What Auditors Are Actually Looking For

Specialist Support Coordination (SSC) sits within the NDIS Practice Standards under the Support Coordination module. When an approved quality auditor reviews your service, they are not simply checking that paperwork exists — they are verifying that your documentation demonstrates real, measurable outcomes for participants with complex support needs.

Under the strengthened NDIS Practice Standards framework taking effect in 2026, auditors place heightened emphasis on evidence that workers have the skills, oversight, and systems to address complexity and crisis. Generic or undated records will not satisfy an auditor at renewal or initial registration.

This checklist is structured around the four domains auditors consistently assess for SSC providers.

Domain 1: Workforce Competency and Supervision

Specialist Support Coordination carries its own workforce requirements that go beyond general support work. Auditors will request evidence that every person delivering SSC has the qualifications and oversight to manage high-complexity cases.

Domain 2: Participant Plans, Goals, and Consent

The Practice Standards require that SSC is delivered in a way that is genuinely participant-led. Auditors sample participant files — typically a random selection — and check whether documentation reflects individualised, consent-based coordination rather than a one-size approach.

Domain 3: Risk, Crisis, and Complex Needs Management

This is the domain where SSC providers are most commonly cited for non-conformance. Because SSC participants often have complex or overlapping support needs — including psychosocial disability, challenging behaviour, or involvement with multiple government systems — auditors expect robust, individualised risk documentation.

Domain 4: Incident Management and Complaints

Under the NDIS (Incident Management and Reportable Incidents) Rules, registered providers must have a documented incident management system. Auditors check the system itself and then sample actual incident records to confirm the system is functioning, not just on paper.

Evidence item What auditors check
Incident management policy Defines reportable incidents, internal timelines, and NDIS Commission notification obligations
Incident register All incidents recorded with date, description, immediate response, and review outcome
Reportable incident notifications Evidence of notifications submitted to the Commission within required timeframes
Post-incident review records Root cause documented, corrective actions assigned to a named person with a due date
Complaints management policy Accessible to participants, includes external escalation options (NDIS Commission, Ombudsman)
Complaints register Complaints logged, acknowledged within policy timeframe, outcome recorded

Common Non-Conformances in SSC Audits

Based on the NDIS Commission's public guidance and audit intelligence shared via provider forums, these are the areas most likely to generate a non-conformance finding for SSC providers:

  1. Generic progress notes — notes that describe tasks completed but do not link back to the participant's goals or demonstrate coordination outcomes.
  2. Outdated consent records — consent signed at intake but never refreshed when the participant's situation changed significantly.
  3. Missing or superficial supervision records — a log that shows dates but no content leaves auditors unable to confirm that complex cases are being properly overseen.
  4. Risk assessments not reviewed after incidents — a risk document from intake that has not been updated despite the participant experiencing a crisis or change in circumstances.
  5. No evidence of capacity-building intent — SSC should be reducing the need for coordination over time where possible; if every progress note looks the same month after month, auditors question whether the service is genuinely building the participant's independence and natural supports.
  6. Restrictive practice gaps — SSC workers who are aware of an unauthorised restrictive practice but have no documented escalation steps, or who have not liaised with the relevant Behaviour Support Practitioner.

A Practical Preparation Step List

  1. Pull a random sample of five to eight participant files and review them against the Domain 2 checklist above before your audit date.
  2. Confirm that every active worker has a current NDIS Worker Screening clearance recorded in your HR system.
  3. Review your incident register for the past twelve months: verify that every reportable incident was notified to the Commission and has a completed post-incident review.
  4. Check supervision records for each SSC worker — dates, topics, and sign-off by the supervisor must all be present.
  5. Walk through your crisis plans for your three most complex participants and confirm they reflect current contacts, current risks, and current de-escalation strategies.
  6. Confirm that your complaints policy names the NDIS Commission and the Commonwealth Ombudsman as external escalation options and is accessible in plain language.
  7. Prepare a one-page summary of your organisation's SSC service model — auditors often begin with a verbal walkthrough and this summary helps set the context for your evidence.

Using a Pre-Built Evidence Kit

If you are building your SSC evidence pack from scratch or have identified gaps during an internal audit, the 74-document audit-ready SIL compliance kit at ndiscompliant.com.au includes templates for support coordination plans, risk assessments, crisis plans, incident registers, supervision logs, and consent forms — all pre-structured to align with the NDIS Practice Standards modules reviewed during audit.

The strengthened 2026 framework places greater weight on evidence quality over volume. A concise, well-structured file reviewed against the checklist above will serve you better than a large binder of generic paperwork.

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.