What Auditors Are Actually Looking For
Specialist Support Coordination (SSC) sits within the NDIS Practice Standards under the Support Coordination module. When an approved quality auditor reviews your service, they are not simply checking that paperwork exists — they are verifying that your documentation demonstrates real, measurable outcomes for participants with complex support needs.
Under the strengthened NDIS Practice Standards framework taking effect in 2026, auditors place heightened emphasis on evidence that workers have the skills, oversight, and systems to address complexity and crisis. Generic or undated records will not satisfy an auditor at renewal or initial registration.
This checklist is structured around the four domains auditors consistently assess for SSC providers.
Domain 1: Workforce Competency and Supervision
Specialist Support Coordination carries its own workforce requirements that go beyond general support work. Auditors will request evidence that every person delivering SSC has the qualifications and oversight to manage high-complexity cases.
- Certified copies of qualifications for each SSC worker (typically a relevant tertiary qualification in social work, allied health, or disability — check current Commission guidance for accepted disciplines)
- Induction records confirming workers completed NDIS Practice Standards orientation before commencing with participants
- NDIS Worker Screening clearance certificates, current and on file
- Signed Code of Conduct acknowledgements for all workers and contractors delivering SSC
- Supervision records: frequency, format (individual or group), and topics covered — auditors look for evidence that complex cases are regularly discussed
- Professional development log for each SSC worker, covering crisis response, mental health, and trauma-informed practice where relevant to participant cohort
Domain 2: Participant Plans, Goals, and Consent
The Practice Standards require that SSC is delivered in a way that is genuinely participant-led. Auditors sample participant files — typically a random selection — and check whether documentation reflects individualised, consent-based coordination rather than a one-size approach.
- Signed consent forms for sharing information with other services, updated whenever the participant's circumstances or support network change
- A current support coordination plan for each participant, linked explicitly to their NDIS plan goals and funding categories
- Evidence of participant involvement in developing the plan (meeting notes, signed summary, or email confirmation where the participant prefers written communication)
- Identification of informal, community, and mainstream supports alongside funded NDIS supports — auditors check that SSC workers are building capacity, not creating dependency
- Progress notes that reference specific plan goals, not just activities completed. Notes should be dated, signed, and reflect the participant's voice
- Evidence of plan review preparation, including reports submitted to NDIA before scheduled reviews
Domain 3: Risk, Crisis, and Complex Needs Management
This is the domain where SSC providers are most commonly cited for non-conformance. Because SSC participants often have complex or overlapping support needs — including psychosocial disability, challenging behaviour, or involvement with multiple government systems — auditors expect robust, individualised risk documentation.
- An individualised risk assessment for each participant, reviewed at agreed intervals and after any significant incident or life change
- A crisis support plan that names specific contacts, escalation pathways, and the participant's known triggers and de-escalation strategies
- Documented liaison with mental health, justice, housing, or child safety systems where relevant — including who was contacted, when, and the outcome
- Records of any Behaviour Support Plans (BSPs) reviewed by the SSC worker, and evidence of liaison with a registered Behaviour Support Practitioner where restrictive practices are in use
- Evidence that SSC workers have reported suspected or actual restrictive practice non-compliance to the NDIS Commission where required
- Safeguarding escalation records: documentation of decisions made when a participant's safety was at risk, including who was notified and by what date
Domain 4: Incident Management and Complaints
Under the NDIS (Incident Management and Reportable Incidents) Rules, registered providers must have a documented incident management system. Auditors check the system itself and then sample actual incident records to confirm the system is functioning, not just on paper.
| Evidence item | What auditors check |
|---|---|
| Incident management policy | Defines reportable incidents, internal timelines, and NDIS Commission notification obligations |
| Incident register | All incidents recorded with date, description, immediate response, and review outcome |
| Reportable incident notifications | Evidence of notifications submitted to the Commission within required timeframes |
| Post-incident review records | Root cause documented, corrective actions assigned to a named person with a due date |
| Complaints management policy | Accessible to participants, includes external escalation options (NDIS Commission, Ombudsman) |
| Complaints register | Complaints logged, acknowledged within policy timeframe, outcome recorded |
Common Non-Conformances in SSC Audits
Based on the NDIS Commission's public guidance and audit intelligence shared via provider forums, these are the areas most likely to generate a non-conformance finding for SSC providers:
- Generic progress notes — notes that describe tasks completed but do not link back to the participant's goals or demonstrate coordination outcomes.
- Outdated consent records — consent signed at intake but never refreshed when the participant's situation changed significantly.
- Missing or superficial supervision records — a log that shows dates but no content leaves auditors unable to confirm that complex cases are being properly overseen.
- Risk assessments not reviewed after incidents — a risk document from intake that has not been updated despite the participant experiencing a crisis or change in circumstances.
- No evidence of capacity-building intent — SSC should be reducing the need for coordination over time where possible; if every progress note looks the same month after month, auditors question whether the service is genuinely building the participant's independence and natural supports.
- Restrictive practice gaps — SSC workers who are aware of an unauthorised restrictive practice but have no documented escalation steps, or who have not liaised with the relevant Behaviour Support Practitioner.
A Practical Preparation Step List
- Pull a random sample of five to eight participant files and review them against the Domain 2 checklist above before your audit date.
- Confirm that every active worker has a current NDIS Worker Screening clearance recorded in your HR system.
- Review your incident register for the past twelve months: verify that every reportable incident was notified to the Commission and has a completed post-incident review.
- Check supervision records for each SSC worker — dates, topics, and sign-off by the supervisor must all be present.
- Walk through your crisis plans for your three most complex participants and confirm they reflect current contacts, current risks, and current de-escalation strategies.
- Confirm that your complaints policy names the NDIS Commission and the Commonwealth Ombudsman as external escalation options and is accessible in plain language.
- Prepare a one-page summary of your organisation's SSC service model — auditors often begin with a verbal walkthrough and this summary helps set the context for your evidence.
Using a Pre-Built Evidence Kit
If you are building your SSC evidence pack from scratch or have identified gaps during an internal audit, the 74-document audit-ready SIL compliance kit at ndiscompliant.com.au includes templates for support coordination plans, risk assessments, crisis plans, incident registers, supervision logs, and consent forms — all pre-structured to align with the NDIS Practice Standards modules reviewed during audit.
The strengthened 2026 framework places greater weight on evidence quality over volume. A concise, well-structured file reviewed against the checklist above will serve you better than a large binder of generic paperwork.
Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.