Why emergency and disaster management is a priority audit area
Emergency and disaster preparedness sits at the intersection of participant safety and provider accountability. For NDIS Commission auditors, it is not a box-ticking exercise — it is a direct test of whether a Supported Independent Living (SIL) provider can keep vulnerable people safe when things go wrong. Fires, floods, medical emergencies, power outages, and pandemic scenarios have all exposed the gap between providers with genuine plans and those holding documents that have never been opened, let alone tested.
Under the NDIS Practice Standards, registered providers are required to maintain systems that protect participants from harm — and emergency management is one of the most visible, auditable expressions of that duty. With the strengthened framework taking effect across 2025 and 2026, auditors are applying sharper scrutiny to whether plans are real, individualised, and operationally embedded.
The exact regulatory framework auditors use
Auditors assess emergency and disaster management plans against several overlapping obligations:
- NDIS Practice Standards — Core Module, Quality Indicator 1.6 (Emergency and Disaster Management): Requires providers to have documented, reviewed, and tested emergency procedures that address the specific needs of each participant.
- NDIS Practice Standards — Module 2 (Specialist Supports including SIL): Imposes heightened requirements around risk management, individualised planning, and continuity of supports for participants with complex needs.
- NDIS Code of Conduct: Workers must act with care and skill and take all reasonable steps to prevent harm — this includes knowing and being able to execute emergency procedures.
- NDIS (Incident Management and Reportable Incidents) Rules 2018: Certain emergency-related events (e.g., participant death, serious injury, unauthorised use of restrictive practices during an emergency) are reportable incidents requiring notification to the NDIS Commission.
- Strengthened NDIS Practice Standards (2026 framework): Introduce outcome-focused indicators that require providers to demonstrate evidence of participant involvement in emergency planning, not just the existence of a written plan.
What auditors actually check: the eight key focus areas
An approved quality auditor reviewing your emergency and disaster management plan will typically look for evidence across these eight areas:
1. Documentation exists and is current
Auditors expect a written emergency management plan at both the organisational level and — critically — at the individual participant level. Plans must be dated, version-controlled, and reviewed at a defined interval (commonly annually or following any incident, staff change, or participant support needs change). A plan last reviewed more than 12 months ago, with no evidence of review, is a common non-conformance.
2. Individualisation for each participant
Generic "one size fits all" plans are the most frequently cited finding. Auditors check that each participant's emergency plan reflects their specific disability, communication needs, mobility requirements, medical conditions, medication dependencies, and any assistive technology they rely on (such as power-dependent equipment). For SIL providers, this means each dwelling must have individual evacuation profiles for each resident.
3. Participant involvement in plan development
Under the strengthened framework, auditors look for documented evidence that participants (and their nominees or guardians where appropriate) have been involved in developing or reviewing their emergency plan. This is not merely a signature on a form — auditors may ask workers and participants directly whether they understand the plan and were consulted in its creation.
4. Evacuation procedures are specific and tested
Plans must include clearly defined evacuation routes, assembly points, and roles for each staff member on shift. More importantly, auditors look for records of drills — including the date, who participated, how the drill was conducted, any issues identified, and corrective actions taken. Drills that only happen on paper, or where records cannot be produced, are a red flag.
5. Communication protocols
Who calls emergency services? Who notifies the participant's family, support coordinator, and the NDIS Commission (if a reportable incident occurs)? Auditors check that communication trees are documented, up to date (correct phone numbers, listed contacts), and that workers can articulate their role without referring to the document. Plans should also include a backup communication method in case standard communications infrastructure fails.
6. Continuity of critical supports
For SIL participants, loss of support can itself be a catastrophic outcome. Auditors examine whether the plan addresses how essential supports will continue if the usual SIL dwelling is inaccessible, if a significant portion of the workforce is unavailable, or if power or utilities are disrupted. This includes medication management, continence care, feeding supports, and any restrictive practices that must be maintained safely.
7. Staff training and competency evidence
Written plans mean little if workers cannot execute them. Auditors review training records to confirm all relevant staff have completed emergency procedure training, and will often conduct file checks alongside worker interviews. Where records show training happened but the worker cannot describe their role in an emergency, this creates doubt about the quality of the training and the reliability of the plan.
8. Post-incident review and continuous improvement
Providers are expected to treat real emergency events and drill outcomes as learning opportunities. Auditors look for evidence that findings from incidents or exercises have been fed back into plan updates. A plan that has never changed despite multiple drills and one actual emergency event will attract scrutiny.
