NDIS Practice Standards, explained in plain English

Open the NDIS Practice Standards and you'll find phrases like "each participant accesses supports that respect their culture, diversity, values and beliefs." True, important — and almost useless when you're trying to work out what to actually do. Let's translate.

What the Practice Standards really are

They're the benchmark your auditor measures you against. They're grouped into quality areas, and each one has "outcomes" you're expected to meet. You don't get marked on intentions — you get marked on evidence.

Verification vs certification: which audit do you need?

Before you do anything else, it helps to know which type of audit applies to you. There are two pathways:

• Verification — A lighter-touch, mostly document-based review. Generally applies to lower-risk supports where you're not working intensively or intimately with participants. A desk review rather than a site visit.
• Certification — A more thorough process that includes on-site visits, staff interviews and participant interviews. Required for higher-risk supports including SIL. This is the one that most small SIL providers are heading toward.

If you're delivering SIL, it's almost certainly certification. That means the auditor will visit your service, talk to your staff and — with consent — talk to participants. A folder of clean documents is necessary but not sufficient.

The core module, in everyday language

• Rights and responsibilities — Do you treat people with dignity, protect their privacy, and let them make their own choices? Show it with your privacy policy, consent forms and a clear code of conduct.
• Governance and operational management — Is the business actually run properly? Show it with risk management, a continuity plan, defined roles and record-keeping.
• Provision of supports — Are supports planned, delivered and reviewed with the participant? Show it with service agreements, support plans and progress notes.
• Support provision environment — Is the place safe, clean and suitable? Show it with safety checks, incident records and emergency procedures.

"They say X, you show Y" — more worked translations

Here are some of the most commonly misunderstood outcomes, and what they mean in practice:

• "Participants are supported to exercise choice and control" — This means each person's service agreement is individually negotiated, not a take-it-or-leave-it form. Show: a signed service agreement with the participant's goals in their own words, and notes from any review meetings.
• "The provider has a complaints management system that participants can access" — This means participants know how to complain — not just that a complaints policy exists. Show: an Easy Read complaints brochure given to each participant, a signed acknowledgement, and at least one entry in your complaints register (even if it was a minor issue).
• "The provider identifies and manages risks" — This means a live risk register that is actually reviewed, not a document you wrote once and filed. Show: a risk register with dates, updated risk ratings, and actions taken. Individual participant risk assessments are also expected.
• "The provider delivers supports in a manner consistent with relevant laws" — This is about worker screening, privacy, mandatory reporting and employment law. Show: current NDIS Worker Screening clearances for everyone delivering supports, and evidence of mandatory reporter training.
• "Workers are trained and supported" — This isn't just about qualifications. It's about ongoing supervision and professional development. Show: supervision records with dates and topics, and a training register for each worker.

Supplementary modules: when do they apply?

Beyond the core module, some providers need to meet additional supplementary modules depending on the supports they deliver. For small SIL providers, the most relevant ones are:

• High-intensity daily activities — If your workers provide complex bowel care, enteral feeding, tracheostomy management or other clinical tasks, there are additional requirements around staff competencies and clinical governance. This is a significant extra layer and is worth being honest about upfront when you apply.
• Specialist behaviour support — If any participant has a behaviour support plan involving regulated restrictive practices, additional requirements apply. Even if you're not the behaviour support provider, you may need policies around implementing and monitoring the plan.

If none of those apply to your service, the core module and the SIL-specific outcomes are your focus. Don't over-complicate it — know your scope and build evidence for that scope.

How an audit is actually scored

Auditors don't just mark you pass or fail on the whole thing. Each outcome gets a finding: either "met" or "not met." If something is not met, you'll typically receive a non-conformity — either a major or minor one. Major non-conformities (usually things that put participants at risk) need to be resolved before certification is granted. Minor ones may have a timeframe to correct. The goal isn't perfection; it's demonstrating that your systems are real, working and proportionate to your service.

The phrase that trips everyone up: "evidence"

Auditors don't want to hear that you "always" do something. They want to see it — a signed agreement, a dated incident report, a completed induction checklist. A policy that says the right thing but has no records behind it is a fail waiting to happen.

