NDIS Audit Preparation & Internal Audits

Home
NDIS Audit Preparation & Internal Audits

NDIS Audit Preparation and Internal Audit Support

Stay Compliant, Stay Audit-Ready

Your NDIS audit outcome is decided long before the auditor arrives. It’s decided by whether your policies match what your staff actually do, whether your registers are current, and whether you can produce evidence on request. Good NDIS audit preparation closes those gaps first.

Angels Compliance & Training delivers NDIS compliance services that close those gaps before an approved quality auditor finds them. We run a full NDIS internal audit against the Practice Standards that apply to your registration groups, hand you a written report with every finding, and give you a corrective action plan you can work through step by step.

Not sure where you stand?

Book a free 20-minute consultation. We'll tell you honestly whether you're audit-ready or not.

Book a free consultation

What is an NDIS compliance audit?

An NDIS compliance audit is a formal assessment carried out by an approved quality auditor to determine whether your organisation meets the NDIS Practice Standards for the supports you’re registered to deliver. The NDIS Quality and Safeguards Commission uses the auditor’s report to decide whether to grant, renew, or vary your registration.

There are two pathways, and which one applies depends on the risk level of your supports:

Verification audit

Lower-risk supports. A desktop review of your documentation and evidence. No site visit in most cases.

Certification audit

Higher-risk supports. Stage 1 desktop review, then Stage 2 on-site with staff and participant interviews.

Not sure which applies to you? Read our breakdown of verification vs certification audits.

The NDIS audit process, step by step

Whatever your pathway, the external NDIS audit follows the same broad sequence:

Apply and receive your scope of audit. You apply through the NDIS Commission portal. The Commission confirms which Practice Standards modules apply to your registration groups.
Engage an approved quality auditor. You choose and contract an auditor from the Commission’s approved list. They quote based on your scope.
The audit. Verification is a desktop review of your evidence. Certification is a Stage 1 document review, then a Stage 2 on-site audit with staff and participant interviews.
Findings and non-conformities. The auditor reports any major or minor non-conformities. Majors must usually be closed before the audit can be finalised; minors need a corrective action plan.
The Commission’s decision. The auditor submits the final report. The Commission then decides whether to grant, renew or vary your registration.

An internal audit with us rehearses steps 3 and 4, so the real thing holds no surprises.

An internal audit is different. It’s the rehearsal, run by us, not the Commission, with no consequence to your registration. It’s where you find out what would have gone wrong.

The NDIS Practice Standards and quality indicators we assess against

Every internal audit is scoped to your registration. We assess against the NDIS Practice Standards Core Module, which applies to every registered provider, plus any supplementary modules attached to your registration groups. Each standard is checked against its quality indicators, the same evidence points an approved quality auditor uses.

NDIS Practice Standards Core Module (all providers)

1. Rights and responsibilities

Person-centred supports, dignity, privacy, independence, consent.

2. Governance and operations

Risk management, quality systems, information management, continuity.

3. Provision of supports

Access, support planning, service agreements, responsive delivery.

4. Support environment

Safe environments, equipment, waste and infection management.

Supplementary modules, where they apply

High Intensity Daily Personal Activities

Specialist Behaviour Support and Implementing Behaviour Support Plans

Early Childhood Supports

Specialist Support Coordination

Specialist Disability Accommodation

Verification Module (for verification-pathway providers)

We also assess against the NDIS Code of Conduct, the incident management and reportable incidents rules, worker screening obligations, and complaints management requirements because auditors do.

Running SIL?

Tailored policies and procedures in 48 hours, plus free pre-audit coaching – $650 fixed price.

SIL Policy Package

Our NDIS internal audit process

Five stages. Most providers complete the audit in two to three weeks.

1
Scoping
We confirm your registration groups, the modules that apply, your audit pathway, and your due date. Scope drives everything after this.
2
Document review
We read your policies, procedures, forms, registers, participant files, and staff records against each applicable quality indicator — the same evidence an auditor requests.
3
Practice review and staff interviews
We check whether your documented systems match daily practice, and whether your team can explain them. This is where most providers are exposed.
4
Written report and corrective action plan
Every finding is rated by severity, mapped to the standard it breaches, and paired with a specific instruction, an owner, and a due date. Not "improve your governance" — the actual fix.
5
Close-out and continuous improvement
We verify each corrective action is genuinely closed, then build a Continuous Improvement Plan so your evidence trail keeps building between audit cycles.

NDIS audit compliance checklist

Work through this before your audit. If you can’t answer yes to an item with evidence, then it’s a gap.

