NDIS Mid-Term Audit: What to Expect and How to Prepare

What Is the NDIS Mid-Term Audit?

The NDIS mid-term audit — formally called a surveillance audit — is a scheduled quality check that occurs partway through your 3-year NDIS registration period. It is a requirement of the certification process, mandated under the National Disability Insurance Scheme (Provider Registration and Practice Standards) Rules 2018.

The purpose of the surveillance audit is to verify that you are maintaining compliance with the NDIS Practice Standards — not just at the point of initial certification, but on an ongoing basis. Think of it as a health check for your compliance systems.

Unlike the initial certification audit, which assesses every relevant Practice Standard outcome, the mid-term audit is a sample-based assessment. The auditor selects a subset of outcomes to assess, with particular focus on areas of higher risk and any issues identified during the initial audit.

When Does the Mid-Term Audit Happen?

The mid-term surveillance audit typically occurs around the 18-month mark of your 3-year registration period. However, the exact timing can vary:

Your Approved Quality Auditor will typically contact you 4 to 8 weeks before the planned surveillance audit to schedule dates and provide you with information about the scope and what documentation to prepare.

Planning Ahead

If you registered as an NDIS provider in mid-2026 (to meet the 1 July 2026 SIL deadline), your mid-term audit will likely occur in late 2027 or early 2028. This means you should be building your evidence base from the moment you receive your registration — not waiting until the auditor calls.

How the Mid-Term Audit Differs from the Initial Certification Audit

The mid-term surveillance audit is fundamentally different from the initial certification audit in several important ways.

For a detailed comparison of all NDIS audit types, see our guide on NDIS Desktop Audit vs On-Site Audit.

What Auditors Focus on During the Mid-Term Audit

While the initial certification audit asks "do you have the right systems?", the mid-term audit asks "are you using them?" The auditor's focus areas typically include:

1. Resolution of Previous Non-Conformances

If your initial certification audit identified any non-conformances — minor or major — the mid-term auditor will verify that corrective actions have been implemented and sustained. This is often the single highest priority for the surveillance auditor.

They will want to see:

• Evidence that the root cause was addressed (not just the symptom)
• Documentation of corrective actions taken
• Evidence that the fix has been sustained over time (not a one-off effort just before the audit)
• Updated policies or procedures if the non-conformance related to documentation gaps

2. Changes Since Initial Certification

The auditor will examine any significant changes to your organisation since the initial audit. This includes:

• New service locations or closure of existing locations
• Changes in key personnel (directors, managers, compliance officers)
• New registration groups added to your scope
• Significant growth or reduction in participant numbers or staff
• Changes to your service model (e.g., shifting from group to individual supports)
• Organisational restructures or changes to governance arrangements

3. Continuous Improvement Evidence

The NDIS Practice Standards (Core Module, Outcome 2.3) require providers to demonstrate a commitment to continuous improvement. At the mid-term audit, this becomes a critical focus area because you now have 18 months of operations to draw evidence from.

The auditor expects to see:

• A populated continuous improvement register with entries spanning the registration period
• Evidence that incidents, complaints, and feedback have led to systemic changes
• Internal audit reports (at least one completed internal audit cycle)
• Updated policies reflecting lessons learned or regulatory changes
• Staff training records showing ongoing professional development
• Participant satisfaction data (surveys, feedback forms, interviews)

4. High-Risk Compliance Areas

Regardless of what was covered in the initial audit, the mid-term auditor will typically sample from high-risk areas including:

• Incident management: Are incidents being recorded, reported, and reviewed? Is the reportable incidents framework being followed?
• Worker screening: Are all staff current with their NDIS Worker Screening Checks? What about new starters since the initial audit?
• Restrictive practices: If applicable, are restrictive practices being authorised, reported, and reviewed in accordance with state/territory requirements?
• Complaints management: Are complaints being received, recorded, investigated, and resolved?

5. Participant Experience

The auditor may interview participants (or their representatives) to verify that supports are being delivered in a person-centred manner. They may ask about:

• Whether participants feel they have choice and control over their supports
• Whether they know how to make a complaint
• Whether their support plans are reviewed regularly
• Whether they feel safe and respected

Preparation Timeline: 6 Months Before Your Mid-Term Audit

While ongoing compliance should be a daily practice, a structured preparation timeline helps you identify and address gaps before the auditor arrives.

