Your SIL audit, demystified

Exactly what an approved quality auditor checks, the traps that catch good providers, and how to feel genuinely ready — long before the day arrives.

Here's the secret nobody tells you: an audit isn't a test you can fail by surprise. It's a structured walkthrough of a system you already run. Once you know precisely what they look at and why, the nerves fall away — and you can prepare for it like a checklist, not a mystery.

1First — what kind of audit is this?

A certification audit. Thorough, but completely predictable.

Because SIL involves people's homes and daily care, it's assessed by an independent Approved Quality Auditor (usually a two-person team) across two stages — a document review, then an on-site visit — against the NDIS Practice Standards and the new SIL standards. Predictable is your friend: everything below is exactly what they'll do, in the order they'll do it.

2Stage 1 — the desktop review

Off-site · your documents

They check that your system works on paper

Before anyone visits, the auditor reads your self-assessment, your policies and procedures, and your registers (risk, incidents, complaints, continuous improvement). They're confirming the framework can meet the standards, and flagging things to look at more closely on site.

What "ready" looks like: current, version-controlled policies (a version number, approval and review date on each), and registers that have real, dated entries — not blank templates.

3Stage 2 — the on-site day

On-site · the real test

They check that you actually do what your documents say

This is where certifications are won. The team spends the day confirming your paperwork is lived, not filed. Here's the play-by-play, so none of it is a surprise:

They interview you / management about governance, risk, incidents, complaints and how you improve. Talk in real examples, not policy quotes.
They interview your workers, one on one. Not to catch them out — to hear, in their own words, what they do when a participant refuses support or an incident happens.
They speak with participants (with consent — participants are invited and can opt out), in their preferred way, about whether they feel safe, heard and in control.
They observe the home — its safety, dignity and privacy, and how workers and residents interact.
They sample records — a few staff files, participant files, medication charts, incident and restrictive-practice records — and check they all line up.

4The one thing they're really checking

The "golden thread"

For a single participant, they trace one unbroken line end to end. If every link connects, you have a real system. If one breaks, it's a finding.

NDIS plan → service agreement → risk assessment → support plan (goals)
→ roster / delivered supports → progress notes → incidents & medication → outcomes

The fix is simple to say and powerful to do: for two participants, make sure every one of those documents agrees with the next. That consistency, across randomly picked files, is what tells an auditor your system is genuine.

5The traps that catch good providers

Policies that aren't lived

Navigate it: for each key policy, keep one real proof it ran (an induction sign-off, a supervision note, one completed record) — and have your team practise explaining it out loud.

Empty or "frozen" registers

Navigate it: a few genuine, dated entries beat a spotless empty one. One monthly team meeting whose notes feed your improvement log makes the whole system look alive — because it is.

Restrictive practices no one flagged

Navigate it: a locked pantry or fridge is a restrictive practice. Sweep every home before the auditor does, and get any you keep properly authorised and reported.

Incidents that never close the loop

Navigate it: every incident needs a response, an action and a close-out — and the serious ones reported on time (24 hours / 5 business days). The clock starts when any worker first knows.

Consent that's stale or blanket

Navigate it: keep consents specific, dated and current, and hold simple records that show the participant chose their supports and routines.

Tenancy and support tangled together

Navigate it: keep the tenancy agreement separate from the support agreement, so a participant can never lose their home over a support disagreement.

6How to feel confident before the day

Do these, and the audit becomes a walkthrough of a system you already run:

Book your auditor early — the whole sector is applying at once and calendars fill fast.
Run the restrictive-practice sweep first — it's the one that surprises people; handle it and the rest feels light.
Make your registers real for 60–90 days — small, genuine, dated entries.
Self-assess honestly against every standard (score yourself 0–3) and close anything that would be a "major."
Rehearse with your team — if they can explain incidents, complaints and restrictive practices in their own words, you're most of the way there.
Trace the golden thread for two participants until every document agrees.

You've got this.

Remember: the auditor wants you to pass — they're there to see a real, safe system, not to trip you up. You don't need to be perfect; you need no open "majors," and minors are normal and fixable. Thousands of small providers pass every year. Prepare calmly, practise it, and walk into the day already knowing how it goes.

General guidance to help you prepare — not legal advice. The SIL rules are being updated through 2026, so confirm current requirements, dates and standards at ndiscommission.gov.au. © NDIScompliant · ndiscompliant.com.au