NDIS Audit Preparation: Checklist, Evidence and Training Records
Updated: Oct 4
NDIS audit preparation starts with three questions: what is in your audit scope, where is the evidence, and can your team explain how it is used? This practical checklist helps small and medium Australian providers organise records, check workforce readiness and address gaps before a verification or certification audit.
If you already have an audit date and need help deciding what to fix first, explore our NDIS audit and compliance consulting or enquire about audit preparation support.
1. Confirm your audit type and scope
Start with the scope of audit issued through your NDIS registration process and confirm the applicable modules, sites, services and dates with your Approved Quality Auditor. Provider size alone does not determine the pathway.
Verification: a desktop review of documentary evidence for lower-risk, lower-complexity supports and services.
Certification: for higher-risk or more complex supports. Stage 1 reviews documents; Stage 2 examines implementation and can include site visits, observations, and staff and participant interviews.
Use the NDIS Commission's quality audit process guidance to check your pathway. Keep the auditor's evidence request and audit plan with your preparation checklist.
2. Work through your NDIS audit preparation checklist
Assign an owner and due date to each action. The examples below are practical preparation prompts; your evidence needs to match your actual supports and applicable standards.
Map the scope. List the registration groups and standards being assessed. Flag anything you need the auditor to clarify.
Build an evidence index. Link each requirement to the current policy, working records, responsible person and any open action. Open the links to check they work.
Check participant records. Where relevant, trace a support plan through risk assessments, progress notes, consent records and reviews. Look for changes that have not reached frontline instructions.
Review worker files. Compare the staff roster with induction, training, supervision and competency records. Check role-specific qualifications and screening requirements.
Test incident and complaint follow-through. Choose examples and check the response, decisions, communication, actions and review. If there have been no events, explain that honestly and test the process with a clearly labelled scenario.
Review governance actions. Check whether risk reviews, meeting decisions and improvement actions have owners, due dates and evidence of completion.
Brief the team. Ask workers to explain everyday processes in their own words. Check that they can find current instructions and know when to escalate.
Confirm audit logistics. Agree secure evidence access, the audit contact, staff availability and participant communication arrangements. Track unresolved gaps openly.
3. Build an evidence index that your team can use
A useful index answers: which requirement are we demonstrating, what record shows it, where is it stored, and what still needs attention? A spreadsheet or a simple document can work. Avoid copying confidential participant details into an unrestricted index.
Suggested columns: applicable standard; evidence description; secure file location; record date or version; owner; gap; action; due date; checked by.
Illustrative example: a participant's support needs change. Your review might follow the updated plan, the revised risk controls, the worker briefing record and subsequent progress notes. Record any mismatch as an action, then check the revised instructions are actually being used. This example is a preparation exercise, not a prescribed auditor sample or a real client case.
For a deeper explanation of evidence traceability, read our NDIS Audit Evidence guide. Keep original records intact; do not backdate documents or create retrospective records that imply an activity occurred when it did not.
4. What training records do I need for an NDIS audit?
Keep evidence relevant to each worker's role and the supports they deliver. A certificate may show attendance or completion; you also need a way to check whether learning has translated into safe practice.
The Core module's human resource management requirements cover worker qualifications and experience, induction including mandatory NDIS worker orientation, a system for recording and evaluating training, supervision and documented performance development. They also address infection prevention and control training and refresher training for workers providing supports.
For verification, check the Verification module and its required documentation guide. Its workforce indicators include orientation, continuing professional development, infection prevention and control training, and PPE training for workers providing direct supports.
A practical worker evidence pack can include:
Induction checklist and NDIS worker orientation completion record.
Relevant qualifications, professional registration or memberships, and checks against current requirements.
A training matrix showing the worker, role, required learning, completion date, evidence link and next review or refresher date where applicable.
Participant- or task-specific training records, with competency observations or assessments appropriate to the support.
Supervision notes, feedback, identified learning needs and follow-up actions.
Keep screening evidence alongside the workforce records. Check which roles are risk-assessed, clearance status and any applicable exceptions against the Commission's worker screening guidance for registered providers. Do not assume that a generic police check establishes an NDIS worker screening clearance.
5. Prepare for certification audit interviews and sampling
Use a mock audit or internal review to test retrieval and consistency. Ask a colleague to choose a record you have not preselected, follow the related evidence and note where the process becomes unclear. This helps identify weaknesses before the external assessment.
Ask workers: How would you respond to a complaint? Where would you record an incident? Who would you contact if a support plan no longer reflected a participant's needs? Use the discussion to identify learning needs rather than rehearse scripted answers.
Follow the Commission's participant audit guidance: explain the audit and the opportunity to opt out, record opt-out decisions and communicate them to the auditor. Confirm sampling arrangements with your auditor; do not plan around a fixed number of participant files.
6. Set a realistic preparation timeline
Work backwards from the dates agreed with your auditor. Your starting point, scope, service complexity and unresolved actions determine how much preparation is needed.
First: confirm scope, dates and responsibilities; create the evidence index.
Next: prioritise safety and service-delivery gaps, review records and complete necessary training.
Before the audit: test evidence retrieval, brief the team and confirm secure access and interview arrangements.
After the audit: check the report, confirm required responses and timeframes, and track corrective actions through to verified completion.
You can spread these steps across a 12-week planning window if that suits your circumstances. It is a planning example, not a regulatory minimum or a guarantee of readiness. If the audit is close, identify urgent gaps now and discuss the position with your auditor.
7. Check the requirements for your specific supports
For SIL services, consult the current Supported independent living supplementary module. It addresses supported decision-making, safeguarding, practice governance, and agreements about tenancy, housing and support arrangements. Confirm how it applies to your registration and audit scope.
For high-intensity supports, review the relevant High Intensity Support Skills Descriptors and participant-specific training needs. For SDA, behaviour support or other specialist supports, confirm the applicable supplementary modules rather than relying on a generic checklist.
Need help turning the checklist into an audit preparation plan?
DHD Consultancy supports Australian NDIS providers with gap analysis, evidence indexing, mock audits and staff preparation. See our NDIS audit and compliance consulting, send an enquiry, or book a free 30-minute discovery consultation.
Tell us your audit type, expected date, registration groups and main preparation concern. Please do not send identifiable participant records with an initial enquiry.
This consulting service provides preparation and advisory support; it does not provide independent certification or guarantee an audit or registration outcome. This guide is general preparation information; use your current audit scope and official requirements for decisions about your organisation.
Related DHD resources
Official guidance checked 4 October 2026. Requirements and guidance can change.
Comments