NDIS What Auditors Check (2026): A Complete Guide for SIL Providers

What NDIS Auditors Are Actually Looking For in 2026

With Australia's strengthened NDIS registration framework taking effect, approved quality auditors are applying a more rigorous lens to Supported Independent Living providers than in previous audit cycles. Knowing what auditors check — and where providers typically stumble — is the difference between a clean audit outcome and a corrective action plan that consumes months of management time.

This guide covers each domain that an approved quality auditor will examine during a certification or verification audit, the evidence they expect to see, and the most common non-conformances observed in SIL settings.

The Audit Framework: NDIS Practice Standards and the Code of Conduct

All registered NDIS providers must comply with the NDIS Practice Standards, which sit underneath the National Disability Insurance Scheme Act 2013 and the NDIS (Provider Registration and Practice Standards) Rules 2018. The NDIS Commission administers these standards and sets audit requirements based on provider registration groups.

SIL providers — classified under Registration Group 0115 (Supported Independent Living) — must undergo certification audits against the full Core module plus the High Intensity Supports and Implementing Supports modules of the Practice Standards. This is the most comprehensive audit pathway.

Auditors are independent bodies approved by the NDIS Commission. They do not work for the Commission but must follow the Commission's audit scope, and their findings can trigger regulatory action, conditions on registration, or suspension.

The Eight Core Areas Auditors Examine

1. Rights and Responsibilities

Auditors confirm that your organisation actively upholds participant rights as defined in the NDIS Act. They look for:

• A current, accessible rights and responsibilities policy that staff can describe accurately
• Evidence that participants have been informed of their rights in a format they understand (Easy Read, translated documents, verbal explanation with a record)
• Signed consent records that are genuinely informed — not boilerplate forms participants were handed without explanation
• Records showing participants were told about the NDIS Commission and how to make a complaint externally

2. Governance and Operational Management

This is an area where many SIL providers receive non-conformances. Auditors examine:

• Board or senior management oversight of quality and safety risks
• A risk management framework with documented risk registers that are actively reviewed (not created once and shelved)
• Financial management controls proportionate to the size of the organisation
• Whether the provider has identified and is managing conflicts of interest, especially where a provider controls both housing and support for the same participant
• Business continuity and emergency management plans

3. Provision of Supports

For SIL, auditors go well beyond checking whether support plans exist. They assess:

• Whether each participant has an individual support plan co-developed with them and reviewed at regular intervals
• Evidence of goal-setting that reflects the participant's own goals, not generic organisational goals
• That rosters and shift arrangements can actually deliver the support hours and type specified in each participant's NDIS plan
• How the provider responds when a participant's needs change
• Transition planning for people moving into or out of SIL arrangements

4. Support Planning and Delivery

Auditors will request a sample of participant files and trace the chain from assessment through to daily support records. They check:

1. Intake and needs assessment documentation
2. Individual support plans and their review dates
3. Progress notes or shift records — are they specific and linked to goals, or generic and copy-pasted?
4. Evidence that allied health recommendations (OT, behaviour support practitioners) are being actioned in day-to-day support
5. Medication management records, where relevant, cross-checked against current prescriptions

5. Incident Management

The NDIS Commission's incident management requirements are a common source of audit findings. Auditors verify:

• A documented incident management system that meets the NDIS (Incident Management and Reportable Incidents) Rules 2018
• That all reportable incidents have been notified to the NDIS Commission within the required timeframes (24 hours for immediate notifications; 5 business days for follow-up reports)
• Post-incident analysis: does the provider identify root causes and implement systemic changes, or is each incident treated as isolated?
• Staff understanding of what constitutes a reportable incident versus an internal incident
• Evidence that participants and families are informed of incidents that affect them

6. Complaints Management

Providers must have an accessible, documented complaints process. Auditors check:

• Whether the complaints policy is written in plain language and provided to participants at intake and annually
• A complaints register with dates, actions taken, and outcomes recorded
• That complaints are resolved within reasonable timeframes and outcomes communicated back to the complainant
• That staff are not discouraged from supporting participants to make complaints — including complaints about the provider itself

7. Restrictive Practices

This is one of the highest-risk areas for SIL providers. Under the NDIS framework, any regulated restrictive practice must be authorised under the relevant state or territory legislation AND reported to the NDIS Commission. Auditors will:

• Request the provider's restrictive practices register
• Check that a behaviour support plan from a registered behaviour support practitioner is in place before any regulated restrictive practice is used
• Verify that authorisation has been obtained under the applicable state/territory mechanism
• Examine reporting records to the NDIS Commission for every use of a regulated restrictive practice
• Look for evidence that reduction plans are actively pursued — restrictive practices are meant to decrease over time, not become permanent

Providers who cannot produce behaviour support plans, who lack state authorisation, or whose reporting is incomplete face serious regulatory consequences, including conditions on registration or referral for investigation.

8. Workforce Capability and Screening

Auditors confirm that everyone delivering NDIS supports has:

• A valid NDIS Worker Screening clearance (or an acceptable equivalent transitional check where applicable)
• Completed NDIS Worker Orientation Module training
• The skills, qualifications, and experience appropriate to the supports they deliver — especially for high-intensity daily activities
• Received regular supervision and performance feedback documented in personnel files

Common Non-Conformances in SIL Audits

How to Prepare: A Step-by-Step Audit Readiness Checklist

1. Map your registration groups to the relevant Practice Standards modules and confirm which audit type applies.
2. Conduct a self-assessment against each Practice Standard outcome, rating evidence as strong, partial, or absent.
3. Sample your own participant files — at least five — as if you were the auditor. Look for gaps in consent, planning, progress notes, and incident records.
4. Audit your restrictive practices register against actual support records. Every use must be documented and reported.
5. Pull your workforce screening register and verify every current worker and volunteer has a valid clearance.
6. Review your complaints and incident registers for completeness and timeliness of responses.
7. Test staff knowledge: can frontline workers explain what a reportable incident is, what to do within 24 hours, and how a participant makes a complaint?
8. Check policy review dates and update any that are overdue.

Providers who want a comprehensive starting point will find that ndiscompliant.com.au's 74-document audit-ready SIL compliance kit covers every one of these areas with pre-built policies, registers, and templates aligned to the current Practice Standards — which can significantly cut preparation time.

What Happens After the Audit

If auditors identify non-conformances, the provider receives a corrective action report with timeframes to resolve each issue. Minor non-conformances typically allow a rectification period before the audit outcome is finalised. Major non-conformances — particularly those involving participant safety, unreported incidents, or unlawful restrictive practices — can result in conditions being placed on registration or referral to the NDIS Commission's investigation and compliance team.

A clean audit, by contrast, supports a full registration renewal and demonstrates to participants, families, and the Commission that your organisation takes the Practice Standards seriously.