What an NDIS auditor actually asks you

Most first-time providers picture an audit as someone flipping through a folder. It's not. A big part of certification is the auditor talking to you and your staff — and that conversation is where unprepared providers come undone.

The questions you should expect

None of these are trick questions. But each one is checking that your practice is real, not just written down.

• "Walk me through what happens when there's an incident." They want a clear chain: notice it, make the person safe, record it, report it, review it.
• "How would a participant make a complaint?" They want to hear that it's easy, safe, and that you act on it — and that participants actually know how.
• "How do you protect a participant from abuse or neglect?" The most serious area in SIL. They want concrete safeguards, not good intentions.
• "How do you make sure staff are suitable?" Worker screening, references, induction, supervision.
• "How does a participant have a say in their supports?" Choice and control — shown through service agreements and reviews.
• "What happens in an emergency?" A plan that staff actually know, not a document nobody has read.

More example questions — by quality area

Auditors tend to follow the quality areas in sequence. Here's a broader picture of what they may ask across each area:

• Rights and responsibilities — "How do participants know about their rights?" / "Tell me about a time a participant made a decision you didn't agree with — what did you do?" / "How do you ensure a participant's cultural or religious needs are respected?"
• Governance and operational management — "Who is responsible for compliance in your organisation?" / "What happens if a key person is unavailable — how do you keep the service running?" / "How often do you review your policies and how do you record that?"
• Provision of supports — "Walk me through how you develop a support plan with a participant." / "How do you make sure the support delivered matches what the participant agreed to?" / "What do you do if a participant's needs change?"
• Support provision environment — "How do you check that the home environment is safe for the participant?" / "What maintenance checks do you do and how often?" / "If a participant raised a safety concern about their home, what would happen?"
• Workforce — "Show me your worker screening records." / "How do you supervise your support workers?" / "What training have your workers completed in the last 12 months?" / "How do you handle a complaint about a worker?"

What a strong answer sounds like — and what a weak one sounds like

The difference between a strong answer and a weak one isn't confidence — it's specificity and evidence. Here are two examples:

Weak answer: "We always document incidents as soon as they happen. Everyone knows what to do."

Strong answer: "When an incident occurs, the support worker completes our incident report form — here's a copy — within 24 hours. It goes to me as the manager. I then assess whether it needs to be reported to the NDIS Commission under the reportable incidents framework. All incidents, whether reportable or not, go into our incident register — here it is — and we review them monthly to look for patterns. Here's an example from last month."

Notice the strong answer names the document, mentions the register, explains the process and offers a real example. That's the formula: policy → record → real example.

How to prepare your staff

Your workers will likely be interviewed separately, without you in the room. That's by design — the auditor wants to know whether the practice is real, not just polished by management. Here's how to prepare them without coaching them to give scripted answers (which auditors can spot):

• Run a staff Q&A session using real scenarios — "What would you do if a participant had a fall during your shift?" Let them answer in their own words. Correct any gaps in their understanding of the actual procedure.
• Make sure every worker has read the key policies — Not just been handed them. Use your induction checklist to record that they've read and understood the incident, complaints and safeguarding policies specifically.
• Remind them it's not a test they can fail — The auditor is checking the organisation's systems, not judging individual workers. An honest answer of "I'm not sure, but I'd ask my manager" is fine; a confident wrong answer is worse than admitting uncertainty.
• Practice the incident chain out loud — "Notice it, make the person safe, fill in the form, tell the manager, report if required, review." When it's a physical habit, it comes out naturally under pressure.

The day-of logistics

A few practical things that will make your audit day smoother:

• Have your documents organised, not piled — Know where everything is. A folder per quality area works well. Being able to quickly produce the right document when asked makes a good impression and saves stress.
• Have real examples ready — One incident, one complaint, one supervision session, one support plan review. You don't need dozens — you need a few real, complete examples you can walk the auditor through.
• Don't try to bluff gaps — If something is missing, it's much better to acknowledge it and explain what you're doing about it. Auditors respect honesty. They're used to working with growing businesses.
• Ask questions yourself — The audit is a two-way conversation. If an auditor raises a concern, ask them to clarify what evidence would address it. This shows maturity and gives you something concrete to act on.

The trap: confident words, missing evidence

You can answer every question perfectly and still get a "needs improvement" if you can't show it. The strongest answers sound like: "Here's our policy, here's the register where we record it, and here's a real example from last month."

After the audit: what happens next

When the on-site day is done, the auditor goes away and writes their report. This usually takes a few weeks. The report will cover each outcome that was assessed, with a finding for each. You'll receive a copy. If there are non-conformities, you'll need to address them and provide evidence of the fix — this is called a corrective action. Your auditor should be clear about what evidence they need to see to close each corrective action.

Once all major non-conformities are resolved, the auditor submits their final report to the NDIS Commission, and the Commission makes the registration decision. The whole process from audit booking to registration can take a number of months, so factor that into your planning.

The mindset that makes audits manageable

Providers who approach their first audit with dread often discover it was less frightening than they'd imagined — especially if they prepared. The auditor is not trying to catch you out. They are checking whether the systems are real and working. If your team delivers good support and your records reflect that, the audit is just a conversation about what you do every day.

The providers who find it hardest are the ones who built the documents but not the practice — who have the policy but not the register, or the register but not the consistent habit. Bridge that gap, and the audit becomes manageable for almost any provider.

Practical audit-day tips

The day itself doesn't have to be stressful. A few things that help:

• Have water and snacks ready — A certification audit can run most of the day. Keep your energy up.
• Have a quiet, private space for staff interviews — The auditor needs to speak to your workers without you present. Arrange a suitable space beforehand.
• Don't hover — Give the auditor space to do their job. Being overly present or jumping in to answer questions on behalf of your staff creates a poor impression.
• Take notes during feedback — At the end of the audit, the auditor usually gives you verbal feedback before the formal report. Write it down. You'll want to act on it and having it in writing helps.
• Follow up promptly on any corrective actions — If the auditor identifies gaps, don't delay. A fast, thorough response shows good faith and moves the process forward.

The relationship between your audit and your participants' experience

It's worth stepping back and remembering why all of this matters. The audit exists because SIL participants are some of the most vulnerable people in the community. They live in their homes, often with limited ability to advocate for themselves, and they depend on you and your team to keep them safe, supported and respected. The Practice Standards and the audit process are the system society has built to make sure that happens consistently, not just when things are going well.

When you invest in doing the audit properly — the documents, the evidence, the staff training, the consistent practices — you're not just ticking a compliance box. You're building a service that genuinely looks after people. That's worth the effort, and most providers who go through the process come out the other side with a much better-run business as a result.

After your first audit: building on what you've learned

Your first certification audit is a learning experience, even if it goes smoothly. The auditor's report will highlight what's working and what could be stronger. Take that feedback seriously — not just the non-conformities you have to fix, but the suggestions and observations about areas that are merely adequate. Use them to improve.

Many providers find that their second renewal audit, two or three years later, feels dramatically easier — because by then, the systems are well-established, the evidence trail is deep, and the team knows what to expect. Getting to that point starts with taking the first audit seriously and using it well.

One thing you can do today

If you've read this far and you're feeling overwhelmed, here's a simple starting point: pick one question from the list above — the one that made you most uncomfortable — and work on it this week. Find the policy that should answer it. Check the register that should back it up. Test whether your staff could answer it if asked. One question, one week. That's how audit readiness is built — one gap closed at a time.

Preparation is the difference between dreading the audit and being ready for it.

Walk in having rehearsed these answers — with the documents and records to back them — and the audit stops being scary. It becomes a conversation you're ready for.