action plan after an NDIS audit non-conformance?

The timeframe is set by your approved quality auditor and will be stated in the non-conformance report. Timeframes vary depending on the severity of the non-conformance. For major non-conformances, providers are typically required to submit a CAP promptly — often within a short number of business days — and may need to demonstrate interim containment actions before the full CAP is finalised. Always check the specific deadline in your audit report.

Does the NDIS Commission have a standard corrective action plan template?

The NDIS Commission does not publish a single mandatory CAP template. However, it expects corrective action plans to address the root cause, assign accountability, include realistic timeframes, and specify how effectiveness will be verified. Your approved quality auditor may provide a template. SIL providers should use a structured format that clearly maps each action to the relevant Practice Standard clause.

What is the difference between a corrective action and a preventive action in NDIS quality management?

A corrective action responds to an existing non-conformance — something that has already gone wrong or been identified as not meeting a Practice Standard. A preventive action addresses a risk or potential gap before it becomes a non-conformance. Both are part of a complete quality management system. Auditors assessing the strengthened 2026 Practice Standards will look for evidence of both types of activity in your continuous improvement register.

Can the NDIS Commission require a corrective action plan outside of an audit?

Yes. The NDIS Commission can require a registered provider to submit a corrective action plan as part of a compliance notice, following a complaint investigation, or after reviewing reportable incidents. In these situations, the Commission will typically specify the required content and the timeframe for submission. Failure to submit a satisfactory CAP can result in further regulatory action, including conditions being imposed on the provider's registration.

What evidence do auditors expect to see when verifying a corrective action plan is complete?

Auditors look for objective evidence that each action was completed as described and that the change was effective. This may include updated and version-controlled policies, signed training attendance records, staff competency assessments, updated risk registers, participant file samples showing the changed practice, and entries in the provider's continuous improvement register confirming the CAP was closed out with an effectiveness review.

Do SIL providers face stricter requirements for corrective action plans than other NDIS provider types?

SIL providers are subject to the full NDIS Practice Standards including the High Intensity Supports module where relevant, and are required to undergo certification audits rather than the lighter verification audit pathway. This means more Practice Standard clauses are assessed, and non-conformances in high-risk areas such as behaviour support, restrictive practices, and medication management are treated with particular seriousness by auditors and the Commission.

NDIS Corrective Action Plan (2026): A Practical Guide for SIL Providers

What Is an NDIS Corrective Action Plan?

A corrective action plan (CAP) is a structured document a registered NDIS provider submits — or maintains internally — when a gap, non-conformance, or regulatory concern has been identified. The trigger may come from an approved quality auditor during a certification or verification audit, from the NDIS Quality and Safeguards Commission following a complaint or incident investigation, or from the provider's own internal audit and continuous improvement cycle.

Under the strengthened NDIS Practice Standards that came into full effect in 2026, corrective action planning is no longer treated as an administrative formality. It is embedded in the core quality management requirements that auditors assess. A provider that cannot demonstrate a systematic approach to identifying, documenting, and resolving non-conformances — including evidence that past corrective actions actually worked — will face difficulty passing certification.

When Must a Corrective Action Plan Be Produced?

There are three main circumstances that require a formal corrective action plan for SIL and other registered NDIS providers:

Audit non-conformance: An approved quality auditor identifies a practice standard or module requirement that is not being met. The provider must submit a CAP to the auditor, usually within a specified number of business days of receiving the non-conformance report.
NDIS Commission regulatory action: Following a complaint investigation, reportable incident review, or compliance notice, the Commission may require a provider to submit a corrective action plan as a condition of continued registration.
Internal continuous improvement: The NDIS Practice Standards require providers to maintain a continuous improvement system. A good-practice CAP process supports this even when no external audit non-conformance has been raised.

SIL providers face particular scrutiny in 2026 because the strengthened Practice Standards include a dedicated High Intensity Supports module covering complex daily living needs. Non-conformances in areas such as medication management, behaviour support, and safeguarding are likely to attract close attention from auditors and the Commission alike.

The Six Elements Every Corrective Action Plan Must Include

While the NDIS Commission does not publish a single mandated template, auditors and the Commission consistently look for the following elements when reviewing a corrective action plan:

Clear description of the non-conformance: State exactly which Practice Standard, module, or regulatory requirement was not met. Reference the specific clause. Avoid vague language such as "we need to improve our documentation."
Root cause analysis: Identify why the non-conformance occurred, not merely what happened. Common root causes include gaps in staff training, inadequate policies, insufficient supervision structures, or a failure to implement an existing policy in practice. The root cause must be genuinely analysed — auditors can tell when a provider has skipped this step.
Corrective actions to be taken: List the specific steps the organisation will take to address both the immediate gap and the root cause. Each action should be concrete and verifiable — for example, "Update the medication administration policy to include double-sign-off for Schedule 8 medications" rather than "review medication policy."
Accountable person for each action: Name the role or individual responsible. Corrective actions with no clear owner are a red flag for auditors.
Implementation timeframes: Assign a realistic target date to each action. Where an action is complex, break it into milestones with interim dates. Timeframes must be achievable but not so open-ended that they suggest the provider is not treating the matter seriously.
Evidence of completion and effectiveness review: Describe what evidence will be collected to demonstrate each action is complete (for example, updated policy signed off by the Responsible Person, training records, staff sign-offs) and how the organisation will verify that the corrective action has actually resolved the issue — not merely been completed on paper.

