Mid-Term Audit
Audit Preparation: What Auditors Actually Look For
Audits are rarely failed on documentation. They are failed on the distance between what the documentation says and what the organisation does. Here is how that gap opens, and how to close it before an auditor finds it.
The Short Answer
What do NDIS auditors look for?
Auditors check that what your policies say matches what your organisation actually does, and that you can prove it: current registers, worker screening and training records, incident and complaint records, and service agreements that reflect the supports you deliver. Good preparation finds and closes those gaps months before the audit, rather than polishing documents the week before.
01The Real Test
An Auditor Is Checking Whether Your System Is Real
A policy is a claim about how your organisation behaves. An audit is the process of testing that claim against records, against practice and against what your staff say when asked.
That is why documentation alone never passes an audit and why a purchased document pack is worse than useless — it describes an organisation that does not exist, and the first three questions expose it. The NDIS Commission has been explicit that applications assembled from purchased packs can be refused.
The work of preparation, then, is not writing more. It is making sure the system you have written down is the system you are running, and that there is evidence of it.
02What Gets Examined
Four Places Auditors Always Go
Records, not policies
Incident records, complaint records, the worker register, screening check expiry dates, training records, service agreements, participant files. The policy says what should happen; these say what did.
What your staff say
Workers are asked what they would do if a participant was hurt, or complained, or refused a support. The answer an auditor is listening for is a real one, not a recited policy number.
Participant experience
With their consent, auditors speak to the people you support — about choice, about how they raise a problem, about whether they know they can.
Whether anything changed
At a mid-term audit especially: what you said you would fix last time, whether you fixed it, and whether the standards moved underneath you since.
03Where Gaps Open
The Five Most Common Corrective Actions
- Records that stoppedA register maintained diligently for three months and then abandoned. Auditors look at dates. An empty incident register for an eighteen-month period is a finding in itself, not evidence of a quiet year.
- Screening that lapsedWorker screening checks and qualifications expire. Nobody notices until an auditor sorts the register by date. A simple expiry review each quarter prevents the single most common finding we see.
- Procedures nobody followsA six-step escalation process in a one-person business. Documentation written for a larger organisation than yours fails because it cannot be evidenced, not because it is wrong.
- Standards that movedThe Practice Standards change between audits. A provider operating exactly as they did at registration can still be non-compliant at mid-term, through no fault of their own.
- Consent and agreementsService agreements missing, unsigned, or not reflecting what is actually delivered. It is administrative, it is boring, and it is raised constantly.
04How We Prepare You
Before the Auditor, Not During
- Gap reviewAgainst the standards that apply to your registration groups as they stand today, not as they stood when you registered.
- Records walk-throughWe go through your records with you: what exists, what has lapsed, and what an auditor will ask for and not find.
- Audit trainingThe questions that get asked, who gets asked them, and how to answer honestly without talking yourself into a finding.
- Documents brought currentUpdated where the standards have moved or your business has.
- Evidence organisedLaid out the way an auditor expects to receive it, so the day runs on your terms.
If something fundamental is wrong in your organisation, you should hear it from us months before you hear it from an auditor. That is the whole value of the exercise — not a polished folder, but no surprises on the day.
Mid-term audit support →Sources
- NDIS Practice Standards and Quality Indicators
- NDIS Commission: Worker screening
- NDIS Commission: Practice Standards reform
Checked against these sources on 12 October 2026.
Audit Coming Up?
Tell us when it is and what you deliver. We will tell you what preparation you actually need and what it costs.
FAQ
Frequently Asked Questions
When should I start preparing for a mid-term audit?
Three months out is comfortable. Six weeks out is workable. Two weeks out is when people call us, and by then the only thing that can be fixed is presentation — a register with an eighteen-month gap cannot be back-filled, and should not be.
What evidence should I have ready?
Your incident and complaints records, worker register with screening and qualification expiry dates, training records, service agreements, participant files, your policies and procedures, insurance certificates, and whatever your specific registration groups require. We give you a list built from your own groups rather than a generic one.
Will the auditor talk to my staff?
On a certification audit, yes. They will also speak with participants where those participants consent. This is where the gap between documentation and practice shows, and it is the part worth preparing for.
What happens if I get corrective actions?
It is normal — most audits produce findings rather than a refusal. You get a window to close them and show the evidence that you have. What matters is responding properly and on time, and good preparation keeps the list short.
My business has not changed since registration. Do I still need to prepare?
Yes, because the standards may have changed even if you have not, and because an eighteen-month stretch of records is exactly what gets examined at mid-term. Providers who assume no change means no risk are the ones most often caught by a standard that moved.
Keep Reading
More NDIS Guides
- The NDIS, Explained for People Who Want to Work in ItHow the NDIS works for providers: the NDIA, the Commission, participants, plans and where your business sits.Read the guide →
- Supports Under the NDIS, and Which Ones You Can Be Paid FromCore, Capacity Building and Capital supports explained for providers: what each budget funds, how flexible…Read the guide →
- The NDIS Price Guide, and How to Read ItHow NDIS Pricing Arrangements and Price Limits work: support items, line item numbers, price limits,…Read the guide →
From Insights
By Profession
Checked against NDIS Quality and Safeguards Commission published guidance on 7 October 2026. The Practice Standards and audit requirements change — confirm anything you are about to act on at ndiscommission.gov.au, or ask us.
One Conversation Tells You Where You Stand
Fifteen minutes with someone who has done this thousands of times. We will tell you what applies to you, what it costs and how long it takes — and if you do not need us, we will tell you that too.