The quality audit process

When the NDIS auditor comes onsite to your service, the day usually starts with a short opening meeting. The auditor introduces themselves and explains their assessment. They are assessing how your organisation meets the NDIS Practice Standards. This happens under the oversight of the NDIS Quality and Safeguards Commission. They outline what they plan to review - leadership, risk systems, incident management, staff files, participant records, and interviews.

Very quickly, the focus moves from what your policies say to what actually happens in practice. You are asked questions like:

• “How do you know participants are safe?”
• “Can you show me how incidents are managed from start to finish?”
• “How does leadership monitor risk and quality?”

The auditor wants to see real examples - incident reports, complaints records, training logs, supervision notes - not just the policy itself. They are looking for evidence that your systems are working, not just that they exist.

Some of your staff files are sampled. The auditor checks worker screening clearances, qualifications, induction records and evidence of ongoing training and supervision. This is usually straightforward if your records are organised and up to date.

Participant interviews are a key part of the audit. The auditor speaks privately with a few participants. They ask simple questions such as, “Do you feel safe?”, “Do staff listen to you?”, and “Do you know how to make a complaint?” These conversations help confirm if your services feel safe and respectful to participants.

When the auditor observes service delivery, they quietly watch how supports are provided. They are looking at how staff communicate, whether consent is sought, and whether supports match the participant’s plan. Small things matter - respect, dignity, clear explanations.

At the end of the audit, you have a closing meeting. The auditor summarises strengths and explain any gaps identified. If a non-conformity is raised, it does not mean you’ve failed. It means something needs to be corrected or strengthened. You are given a timeframe to address any issues.

The experience may feel detailed and sometimes confronting, but it’s structured and evidence-based. The key is being able to clearly show:

• your systems work in real life 
• participants are safe, respected and receiving quality supports every day.

The Sunrise Community Supports (Sunrise) office knew their certification audit was approaching. The office felt a mix of nerves and determination. On the first morning, 2 auditors from an Approved Quality Auditor arrived promptly at 9:00am. After brief introductions, they explained their role within the oversight of the NDIS Quality and Safeguards Commission. They clarified that the purpose of the audit was to assess Sunrise’s conformity with the NDIS Practice Standards. Not to “catch them out”, but to verify that participants were safe and receiving quality supports. The opening meeting felt formal but respectful. The auditors outlined the schedule:

• governance interviews
• staff file sampling
• participant interviews
• observation of supports
• review of incident and complaints management systems.

As the day unfolded, the audit became less theoretical and more real. In the boardroom, the director was asked how risks were identified and escalated, how incidents were reported, and how restrictive practices were monitored. The questions were calm but probing: “How do you know this system works in practice?” “Can you show us an example?” Policies alone were not enough; the auditors wanted evidence of implementation. Minutes of meetings, risk registers, and incident trend reports were examined carefully. It quickly became clear that an audit is about demonstration - showing not just what is written, but what is actually done.

Later, the auditors split up. One reviewed staff files, checking NDIS worker screening clearances, qualifications, induction records, and supervision notes. The other met with participants privately. These conversations were gentle and participant-focused: “Do you feel safe?” “Do staff listen to you?” “Do you know how to make a complaint?” Staff could feel the weight of these moments - because participant voice matters deeply in an NDIS audit. Auditors will explore further if a participant is unsure of the complaints process or their rights.

When observing service delivery, the auditors were unobtrusive but attentive. They watched how support workers interacted with participants. They noted if dignity was respected, consent was sought, and if language was empowering. Small details mattered, for example:

• knocking before entering a room
• explaining tasks before assisting
• documenting support accurately afterward.

Practice was being tested against the NDIS Practice Standards in real time.

On the second day, the focus shifted to incident management and behaviour support. The auditors traced a reported incident from beginning to end. They went through the initial report, internal review, actions taken, and notification obligations. They cross-checked records against policies. In behaviour support files, they looked for functional assessments, evidence of participant involvement, and proper authorisation of any restrictive practices. Where a document was missing or unclear, they did not accuse - they asked: “Can you help us understand this?” Those questions signalled potential gaps that would later be discussed.

By the closing meeting, the atmosphere was clearer and more grounded. The auditors summarised strengths first: strong leadership oversight, committed staff, person-centred planning. Then they outlined their findings. There was a minor non-conformity relating to incomplete documentation. There was also an improvement opportunity to strengthen participant awareness of complaints. They explained what this meant, what evidence would be required, and the timeframe for corrective action. It was structured and procedural, not dramatic.

When the auditors left, Sunrise’s team reflected on the experience. The audit had been detailed and at times confronting, but it was also structured and fair. It felt less like an interrogation. It was more like a systematic examination of how their systems truly safeguard people with disability. The biggest realisation was this: an NDIS audit isn’t about having perfect paperwork. It’s showing that participants are safe, respected, and supported in line with the NDIS Practice Standards. It was also about being prepared to show how you know that is happening every day.

After the onsite visit, the auditor continued their work offsite by drafting the formal audit report. This report summarised the evidence gathered, findings identified, and rationale for each conclusion. These were all aligned with the NDIS Practice Standards. The completed draft was shared with Sunrise for review.

The provider was given an opportunity to check the report for factual accuracy. Sunrise made sure the included evidence, examples, and context reflected the auditors visit. After incorporating any necessary factual corrections, the auditor finalised the report. The completed document was then formally submitted to the NDIS Commission. This submission marked the final step of the certification audit process. It allowed the NDIS Commission to review the auditor’s conclusions, make a registration decision, and maintain oversight of NDIS provider quality and safety.

Sometimes a person called an auditor may visit your provider. They work under the NDIS Quality and Safeguards Commission framework. This checks that services are safe and meet the NDIS Practice Standards.

If an auditor visits, they might ask to speak with you. This is your choice - you do not have to talk to them if you don’t want to.

If you do speak with them, this is your opportunity to share your experience with your provider. You can talk about what is working well and anything that worries you. The auditor may ask simple questions like:

• Do you feel safe?
• Do staff treat you with respect?
• Do staff listen to you?
• Do you know how to make a complaint?

You can have a carer, family member, support person, or advocate with you during the conversation if that makes you feel more comfortable.

The auditor is not there to get anyone in trouble. They are there to make sure you are safe, respected, and receiving good quality support.

They might also quietly watch how supports are delivered to see if staff are kind, explain things clearly, and follow your plan.

After the visit, the auditor writes a report about what they found. If something needs to improve, your provider will be asked to fix it.

The most important thing to know is: an NDIS audit is about protecting your rights. It’s about making sure you receive safe and respectful supports.