Most Commonly Asked Questions from Existing NDIS Providers 

Summary

Once you’ve become a registered NDIS provider, the questions don’t stop.
“When should we start preparing for our renewal audit? How do we stay audit-ready all the time? What happens if we receive a non-conformance? Can we change our registration groups?“

These are just some of the questions we hear from existing NDIS providers. In this article, we answer the most common questions about NDIS mid-term audits, renewal (recertification) audits, internal audits, non-conformances, registration changes and ongoing compliance. You’ll also learn what NDIS auditors are looking for and why embedding compliance into everyday practice is the key to maintaining registration and reducing audit stress.

Key Points

• Existing NDIS providers commonly have questions about mid-term audits, renewal audits, non-conformances and ongoing compliance obligations.
• Learn what NDIS auditors assess during mid-term and recertification audits, and how the audit process differs.
• Find out when to start preparing for your NDIS renewal audit and why early preparation is essential.
• Discover practical ways to stay audit-ready year-round, rather than rushing to prepare before an audit.
• Understand why auditors are looking beyond policies and procedures to see how compliance is implemented in practice.
• Learn how to respond effectively to NDIS audit non-conformances by addressing the root cause, not just the symptoms.
• Understand when you can add or remove NDIS registration groups and the audit implications of changing your registration.
• See why internal audits and continuous improvement are essential for maintaining NDIS compliance.
• Explore how independent NDIS audit preparation and consulting support can help identify gaps and strengthen your systems before your next audit.

Being a registered NDIS provider is a little like owning a car. 

Getting registered is similar to passing your driving test. It’s a significant milestone, but it’s not the end of the journey. To stay on the road, you need regular maintenance, checks, and ongoing attention to ensure everything continues to operate safely and effectively. 

The same applies to NDIS registration. 

Once you’re registered, many providers start asking questions such as: 

• When is my next audit? 

• What happens if I receive a non-conformance? 

• How do I stay audit-ready? 

• Can I change my registration groups? 

• When should I start preparing for renewal? 

In this article, we’ve answered some of the most common questions we hear from existing NDIS providers, while also covering a few of the basics before we dive in.

What is a Mid-Term Audit? 

A mid-term audit is conducted approximately halfway through your three year certification cycle. 

The purpose of a mid-term audit is to confirm that your systems, processes and practices continue to meet the requirements of the NDIS Practice Standards, with a key focus on: 

• Governance and Operational Management,  

• Any non-conformances from the initial audit, and 

• ‘Highest’ risk supports, e.g. behaviour support. 

Importantly, auditors aren’t just reviewing policies and procedures. 

They want to see evidence that your systems are working in practice. 

This will include reviewing: 

• Incident management records 

• Complaints handling processes 

• Staff training and competency records 

• Risk management activities 

• Continuous improvement activities 

• Internal audits 

• Governance and oversight arrangements 

What is a Recertification or Renewal Audit? 

A recertification audit (sometimes called a renewal audit) occurs before your current registration period expires. 

This audit is more comprehensive than a mid-term audit and assesses your organisation against all applicable NDIS Practice Standards. It is a mirror image of the initial audit and includes a Stage 1 (Document Review) audit and a Stage 2 (onsite audit). 

The audit will examine: 

• Governance and management systems 

• Service delivery practices 

• Participant outcomes 

• Workforce capability 

• Risk management 

• Continuous improvement activities 

Many providers underestimate the amount of preparation required. 

A common mistake is waiting until the audit is scheduled before starting preparations. By this stage, significant gaps can be difficult to address effectively. 

When Should We Start Preparing for Our Renewal Audit? 

Earlier than most providers think. 

We generally recommend commencing formal preparation at least 6-12 months before your renewal audit. 

This allows sufficient time to: 

• Conduct internal audits 

• Review policies and procedures 

• Address compliance gaps 

• Update training records 

• Complete continuous improvement actions 

• Gather evidence across all registration groups 

Waiting until the final few months often creates unnecessary pressure and can result in rushed corrective actions. 

The strongest providers don’t prepare for audits. 

