What Are the Real Benefits of an NDIS Audit?

Patty Wassennar, Associate, Engels Floyd Quality Consulting

Key Points: 

• NDIS audits are not just about passing — they are an opportunity to identify risks, strengthen systems, and improve the quality of services delivered to participants
• Independent audits provide valuable insight into governance, incident management, staff competency, and participant safeguards that organisations may not easily see from the inside
• Staff interviews are a critical part of the audit process — workers should understand day-to-day procedures confidently, not be “coached” on what to say
• Having policies in place is not enough — auditors assess whether systems are genuinely implemented and effective in practice
• Evidence is essential — organisations must be able to demonstrate that good work is happening through records, training logs, incident reports, improvement registers, and more
• Leadership plays a key role in building a culture of compliance and continuous improvement that flows throughout the organisation
• Providers should aim to be “audit ready” at all times, rather than scrambling to prepare only when an audit is approaching
• Preparatory or internal audits can help identify gaps early, build staff confidence, and reduce surprises during the formal audit process

Summary:

This article features insights from Patty Wassenaar, lead auditor and quality consultant at Engels Floyd Quality Consulting (EFQC), on how NDIS providers can approach audits with confidence. Rather than treating audits as a compliance hurdle, Patty explains how they can be a powerful tool for improving systems, strengthening workforce capability, and delivering better outcomes for participants.

When many NDIS providers hear the word “audit,” they immediately think: Stress. Pressure. Compliance. Non-conformances.

But according to Patty Wassenaar from Engels Floyd Quality Consulting (EFQC), audits can be one of the most valuable tools an organisation has to improve quality, strengthen systems, and build confidence.

And Patty knows audits.

With over 25 years of lead auditing experience across the Quality, Disability, Human Service and Mental Health sectors, Patty brings extensive expertise in Quality Management Systems, auditing, mentoring, and compliance.

Or as the EFQC team says:

“Patty is her name — and quality is definitely her game!”

Known for translating complex standards into plain, practical language, Patty helps providers understand that audits are not just about “passing” — they are about improving.

What Providers Are Asking

Q: Are NDIS audits just about compliance?

Not at all.

“A good audit should do much more than simply identify whether a provider meets a standard. It should help organisations understand how effective their systems really are.”

The NDIS audit process assesses whether providers are meeting the NDIS Practice Standards and delivering safe, quality services to participants.

Depending on the supports delivered, providers may undergo:

• Verification audits for lower-risk supports
• Certification audits for higher-risk or more complex supports

For certification providers, this includes:

• Stage 1 — review of system documentation
• Stage 2 — assessment of implementation and effectiveness in practice

But Patty says the real value lies in what organisations learn from the process.

Q: What are the biggest benefits of an NDIS audit?

Patty says there are several major benefits.

Independent insight

“Sometimes organisations become too close to their own systems to easily identify gaps or risks.”

An audit provides an independent review of:

• Governance systems
• Operational practices
• Risk management
• Incident and complaint handling
• Workforce capability
• Participant safeguards

Importantly, audits also identify strengths — not just weaknesses.

They also provide staff across all organisational levels with the opportunity to understand what they are doing well, in addition to those areas where further improvements are needed.

Continuous improvement

“Strong organisations use audits as part of an ongoing improvement journey, not just a compliance requirement every few years.”

Audits often uncover opportunities to:

• Improve consistency
• Strengthen documentation
• Clarify responsibilities
• Improve communication
• Reduce organisational risk
• Strengthen oversight and accountability

Patty says many providers are surprised by how much they learn about their organisation during the process.

As participant and staff interviews form part of the audit process, their discussions and feedback can help identify areas for improvement as well as organisational strengths.

Better participant outcomes

At the heart of the NDIS Practice Standards is participant safety and quality.

“Good systems are not just about compliance — they directly impact participant experience, safety, dignity, and outcomes.”

Effective audit processes can help providers:

• Improve service consistency
• Better manage incidents and complaints
• Strengthen safeguarding practices
• Improve staff competency and accountability
• Identify risks earlier

By speaking to participants, there is opportunity to find out what is working well for them, and those areas that could be improved. 

It is great for support staff to understand what participants believe they are doing well, as well as those areas that could be enhanced.

Q: Why do so many providers fear audits?

“Because many providers see audits as something done ‘to’ them, rather than something that can help them improve. They fear non-conformities rather than seeing these as areas of organisational risk and useful to aid with risk mitigation.

Audits are not about ‘individuals’ but are to ensure organisations are well structured, and competently staffed to safely and effectively meet participant support requirements”

Patty says fear often comes from uncertainty:

• Not knowing what auditors will look for
• Not understanding evidence requirements
• Worrying about gaps
• Confusing documentation with implementation

One of the biggest misconceptions she sees is providers believing that having policies automatically means they are compliant.

“Auditors don’t just assess whether policies exist — they assess whether systems are actually implemented and effective in practice.”

Q: What are the biggest mistakes providers make before an audit?