A simple test you can run today

Pick any quality area from the list above. Now ask yourself: if an auditor walked in tomorrow and asked to see evidence for that area, what would you hand them? A document with the right words in it is a start. A document plus a completed register or signed form showing it happened is what you need. If you have the document but not the evidence, that's your next priority.

Building your quality management system over time

The Practice Standards aren't just an audit checklist — they're the framework for running a genuinely good service. Providers who understand them this way tend to find audits much less stressful, because they're already doing what the Standards require as a matter of routine.

A quality management system doesn't need to be complicated. For a small provider, it can be as simple as:

• A policy folder — Physical or digital. All your policies and procedures in one place, clearly named, with version dates.
• A set of registers — Incident, complaints, risk, conflict of interest, quality improvement. Used regularly, not just when an audit looms.
• A training register — A record of every training session, including dates, topics and who attended.
• A supervision log — A record of regular one-on-one supervision with each worker, including key discussion points and any actions agreed.
• An annual review calendar — A schedule for reviewing each policy at least once a year and recording that the review happened.

None of this is exotic. It's the kind of system that naturally grows as your business grows, as long as you build the habits early.

Getting help when you're stuck

The Practice Standards can still feel overwhelming, even after reading a plain-English guide like this. If you're stuck on a specific quality area or unsure whether your evidence is strong enough, there are options. The NDIS Commission's own website has guidance materials. Some disability peak bodies offer workshops and webinars for small providers. And tools like NDIS Ready exist specifically to help small providers build the evidence base without spending months doing it from scratch.

Questions new providers ask all the time

"How long does the certification audit process take from start to finish?" There's no fixed answer, but from the time you submit your application to the Commission to the time you receive a registration decision, providers commonly report a process of several months. The bulk of that time is the document preparation and evidence-building phase before the audit itself. The on-site audit day (or days, for larger services) is typically just one part of the process.

"Can I start delivering SIL while my registration is being processed?" Whether you can continue to deliver supports to existing plan-managed or self-managed participants while working through registration depends on the specific rules in place at the time. Don't assume — check with the NDIS Commission directly or get advice.

"Do all my workers need to be fully qualified?" Not necessarily. Qualifications are desirable and relevant to SCHADS classification, but the Practice Standards focus more on whether workers are screened, inducted, supervised and competent for the supports they deliver. A worker without a formal qualification who is thoroughly inducted, closely supervised and demonstrably competent may satisfy the requirements for certain tasks. High-intensity supports are the exception — those have additional competency requirements.

"What if my policy doesn't cover something an auditor asks about?" Be honest. Acknowledge the gap and explain what you're doing to address it. Auditors are not looking for perfection — they're looking for a genuinely functioning system and a provider who understands their obligations. A candid response combined with a clear remediation plan is far better than a bluff.

The Practice Standards as a tool, not just a hurdle

Providers who get the most out of the registration process are the ones who use the Practice Standards as a management tool, not just a compliance checklist. The quality areas are, at their core, a framework for running a good service: looking after participants, looking after staff, managing risk, learning from mistakes, and staying financially viable. All of the things a small business owner should be doing anyway.

When you build your document library and evidence trail with that mindset — not "what do I need to pass?" but "what do I need to run this well?" — compliance stops feeling like overhead. It becomes part of how the business works. And that's exactly the result the Practice Standards are designed to produce.

A self-check you can do right now

Before you close this article, pick one quality area from the core module. Write down the name of the document you'd hand an auditor for each outcome. Then go and physically find that document. Is it up to date? Does it have your organisation's name on it? Is there any accompanying evidence — a register entry, a signed form, a training record — that shows it's actually in use?

If yes to all three: you're in good shape for that quality area. If no to any of them: you've just found your next priority. That's the practical value of understanding the Standards — you can self-diagnose, fix the gap, and move on. No guesswork required.

The Practice Standards aren't out to get you. They're a checklist of "can you prove it?" Once you see them that way, getting ready stops feeling like guesswork.