NDIS Audit Preparation: A Complete Checklist for Providers

An NDIS audit is not a test you cram for the night before. The providers who sail through are the ones whose day-to-day operations already produce the evidence an auditor wants to see. This guide breaks down what's actually assessed, the records to keep current, and how to make audit readiness a steady state rather than a fire drill.

Certification vs verification

Your audit pathway depends on the supports you're registered to deliver. Verification is a lighter, document-based check for lower-risk supports. Certification is a deeper, on-site assessment for higher-risk supports - including specialist behaviour support, high-intensity daily personal activities and early childhood supports - assessed against the relevant modules of the NDIS Practice Standards.

What auditors are really checking

• Governance and operational management - clear roles, risk management, continuous improvement and complaints handling.
• Provision of supports - that supports are planned, delivered and reviewed with the participant at the centre.
• The support-delivery environment - safety, infection control and the management of medication or restrictive practices where relevant.
• Worker capability - screening, qualifications, orientation and ongoing training are current and evidenced.

The evidence to have ready

1. Current policies and procedures that match what you actually do - not a generic template.
2. Worker screening clearances, qualifications and training records, with expiry dates tracked.
3. Participant records: consent, assessments, plans, goals and progress notes, linked together.
4. An incident register with reportable events flagged and Commission-notification dates recorded.
5. A complaints and feedback register, showing how issues were acknowledged and resolved.
6. Evidence of continuous improvement - that you act on incidents, complaints and reviews.

Stay audit-ready, not audit-panicked

The difference between a calm audit and a stressful one is whether your evidence is generated continuously. If credentials are tracked with expiry reminders, incidents are logged as they happen, and a self-assessment against the Practice Standards is kept live, an audit becomes a matter of exporting what you already have.

Audit readiness isn't a project you finish. It's a property of an operation that records its work as it does it.

Tasklith's Quality & Compliance modules - a self-assessment against the Practice Standards with AI gap analysis, a credential register with expiry tracking, and incident and complaints registers - are designed so the evidence builds itself in the background, and a printable audit report is one click away. This is general guidance, not legal advice; always check the current NDIS Practice Standards and your registration scope.

Keep reading