Step-by-Step Process for Writing a Corrective Action Plan

Receive and acknowledge the non-conformance: When notified of a non-conformance by an auditor or the Commission, confirm receipt in writing promptly. Note the deadline for submitting your CAP.
Convene the right people: Include your Responsible Person, the relevant service manager, and any specialist (for example, your behaviour support practitioner or medication management lead) who can speak to the practice area involved.
Conduct a root cause analysis: Use a structured technique such as the "5 Whys" or a fishbone diagram. Document the analysis — do not just note the conclusion. Auditors may request to see the working.
Draft the corrective actions: For each root cause, specify at least one corrective action. Distinguish between immediate containment actions (what you will do now to protect participants) and systemic actions (what you will do to stop recurrence).
Assign accountability and timeframes: Use a table format so accountability and dates are clearly visible. See the example below.
Identify evidence of completion: For each action, specify what documentation or observable evidence will confirm it is done.
Submit and follow up: Submit the CAP within the required timeframe. Track actions through to completion and retain evidence. If your auditor or the Commission requests a follow-up review, your evidence file must be ready.
Close out and record in your continuous improvement register: Once all actions are verified complete, record the outcome in your continuous improvement log. This demonstrates to future auditors that your system works end-to-end.

Example Corrective Action Plan Table

Non-conformance	Root cause	Corrective action	Responsible	Target date	Evidence of completion
Medication administration records incomplete for 3 of 8 participants reviewed — Practice Standards Core Module 2.3	Staff not aware that all PRN administrations require a separate record entry; training last conducted over 18 months ago	1. Issue immediate practice alert to all support workers 2. Update medication policy to explicitly require PRN entry 3. Conduct mandatory refresher training for all staff who administer medication	1. Service Manager 2. Responsible Person 3. Training Coordinator	1. Within 5 business days 2. Within 3 weeks 3. Within 6 weeks	1. Signed practice alert receipt list 2. Updated policy, version-controlled 3. Training attendance records + competency sign-offs

Common Mistakes SIL Providers Make With Corrective Action Plans

Treating the CAP as a tick-box exercise: A CAP that lists actions without evidence of follow-through will not satisfy an auditor on re-audit or a Commission compliance check. Effectiveness review is mandatory.
Describing symptoms, not root causes: "Staff did not follow procedure" is a symptom. The root cause might be that the procedure was unclear, never explained in training, or inaccessible in a busy shift environment.
No accountability assigned: Actions with "management" as the owner are frequently incomplete. Name a specific role.
Unrealistic timeframes: Promising a full policy review and staff retraining within five business days is not credible. Auditors prefer honest, achievable timelines with staged milestones.
Failing to close the loop: Many providers complete the actions but never verify effectiveness or record the outcome in their continuous improvement register. This is a systemic weakness that will recur.
Confusing corrective action with preventive action: Corrective action addresses a known non-conformance. Preventive action addresses a risk before it becomes a non-conformance. Both have a place in a mature quality system, but they are not the same thing.

How the 2026 Strengthened Framework Changes the Stakes

The strengthened NDIS Practice Standards and the revised audit framework introduced for 2026 place greater weight on providers demonstrating a genuine quality culture — not just having policies on paper. Auditors are now expected to assess whether corrective action processes are embedded in day-to-day operations, whether frontline staff are aware of and involved in improvement processes, and whether the organisation can evidence learning from past non-conformances.

For SIL providers in particular, where participants live in provider-operated settings and may have complex support needs, a weak corrective action system can be treated as evidence of a broader safeguarding risk. In serious cases, the NDIS Commission has the power to impose conditions on registration, suspend registration, or impose civil penalties.

Providers who are preparing documentation for their 2026 audit cycle — or who are responding to a current non-conformance — may find it useful to review the 74-document audit-ready SIL compliance kit available through ndiscompliant.com.au, which includes a corrective action plan template aligned to the current Practice Standards.

Maintaining Your Corrective Action System Year-Round

The best corrective action plans are not written in a rush after an audit. They are the output of a continuous improvement system that is operating throughout the year. Practical steps to embed this include scheduling quarterly internal audits against the Practice Standards, maintaining a live improvement register that frontline managers can update, and reviewing your CAP history at each management meeting to confirm actions remain on track.

When the NDIS Commission or your auditor sees a provider with a well-maintained improvement register and a track record of completed corrective actions, it signals organisational maturity — and reduces the likelihood of adverse regulatory outcomes.

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.