Back to Journal
The NDIS audit readiness checklist
Reading Time
4 min
Audit readiness isn't one big project you tackle the month before assessment. It's a stack of small things each of which quietly drifts out of date — that an auditor will ask you to evidence. The providers who sail through aren't the ones who scramble; they're the ones whose evidence was already current, already organised, and already producible on the day.
Here's the practical checklist. Work through it now, while you still have time to close the gaps instead of explaining them.
Your policies and proof they're actually followed
Auditors assess your evidence against the NDIS Practice Standards, and they expect that evidence to be proportionate to the size and scale of your organisation. The critical word is evidence: a policy sitting in a folder isn't enough. For each standard, you need the documented process and the records showing it's in practice. Auditors deliberately corroborate claims across multiple sources information directly from participants, input from family or advocates (with consent), documented support plans, and records of the supports actually delivered.
Key points
Auditors want policies and records proving the policy is followed — not one or the other
Evidence is expected proportionate to your organisation's size and scale
Current participant service agreements and support plans are core evidence
Your required registers, worker clearances, incident records and complaints records must all be up to date
Find the gaps before the auditor does — a gap you've already got a plan for is far safer than one discovered on the day
The records most providers let slip
Run your eye down each of these and ask "could I produce this, current, today?":
Participant service agreements and support plans — complete, signed, and matching the supports actually delivered.
Registers — kept current rather than reconstructed in a panic before assessment.
Worker clearances and screening — in place for the roles that require them, and not lapsed.
Incident records — your incident management system, with reportable incidents handled correctly.
Complaints records — providers must keep records of complaints received and make information available about how to complain.
Why "current" is the whole game
Almost every audit scramble comes down to the same thing: the evidence exists somewhere, but it's scattered across drives, inboxes and spreadsheets, and nobody's sure which version is the live one. The fix isn't more documents it's one place where your compliance stays up to date and you can see, at a glance, what's missing.
That's exactly what Practiso keeps live: which standards you can evidence, which documents have gone stale, and which clearances are about to lapse before any of it becomes an audit finding.
See your gaps before the Commission does →
