NDIS Audit Timing: What Providers Miss Until It’s Too Late
This episode breaks down the NDIS audit timeline, from preparing for the mid term audit at twelve months to avoiding last-minute panic at month seventeen. It also covers ownership changes, renewal windows, and how upcoming SIL registration and standards changes affect your evidence and compliance approach.
Show Notes
- Mandatory registration and transition pathways for supported ...: https://www.ndiscommission.gov.au/about-us/ndis-commission-reform-hub/mandatory-registration/mandatory-registration-SIL
- The quality audit process | NDIS Quality and Safeguards Commission: https://www.ndiscommission.gov.au/provider-registration/apply-registration/types-audits
Chapter 1
The Twelve Month Reality Check and Ownership Triggers
Will, EnableUs Community
Month seventeen. You get the calendar alert, your stomach drops, and suddenly you have about three weeks to find an auditor, round up eighteen months of participant paperwork, and pray nobody asks to see your risk register.
Winter, EnableUs Community
It is the classic provider panic. Everyone knows the mid term audit happens at month eighteen. So in their heads, they think, oh, I will just sort it out at month seventeen. But the NDIS Commission's guidance actually says you should start preparing at twelve months.
Will, EnableUs Community
Twelve months! That is a full half year before the audit is even due.
Winter, EnableUs Community
Right, because by month twelve, you need to engage an Approved Quality Auditor from the list at Find an auditor, lock in your audit scope, and sort out your dates. If you wait until month seventeen, most auditors are booked solid. You are scrambling, your team is stressed, and the Commission expects that final report submitted by the eighteen month deadline.
Will, EnableUs Community
And the mid term is not just a copy paste of your initial certification, is it? It is specifically drilling into provider governance and operational management.
Winter, EnableUs Community
Yes, provider governance and operational management. Plus any standard where you received a corrective action plan last time. That is where people get caught out. Let us say at your initial audit you had a minor non conformity for staff training. What a lot of providers do is they open the training policy, change a few words, save the document, and think, right, sorted.
Will, EnableUs Community
Right, problem solved on paper.
Winter, EnableUs Community
Except an auditor does not care about your updated Word document. They want the actual evidence trail. They want the dated training attendance sheets, the supervision notes, the records showing that your workers actually understand the changes. In plain terms, they are not checking whether you edited your documents. They are checking whether your support workers changed their day to day habits.
Will, EnableUs Community
Which takes months to show. You cannot fake six months of consistent supervision notes in a weekend.
Winter, EnableUs Community
You really cannot.
Will, EnableUs Community
And speaking of surprises, there is another trigger that catches people completely off guard, especially with the changes coming in. If you buy a registered business, or if your governance changes significantly, the Commission has specific rules. Under the regulatory changes taking effect from 1 July 2026, if you buy an NDIS provider business that delivers high risk or complex supports, you must complete an audit within three months of the change in ownership.
Winter, EnableUs Community
Wait, within three months? Not at their scheduled mid term?
Will, EnableUs Community
Three months. It is a condition audit. If there is a significant change in ownership or governance and you deliver high risk supports, the clock starts immediately on settlement day. I have talked to buyers who thought they had a year and a half before their next audit, only to find out they have ninety days to run a full governance assessment.
Winter, EnableUs Community
That is intense. So if your structure changes, or your services expand, your audit schedule can change overnight.
Chapter 2
The Renewal Window and the SIL Overhaul
Will, EnableUs Community
Now, that brings us to the other end of the cycle, which is registration renewal. The Commission allows providers to submit their renewal application during the six month window before registration expires. But why is hitting that window so critical?
Winter, EnableUs Community
Because if your registration lapses, you legally cannot deliver NDIA managed supports. You cannot claim payment through the portal. Your cash flow stops dead. And the renewal journey involves a self assessment, worker screening checks, booking an auditor, doing the audit, and then waiting for the Commission to assess the report and make a decision. That does not happen in four weeks.
Will, EnableUs Community
Yeah, and here is how I think about renewal: do not just treat it like an automatic certificate rollover. Use it as an opportunity to prune your registration groups. A lot of providers register for everything under the sun early on because they think, well, maybe we will offer complex bowel care or high intensity supports down the track.
Winter, EnableUs Community
And then they never actually deliver it.
Will, EnableUs Community
Never deliver a single hour of it! But because it is sitting on their certificate, the auditor has to sample policies and processes for those high risk groups. It inflates your audit scope, adds auditor hours, and jacks up your audit fees. Renewal is your chance to dump the groups you do not use.
Winter, EnableUs Community
That is such a practical move. But if you do deliver certain supports, like Supported Independent Living, the opposite is happening. Starting 1 July 2026, the Commission is introducing mandatory registration and dedicated standards for SIL. The new class of support is 0138 Assistance with supported independent living.
Will, EnableUs Community
Right, group 0138. So if you are currently delivering SIL under registration group 0115, you are transitioning across. And at your very next mid term or renewal audit, your auditor will assess you against the brand new SIL Practice Standards.
Winter, EnableUs Community
Exactly. You cannot just rely on your old evidence pack. You need to make sure your tenancy separation, your participant decision making processes, and your daily practice line up with those new requirements before the auditor walks through the door.
Will, EnableUs Community
And that really gets to the core of the whole thing. If compliance lives on a single spreadsheet that one compliance manager updates at midnight, you are always going to feel vulnerable.
Winter, EnableUs Community
It has to be built into everyday operations. Review your risk registers monthly. Document your incident debriefs when they happen. Keep supervision logs current week to week. If your normal daily routines produce the records naturally, you never have to prepare for an audit, because your ordinary workday is the evidence.
Will, EnableUs Community
Spot on. Keep your evidence fresh, watch those twelve month and six month windows, and audits become a check up rather than a crisis.