NDIS Certification Audits: What Stage 2 Really Tests
This episode breaks down the NDIS certification audit process, from the Stage 1 desktop review to the Stage 2 onsite visit, and explains why real-day-to-day practice matters more than polished paperwork. It also covers participant consent, audit ratings, and practical ways to prepare your team with scenario-based walkthroughs.
Chapter 1
The 90 Day Trap Between Stage 1 Paperwork and Stage 2 Practice
Winter, EnableUs Community
So you spend months drafting policies, buying binders from consultants, getting all your documentation lined up, and then you pass Stage 1 of your NDIS certification audit. Um, total relief, right?
Will, EnableUs Community
Yeah, celebration time! You, you, you checked the boxes.
Winter, EnableUs Community
Except that is where so many providers fall into a huge trap. Passing the Stage 1 desktop audit just proves your paper systems exist. You actually have a strict three month clock ticking down to Stage 2, which is the onsite audit.
Will, EnableUs Community
Three months. Right, so Stage 1 is off site, the Approved Quality Auditor looks over your governance, your worker records, risk frameworks, all off site. But Stage 2, they actually show up at your locations.
Winter, EnableUs Community
They show up, they observe shift handovers, they talk to participants, and they check if what you wrote in your binder matches what your workers do on a random Tuesday.
Will, EnableUs Community
And that is where buying those, uh, off the shelf policy templates can really backfire. If your bought policy says incident reports get escalated in two hours using a specific digital form, but your team is writing notes on paper and sending them on Friday night...
Winter, EnableUs Community
Instant discrepancy. The NDIS Commission explicitly says providers are fully responsible for whatever is submitted in their application. You cannot just blame a consultant if your team has never read the policy.
Will, EnableUs Community
So how do you actually get a team ready for Stage 2 without, like, forcing everyone to memorize a two hundred page manual?
Winter, EnableUs Community
Scenario based walkthroughs. Don't test them on policy numbers or formal jargon. Sit down with your support workers and ask real questions. What do you do if a participant wants to make a complaint about their staff? What do you do if an incident happens during a late shift?
Will, EnableUs Community
I, I actually remember watching a mock practice review a while back. This support worker couldn't remember the official name of the feedback policy to save her life. But when asked, she immediately explained how she gives participants choice, how she records feedback in their preferred communication style, and who she calls if there is a risk.
Winter, EnableUs Community
And that passes every single time over someone reciting memorized definitions. The auditor is looking for genuine operational practice. It all stems back to your Initial Scope of Audit document anyway, which maps your specific service types and practice standards. Your focus has to be on your actual daily routine.
Chapter 2
Participant Opt Out Dynamics and Audit Rating Realities
Will, EnableUs Community
Now, speaking of Stage 2 onsite reviews, participants are involved too, right? But I know some providers get confused about how participant consent works for audits.
Winter, EnableUs Community
It operates on an opt out model. The NDIS Commission requires providers to inform participants that they are automatically included in the audit sample. That means an auditor might look at their care plans, interview them, or observe their support delivery.
Will, EnableUs Community
Wait, so if a participant does not want an auditor looking at their file or sitting in on their shift?
Winter, EnableUs Community
Then they opt out, and you must respect that immediately, document their choice, and inform the auditor. It is completely their decision, no pressure attached.
Will, EnableUs Community
Right, because the auditor's goal is just to assess whether participants feel safe, heard, and respected in how services are delivered.
Winter, EnableUs Community
Exactly. And at the end of Stage 2, the auditor compiles everything into a final report with specific numerical ratings against the practice standards.
Will, EnableUs Community
Break down those numbers for me. How does the rating scale work?
Winter, EnableUs Community
It goes from zero to two. A rating of two means full conformity with the standard. A rating of one is a minor non conformity, meaning there is a gap, but you get a structured timeframe to fix it while moving forward.
Will, EnableUs Community
And a rating of zero?
Winter, EnableUs Community
Zero is a major non conformity. That stops registration progress completely until it is remediated and re assessed.
Will, EnableUs Community
Which sounds intimidating, but if an auditor asks a question during Stage 2 and you don't know the answer off the top of your head, what should you do?
Winter, EnableUs Community
Do not make something up or pretend everything is flawless! Just say, let me check our system record and find that accurate information for you. Auditors prefer open, transparent communication. Reframing the whole audit as a constructive stress test makes your organization so much stronger in the long run.
Will, EnableUs Community
Yeah, treat it as a real health check for your operations rather than an exam you try to fake your way through. Alright, that is a great place to leave it for today. Talk soon!