The Ultimate NDIS Audit Checklist: Step-by-Step Guide (Free Template Inside)

Why Every NDIS Provider Needs an Audit Checklist

Preparing for an NDIS audit can feel overwhelming. Between policies, procedures, record-keeping, and staff training, it’s easy to wonder whether you’ve covered everything.

The good news? You don’t have to start from scratch. With the right NDIS audit checklist, you can confidently prepare for your audit, avoid last-minute stress, and prove compliance with the NDIS Practice Standards.

In this step-by-step guide, we’ll walk you through:

• What auditors really look for

• The key documents and evidence you must have

• Common mistakes providers make (and how to avoid them)

• A free NDIS compliance checklist template you can use today

Whether you’re preparing for your first audit or a mid-term reassessment, this guide will help you stay on track.

What Is an NDIS Audit (and Why Does It Matter)?

Before diving into the checklist, let’s quickly recap what an NDIS audit actually involves.

• Verification audit – For small, low-risk providers (e.g. support workers, cleaners, or providers of non-complex supports). Focuses mainly on documentation and insurance.

• Certification audit – For providers of higher-risk supports (e.g. behaviour support, support coordination, allied health). Involves interviews, records, and on-site checks.

• Mid-term audit – Usually halfway through your registration cycle. Ensures you’re still meeting requirements.

No matter the type, auditors are checking two main things:

1. Do you have the right policies, procedures, and systems in place?

2. Can you demonstrate that you actually follow them?

That’s where an NDIS audit checklist comes in.

The Ultimate NDIS Audit Checklist

Here’s a practical, step-by-step breakdown of what you’ll need to prepare.

. Governance and Risk Management

• Business registration details and ABN

• Insurance (public liability, professional indemnity, workers comp if applicable)

• Risk Management Policy + Risk Register

• Business continuity / emergency and disaster plan

• Delegations of authority (who makes decisions, and when)

EXAMPLE: Auditors may ask, “How do you manage business risks and ensure continuity of services in case of disruption?” Having a documented Risk Register will make this answer simple.

2. Policies and Procedures

Every provider needs a set of NDIS-aligned policies that match their registration groups. At minimum:

• Code of Conduct and Ethical Practice

• Feedback and Complaints

• Incident Management

• Privacy and Confidentiality

• Human Resources / Recruitment

• Work Health and Safety

• Restrictive Practices (if applicable)

• Cultural Competency and Diversity

• Rights and Advocacy

Pro tip: Generic policies aren’t enough. They must reflect your actual services. (This is where tailored Core Module packs come in.)

3. Procedures and Practice Guides

Policies show what you do. Procedures and practice guides show how you do it. Examples include:

• Incident reporting procedure

• Complaints handling process

• Risk assessment procedure

• Behaviour support plan development procedure (Module 2)

• Support coordination process maps (Module 4)

Auditors often test staff knowledge: “What would you do if a participant raised a complaint?” Having clear, practical procedures (and training staff in them) is key.

4. Records and Registers

Your audit will go beyond policies. You’ll need records to prove that you follow your procedures.

Common registers include:

• Feedback and Complaints Register

• Incident Register

• Risk Register

• Training and Supervision Log

• Internal Audit Schedule

• Restrictive Practices Register (if applicable)

💡 Internal link suggestion: Create a post on “How to Set Up an NDIS Internal Audit Template” and link here.

5. Participant Documentation

Auditors want to see that participants’ rights are protected and their needs met. Key documents:

• Signed Service Agreements

• Consent forms

• Risk assessments

• Behaviour support plans (if applicable)

• Support coordination reports (Module 4)

• Progress notes and service delivery records

6. Staff Documentation

Auditors will expect:

• Worker Screening Checks / NDIS Worker Screening

• Working with Children Checks (where relevant)

• Recruitment and onboarding records

• Position descriptions

• Supervision records

• Ongoing training evidence

EXAMPLE: An auditor might ask a staff member, “What training have you received in privacy and confidentiality?” → Having a signed training record answers this.

Common Audit Mistakes to Avoid

1. Policies don’t match your registration groups
   (e.g. support coordination providers using behaviour support documents).

2. No evidence of implementation – Policies exist, but registers are empty.

3. Staff not trained – They can’t explain processes when asked.

4. Inconsistent record-keeping – Gaps in incident or complaints logs.

5. Missing key policies – Especially privacy, complaints, and WHS.

NDIS Audit Questions: What You’ll Likely Be Asked

Auditors don’t just tick boxes. They ask questions to test your systems. Common examples:

• “How do you ensure participant rights are upheld?”

• “What is your process for handling an incident?”

• “How do you monitor and reduce restrictive practices?”

• “How do you train staff in cultural competence?”

These align directly with the NDIS Practice Standards, so ensure your documentation links back to them.

Free NDIS Audit Checklist Template

We’ve created a free downloadable checklist that covers all the essentials. Use it to:

• Tick off your mandatory policies

• Confirm your registers are up to date

• Prepare your staff for auditor questions

• Plan your internal audits

📥 [Download the Free NDIS Audit Checklist here]

How to Run an Internal Audit (Bonus Tip)

Don’t wait for your external audit to discover gaps. Running an internal audit every 6–12 months helps you stay on top of compliance.

Steps:

1. Choose an internal audit template.

2. Review policies against NDIS Practice Standards.

3. Spot-check records and registers.

4. Interview staff about processes.

5. Document gaps and actions.

This process not only prepares you for audits but also proves continuous improvement.

FAQs

Q: What documents are required for an NDIS audit?
A: At minimum, you’ll need policies, registers, participant documentation, staff records, and evidence that these are used in practice.

Q: Can I use an NDIS audit checklist from another provider?
A: Yes, but ensure it matches your registration groups. Generic templates often miss key requirements.

Q: How long does an NDIS audit take?
A: Verification audits may take 1–2 days. Certification audits can take longer depending on scope and participant interviews.

Q: Do I need an internal audit template?
A: Yes — it helps you self-assess and is often requested during external audits.

Q: What happens if I fail an NDIS audit?
A: You’ll be given non-conformities to address. With the right checklist and documents, you can resolve these quickly.

Final Thoughts: Be Audit-Ready Without the Stress

Passing an NDIS audit doesn’t need to be stressful. With a clear NDIS audit checklist, tailored policies, and evidence of practice, you can:

• Show auditors you’re compliant

• Protect your business and participants

• Save time and reduce stress

Want to skip the guesswork? Our Core Packs and Module Packs include fully tailored, audit-ready policies, procedures, and registers for your registration groups.

[Explore our NDIS Policy Packs here]