Common NDIS Audit Failures — and How to Prevent Them Before Your Next Review

The Most Common Reasons Providers Fail NDIS Audits

1. Worker Screening Checks not current or not on file

This is the most frequently cited non-conformance in NDIS audits. Auditors check the NDIS Worker Screening Database directly and compare it to your staff list. If a worker in a risk-assessed role has an expired, pending, or missing clearance — that is a non-conformance regardless of whether the worker is outstanding at their job.

Prevention: Track clearance expiry dates in your HR system. Set alerts at 90 days and 30 days before expiry. Block rostering for workers whose clearance has expired until renewal is confirmed.

2. Mandatory training not completed or not documented

Providers often complete mandatory training but fail to store completion certificates and records properly. Auditors ask for training records for a sample of staff. If you cannot produce the certificate, the training may as well not have happened from a compliance perspective.

Prevention: Store every training certificate in the worker's digital personnel file. Record completion date, trainer, RTO number, and certificate expiry. Run a training compliance report before every audit.

3. Incident management failures

Three types of incident management failures are common:

• Incidents not recorded: Minor incidents go unrecorded because staff don't realise they are reportable. Everything from unexplained injuries to near-misses to medication errors should be logged.
• Reportable incidents not notified to the Commission: Certain incidents must be notified to the NDIS Quality and Safeguards Commission within 24 hours (serious incidents) or 5 business days (other reportable incidents). Late or missing notifications are a common non-conformance.
• No evidence of management review: Recording an incident is only half the requirement. There must be evidence that the incident was reviewed, that root causes were investigated, and that corrective actions were taken.

Prevention: Use a structured digital incident reporting system. Ensure it automatically flags whether an incident is reportable to the Commission. Include a review workflow so managers must sign off on each incident report.

4. Policies that don't reflect actual practice

Many providers purchase policy packages that are well-written but have never been implemented. Auditors interview staff and participants to verify that policies are actually followed. If staff cannot describe the complaints process, or if no complaints have been logged despite participants being on service for years, that raises questions.

Prevention: Review your policies with front-line staff. Make sure they understand them, can explain them, and actually follow them. A shorter policy that staff know is better than an extensive one they have never read.

5. No functioning complaints system

Auditors look for evidence that complaints are being received, recorded, and resolved. A complaint register that is empty is not evidence of satisfied participants — it is evidence of a non-functioning complaints process. Participants rarely complain formally to providers; they need to be actively encouraged and offered multiple ways to do so.

Prevention: Proactively offer participants and families information about how to make a complaint at every service agreement review. Record all feedback — even informal comments that lead to service changes — in your complaints system.

6. Participant records not current

Participant plans change. If your records reflect an old support plan, an outdated risk assessment, or a behaviour support plan from two years ago that has since been revised, that is a non-conformance.

Prevention: Set a regular review cycle for each participant's records. When a plan is reviewed, update the records in your system on the same day. Flag participants whose NDIS plan end date is approaching so you can confirm the plan has been renewed before the expiry date.

7. No evidence of participant rights and choice

The NDIS Practice Standards require that participants are informed of their rights, supported to make choices, and involved in decisions about their supports. Auditors look for evidence of this — not just a policy statement that says it happens.

Evidence might include: signed service agreements that explain rights, records of support plan review meetings, notes documenting participant preferences and choices, and evidence that participants can change providers without penalty.

The Audit Preparation Checklist

In the 3 months before an audit:

• Run a credential compliance report — identify any expired or expiring worker screening, WWCC, or training certificates
• Review incident records — ensure all reportable incidents were notified to the Commission and have management review documentation
• Check participant records are current — plan dates, risk assessments, behaviour support plans, service agreements
• Review complaints register — ensure any feedback received has been logged
• Test your staff knowledge — can frontline staff explain the incident reporting process, the complaints process, and participant rights?
• Verify insurance certificates are current and cover NDIS support delivery