Governance and risk

☐NDIS compliance register current, mapping each legislative and Practice Standards obligation to its owner and evidence
☐Policies reviewed within the last 12 months, with version control and a review date
☐Risk register current, with treatments assigned and reviewed
☐Continuous Improvement Plan showing dated, closed actions
☐Conflict of interest register maintained

Workforce

☐NDIS Worker Screening clearance for every risk-assessed role, with expiry tracked
☐NDIS Worker Orientation Module completed and evidenced for all staff
☐Training register current, including refreshers
☐Position descriptions, contracts, and signed Code of Conduct on file

Participant records

☐Signed service agreements matching current pricing arrangements
☐Support plans with goals, reviewed at the stated interval
☐Consent forms current and specific
☐Progress notes contemporaneous, factual, and legible

Incidents, complaints, and behaviour support

☐Incident register complete, with reportable incidents lodged inside the required timeframe
☐Complaints register showing outcomes and closure, not just receipt
☐Behaviour Support Plans current and authorised where required
☐Restrictive practices reported monthly, with no unauthorised use

Want it as a printable PDF? Download the NDIS audit & compliance checklist and our free NDIS compliance register template..

NDIS provider compliance: the gaps we find most often

Across the internal audits we run, the same failures repeat. None are exotic. All are avoidable.

Generic policies nobody follows

Bought templates with the vendor’s language still in them. Auditors recognise them instantly, and staff can’t explain a policy they’ve never read.

Registers that stop halfway

Incidents and complaints logged but never closed out. An open register with no outcome recorded reads as a system that doesn’t work.

A Continuous Improvement Plan written the week before

Everything dated within the same fortnight. It signals the opposite of continuous improvement.

Worker screening gaps

Expired clearances, or staff in risk-assessed roles without one. This is a straightforward non-conformity every time.

Thin progress notes

“Client had a good day.” Notes must evidence the support delivered against the plan and the claim.

Service agreements out of date

Unsigned, or still quoting superseded rates after a pricing update. Read our 2026 pricing schedule breakdown.

Why providers choose our NDIS compliance services

We’re an independent NDIS compliance consultant, not an approved quality auditor. That distinction matters: an approved quality auditor can’t advise you and then certify you, so NDIS audit companies are limited to assessing what you present. We work the other side, building the evidence before you’re assessed.

Findings you can act on

Every gap comes with a named fix, an owner, and a date, not a rating out of five.

Documents that survive scrutiny

Written for your operation and your registration groups, in language your staff use.

Support after the report

We stay through close-out and can train your team to run the next internal audit themselves.

Australia-wide, WA-based

Remote NDIS compliance consulting nationally; on-site across Perth and WA

Partner with Us for Your Next NDIS Audit

Let us help you stay compliant, prepared, and focused on what matters most; supporting your participants.

Get in touch today to learn how we can support your next internal audit and NDIS audit compliance process.

Frequently asked questions

How often should we run an NDIS internal audit?

At minimum annually, and again three to four months before a scheduled certification or renewal audit. Annual internal audits are also evidence of the governance and continuous improvement your Core Module requires — so the audit itself becomes part of your compliance record.

What's the difference between an internal audit and an NDIS compliance audit?

An internal audit is your own review — run by you or a consultant, with no consequence to your registration. An NDIS compliance audit is conducted by an approved quality auditor and reported to the Commission, where the outcome affects your registration.

What does an NDIS approved quality auditor do, and how do we choose one?

An approved quality auditor is an organisation the NDIS Commission has approved to audit providers against the Practice Standards. You choose and pay them directly. Compare quotes from two or three, check their availability against your due date, and ask about their experience with your registration groups. We can’t audit you ourselves, but we can help you prepare whichever auditor you choose.

What is the scope of an NDIS audit?

Your scope of audit sets out which Practice Standards modules your auditor will assess. It’s based on the registration groups you deliver or apply for. Every provider is assessed against the Core Module or the Verification Module; higher-risk supports add supplementary modules. Your scope decides how long the audit takes and what it costs, so check it carefully before you engage an auditor.

What are the NDIS audit requirements for new providers?

New providers need the same evidence as established ones: current policies and procedures, worker screening clearances, a risk register, signed service agreements and complaints and incident systems. The difference is that you may not have participants yet, so auditors focus on whether your systems are ready to operate. Our NDIS audit compliance checklist above covers the essentials.

How long does an internal audit take?

Two to three weeks from scoping to report for most providers. Larger organisations with multiple registration groups take longer. Closing out the corrective actions depends on how many gaps we find and how quickly your team works through them.

What does an NDIS internal audit cost?

It depends on your registration groups, the number of modules in scope, staff and participant numbers, and whether you need remote or on-site delivery. We quote a fixed fee after a free scoping call — no hourly billing.

Can you help if we've already received non-conformities?

Yes. We review the auditor’s findings, build the corrective action evidence, and help you respond within the timeframe you’ve been given. Bring us the report and we’ll work backwards from it.

Do you work with providers outside Western Australia?

Yes. Internal audits are delivered remotely for providers Australia-wide. On-site attendance is available across Perth and regional WA.