Common non-conformances: what triggers a finding
| Non-conformance | What the auditor sees | Corrective action |
|---|---|---|
| Generic organisational plan only — no individual participant plans | No participant-specific evacuation or support profiles | Create an individual emergency plan for each participant linked to their support plan |
| Plan not reviewed within required timeframe | Last review date over 12 months ago, no evidence of interim review | Implement a calendar reminder system; document every review even if no changes are made |
| No drill records | Provider claims drills happen but cannot produce dated records | Create a drill register; photograph or countersign drill attendance |
| Participant not consulted | Plan has no participant signature or consultation note | Document all consultation; use easy-read or translated formats where needed |
| Communication tree is outdated | Phone numbers for family or on-call managers are incorrect | Assign a staff member to verify contact details quarterly |
| No continuity-of-support plan for dwelling inaccessibility | Plan addresses fire only; no provision for flood, extended power outage, or staffing crisis | Expand scope to cover multiple hazard scenarios relevant to the dwelling's location |
A practical step-by-step approach for SIL providers
- Audit your current documents. List every SIL dwelling. Confirm each has an organisational plan and individual participant plans. Note review dates and gaps.
- Conduct a hazard assessment per site. Consider the specific risks relevant to each location — bushfire zones, flood plains, proximity to industrial areas, building age and egress constraints.
- Build or update individual participant emergency profiles. For each resident, document: evacuation assistance required, medication in an emergency, communication method, emergency contacts, power-dependent equipment, and any behaviour support considerations during high-stress events.
- Involve participants and their support networks. Meet with each participant (and nominee/guardian where relevant) to review the plan. Record the date, attendees, and any decisions made. Use accessible formats.
- Assign roles in writing. Every position on shift must have a named emergency role. Include deputies for when key people are absent.
- Schedule and run drills — record everything. Aim for at least two drills per year per dwelling, varying time of day and scenario. Document outcomes and corrective actions.
- Review after every incident or near miss. Even minor events (a power outage handled without incident) are a free rehearsal — capture learnings formally.
- Set a recurring review date. Annual review at minimum; immediately upon any change in a participant's support needs, staff structure, or dwelling layout.
Template excerpt: individual participant emergency plan
The following illustrates the type of content auditors expect to see at the individual level (this is a structural guide, not a legally complete document):
INDIVIDUAL EMERGENCY PLAN — [Participant Name] | [Dwelling Address] Review date: [DD/MM/YYYY] | Next review due: [DD/MM/YYYY] Reviewed with participant: Yes / No | Reviewed with nominee: [Name] EVACUATION ASSISTANCE REQUIRED: [e.g., requires two-person assist to transfer from bed to wheelchair before evacuation; manual wheelchair stored in bedroom 2] COMMUNICATION DURING EMERGENCY: [e.g., uses AAC device — backup = pointing board located in kitchen drawer] MEDICATIONS REQUIRED IN AN EMERGENCY: [e.g., daily Epilim — emergency supply kept in red bag in fridge; administer per medication protocol if seizure occurs during evacuation] POWER-DEPENDENT EQUIPMENT: [e.g., hospital-grade air mattress; backup pump available; notify equipment supplier if outage exceeds 4 hours] EMERGENCY CONTACTS (in order): 1. [Name, relationship, phone] 2. [Name, relationship, phone] 3. Support Coordinator: [Name, phone] ASSEMBLY POINT: [Location — e.g., front footpath near letterbox] ALTERNATE ACCOMMODATION: [e.g., arranged with sibling at [address] or backup SIL provider [name]]
Getting audit-ready: a note on documentation systems
Emergency management plans do not exist in isolation — auditors assess them alongside your incident management system, behaviour support procedures, risk register, and staff training records. Providers who maintain a coherent, cross-referenced document set consistently perform better in audits than those managing plans as standalone files.
The ndiscompliant.com.au 74-document audit-ready SIL compliance kit includes a pre-built emergency and disaster management plan template, individual participant emergency profile forms, a drill register, and staff training records — structured to align with the 2026 Practice Standards and ready for auditor review.
Regardless of the tools you use, the principle is the same: every claim in your plan must be verifiable through evidence, and every worker involved in delivering SIL must be able to act on it without hesitation.
Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.