6 Months Before

• Confirm your expected mid-term audit date with your AQA
• Review your initial audit report and note all non-conformances and observations
• Conduct a self-assessment against the Practice Standard outcomes your initial audit covered
• Check that all policies and procedures are within their scheduled review dates

3 Months Before

• Complete an internal audit cycle covering key risk areas
• Verify all worker screening checks are current (check expiry dates)
• Review and update your continuous improvement register
• Ensure all incident reports are complete and include root cause analysis and follow-up actions
• Update your organisational chart if there have been personnel changes

1 Month Before

• Organise your evidence folders (electronic or physical) so documents can be located quickly during the audit
• Brief staff on the upcoming audit — remind them of key policies and procedures
• Review participant files for completeness (consent forms, support plans, progress notes)
• Prepare a summary document for the auditor showing changes since the initial audit and continuous improvement activities

1 Week Before

• Confirm logistics with the auditor (dates, times, locations, who will be available for interviews)
• Ensure management and key staff are available on audit day(s)
• Do a final spot-check of high-risk areas: incident register, worker screening register, complaints register

Document Review and Evidence Checklist

Use this checklist to verify your documentation is ready for the mid-term surveillance audit. Each item should have evidence spanning the period since your initial certification.

Governance and Management

• Current organisational chart reflecting actual structure
• Board/management meeting minutes demonstrating oversight of compliance
• Updated risk register with new risks identified since initial audit
• Current strategic or operational plan (if applicable)

Human Resources

• Worker screening register — all staff current, no expired checks
• Training register showing ongoing staff training and professional development
• Supervision records for all direct support staff
• Completed performance reviews (if due during the period)
• Induction records for all new staff hired since initial audit

Incident and Risk Management

• Incident register with all incidents recorded, classified, and followed up
• Evidence of reportable incidents notified to the NDIS Commission within 24 hours
• Root cause analysis and corrective actions for significant incidents
• Updated risk assessments reflecting current risks

Quality and Continuous Improvement

• Continuous improvement register with entries from across the registration period
• At least one completed internal audit report
• Complaints register showing complaints received, investigated, and resolved
• Participant feedback data (surveys, formal feedback, informal feedback records)
• Evidence that feedback and complaints have led to changes in practice

Participant Records

• Support plans reviewed and updated within the required timeframe
• Progress notes demonstrating ongoing goal-linked support delivery
• Current consent forms for all participants
• Evidence of participant involvement in support planning decisions

Need help writing compliant progress notes? Our free NDIS Notes Rewriter converts rough shift notes into audit-ready documentation in seconds.

Common Mid-Term Audit Findings and How to Avoid Them

Based on auditor feedback and provider experience, these are the most frequently encountered issues at mid-term surveillance audits.

1. Previous Non-Conformances Not Fully Resolved

The problem: The provider addressed the immediate issue after the initial audit but did not implement systemic changes to prevent recurrence. The auditor finds the same type of problem recurring.

How to avoid it: When addressing non-conformances from your initial audit, focus on root cause analysis and systemic fixes rather than quick patches. Document what you changed and monitor whether the change is effective over time. For detailed guidance, see our Corrective Action Plan guide.

2. Continuous Improvement Register Is Empty or Sparse

The problem: The provider created a continuous improvement register for the initial audit but has not added any entries since. The register is essentially blank for the past 18 months.

How to avoid it: Schedule a monthly or quarterly review where you add entries to the continuous improvement register. Sources for entries include incident trends, complaint themes, staff feedback, participant feedback, internal audit findings, and regulatory changes.

3. New Staff Not Properly Inducted or Screened

The problem: Staff hired after the initial audit do not have complete induction records, have not signed code of conduct acknowledgements, or have gaps in their NDIS Worker Screening Check documentation.

How to avoid it: Use a standardised induction checklist for every new starter. Verify worker screening before the first day of supported work. Maintain a central register that flags upcoming screening expiry dates.

4. Policies Not Updated After Changes

The problem: The organisation's circumstances have changed (new location, new services, new management) but policies still reflect the old structure. Document control registers show no policy reviews since the initial audit.

How to avoid it: Set policy review dates that fall within your registration period. When significant changes occur, trigger an immediate policy review. Update the document control register every time a policy is reviewed or revised.

5. Incident Reports Lacking Follow-Up

The problem: Incidents are being recorded, but there is no evidence of investigation, root cause analysis, or corrective actions. The incident register is a log of events with no evidence of learning.

How to avoid it: For every incident, require a follow-up section that documents what was investigated, what was found, and what was changed. Even for minor incidents, a brief note explaining the follow-up demonstrates a culture of continuous improvement.

Summary

The NDIS mid-term surveillance audit is not something to fear — it is a predictable, manageable quality check that verifies your ongoing compliance. The key to success is treating compliance as an everyday operational practice rather than an audit-day performance.

Providers who maintain their registers, update their policies, and build genuine evidence of continuous improvement throughout their registration period consistently perform well at mid-term audits. Those who neglect their compliance systems between audits risk non-conformances, conditions on registration, and — ultimately — a more difficult renewal audit at the end of the 3-year cycle.

Start building your evidence base from day one, and the mid-term audit becomes a straightforward confirmation of the good work you are already doing.