They operate in a way that keeps them audit-ready all year round. 

How Do We Stay Audit-Ready All the Time? 

This is probably the question we are asked most often. 

The answer is surprisingly simple: 

Don’t treat compliance as an event. 

Treat it as part of everyday business. 

Providers who scramble before audits often find themselves chasing documentation, updating overdue records and trying to recreate evidence after the fact. 

Instead, focus on building compliance into normal operations. 

Some practical ways to stay audit-ready include: 

Conduct Regular Internal Audits 

Internal audits help identify issues before an external auditor does. 

Regular reviews provide valuable insight into whether systems are working as intended and whether staff are consistently following procedures. 

Keep Risk Registers Current 

Risk management should be an active process, not a document that sits untouched until audit time. 

Review risks regularly and document actions taken. 

Monitor Incidents and Complaints 

Look for patterns and trends. 

Auditors often want to see not only that incidents are managed, but that lessons are being learned and improvements implemented. 

Keep Training Up to Date 

Training records are one thing. 

Competency is another. 

Providers should ensure staff not only complete training but can demonstrate understanding and application in practice. 

Maintain Continuous Improvement Activities 

Every complaint, incident, audit finding or participant suggestion creates an opportunity for improvement. 

Documenting these actions provides powerful audit evidence. 

What Happens If We Receive a Non-Conformance? 

Receiving a non-conformance during an NDIS audit is not uncommon. 

In many cases, providers are doing the right thing but have gaps in documentation, implementation or evidence. 

A non-conformance simply means the auditor has identified an area that does not fully meet the requirements of the NDIS Practice Standards. 

The key is how you respond. 

When addressing a non-conformance: 

1. Understand the root cause. 

2. Develop a corrective action plan. 

3. Implement corrective actions. 

4. Gather evidence of completion. 

5. Monitor effectiveness. 

One of the biggest mistakes providers make is treating the symptom rather than the cause. 

For example, if staff training records are missing, simply filing the records may not solve the underlying issue. The real issue may be the absence of a reliable training management process. 

Auditors want to see sustainable solutions. 

Can We Add or Remove NDIS Registration Groups Before Our Audit Cycle? 

Yes, in many circumstances, NDIS providers can apply to vary their registration scope during their registration period. 

Examples include: 

• Adding new registration groups 

• Removing registration groups 

• Expanding service offerings 

• Changing support categories 

However, the process and audit requirements will depend on the specific changes being requested. 

Additional audits may be required. 

Before making changes, it’s important to understand: 

• The operational requirements of the new registration group 

• Additional Practice Standards that may apply 

• Workforce and qualification requirements 

• Audit implications 

Seeking advice early can help avoid delays and unexpected compliance issues. 

Do We Need Internal Audits Between Certification Audits? 

Absolutely. 

Internal audits are mandatory. They are also one of the most effective ways to identify compliance issues before they become audit findings. 

An effective internal audit program helps providers: 

• Monitor ongoing compliance 

• Test whether systems are working 

• Identify emerging risks 

• Strengthen governance 

• Improve service quality 

Many providers engage external specialists to provide independent NDIS internal audit support and objective feedback. 

Should We Engage External Support for Audit Preparation? 

Not every provider requires external assistance. 

However, many providers find value in obtaining an independent review before a mid-term or renewal audit. 

An experienced NDIS audit consultant can help: 

• Identify compliance gaps 

• Conduct mock audits 

• Review evidence 

• Prepare staff for interviews 

• Support corrective action planning 

The goal isn’t to create more paperwork. 

It’s to ensure your systems genuinely demonstrate compliance in practice. 

Final Thoughts 

Successful providers don’t view audits as isolated events. 

They build strong systems, monitor performance, address issues early and continuously improve. 

When compliance becomes part of everyday operations, audits become significantly less stressful. 

Whether you’re preparing for a mid-term audit, planning for your next renewal audit, or looking to strengthen your internal systems, the key is starting early and maintaining momentum throughout your registration cycle. 

After all, audit readiness isn’t something you achieve a few weeks before an audit. 

It’s something you build every day.