“One of the biggest mistakes is focussing on preparing for audits.  Good systems should be working effectively all the time – so providers should always be audit ready.  There should be continual reviews conducted to make sure providers are always ready – and being audit ready means a strong focus on providing quality and safe services, and supporting participants effectively”

Providers often focus heavily on policies and procedures just before audit, but forget that auditors are also assessing implementation and effectiveness in practice.  This approach poses risks to the organisation, as the documents and systems should always be monitored to make sure they are working well.

Common issues include:

• Policies that don’t reflect actual service delivery
• Staff not understanding organisational procedures
• Incomplete participant records or inconsistencies within participant files/records
• Inconsistent incident and complaint management
• Missing evidence of training or competency
• Lack of continuous improvement activities

“Auditors are looking for evidence that systems are effectively implemented and operating within the organisation — not sitting untouched in a folder.”

Q: How important is staff understanding during an audit?

According to Patty — extremely important.

“Staff interviews are one of the most valuable parts of the audit process because they provide insight into whether systems are genuinely embedded.”

Auditors may ask workers about:

• Incident reporting
• Complaints handling
• Participant rights
• Restrictive practices
• Emergency procedures
• Medication management
• Privacy and confidentiality
• Escalation processes
• How they access participant information
• How they are made aware of participant changes, or what they do if they notice changes in participants

Patty says providers should not “prepare” staff.

Instead:

• Ensure workers understand how policies/procedures operate in practice
• Provide regular training and refreshers
• Encourage staff to ask questions
• Create a culture where compliance is part of everyday practice
• Promote a ‘speak up’ environment where staff are not afraid to ask questions or suggest improvements

“Staff should feel confident discussing what they do and why they do it — and should not fearful of being interviewed.”

Q: What systems should providers focus on most before audit?

Patty says providers should focus on the systems that directly impact participant safety and service quality, as well as the Governance processes that keep the organisation operating effectively and managing risks.

These commonly include:

• Incident Management
• Complaints Management
• Risk Management
• Worker screening and training
• Participant records and support plans
• Medication management
• Emergency and disaster preparedness
• Governance and oversight systems
• Continuous improvement processes – including internal audits and       addressing system gaps

“Often the issue is not that systems don’t exist — it’s that they are inconsistent, poorly monitored, or not well understood across the organisation.”

Q: How important is evidence during an NDIS audit?

“Evidence is everything.”

Patty explains that providers may believe they are doing the right thing operationally, but if they cannot demonstrate it through records or implementation evidence, auditors cannot verify conformity.

Examples of evidence may include:

• Training records
• Meeting minutes
• Incident reports and investigations
• Risk assessments
• Participant feedback
• Internal audits
• Improvement registers or records that show improvements
• Supervision records
• Action plans and follow-up activities

“Good organisations don’t just do the work — they capture evidence that demonstrates the work has occurred. Good organisations also adapt and change processes to address weaknesses – so the system is regularly updated as needed, not just checked at audit time”

Q: What role does leadership play in audit success?

Patty says leadership is critical.

“Strong compliance cultures always start at leadership level.”

Auditors will often assess whether leaders:

• Understand organisational risks
• Monitor incidents and complaints
• Review trends and data
• Drive continuous improvement
• Support workforce capability
• Promote participant-centred practice
• Supervise staff and support their development

“When leadership treats quality and safeguarding seriously, that culture usually flows throughout the organisation.”

Q: Can a good audit process actually strengthen workplace culture?

Patty believes absolutely.

“When approached properly, audits can create stronger accountability, better communication, and clearer expectations across teams.”

Providers often report benefits such as:

• Improved staff confidence
• Greater role clarity
• Better consistency in practice – particularly across different       service locations or teams
• Improved documentation – creating good habits
• Increased focus on participant outcomes
• Stronger governance oversight

“The best organisations use audit findings as opportunities to grow — not as criticism. Gaps identified in audits are ‘organisational risks’ so are there to assist with improvement”

Q: Can providers prepare before their formal audit?

Absolutely — and Patty strongly encourages it – although having good ‘audit ready systems’ all the time is, of course, equally important.

At EFQC, providers often undertake preparatory audits or internal audits before their formal NDIS audit.

These reviews help organisations:

• Identify gaps early
• Understand audit expectations
• Test implementation of systems
• Build staff confidence
• Reduce surprises during formal audit

One EFQC client, Guy Turnbull from Viva Mutual, reflected on the value of their preparatory audit experience:

“The Engels Floyd trial audit response gave us a great checklist of what still needed to be addressed, but also gave us the confidence to know that our systems and processes, our policies were fit for purpose and we could enter the formal audit process with a level of confidence.”

Patty says this confidence is incredibly important.

“Preparation helps providers move into audit feeling informed, organised, and clearer about where they stand. Sometimes providers and staff lack confidence, so a preparatory audit can help them to ‘be confident’ in providing evidence as part of audit processes”

Q: What advice would you give providers approaching audit?

Patty’s advice is simple:

“Don’t view audit as a test you either pass or fail. View it as an opportunity to strengthen your organisation.”

She encourages providers to:

• Engage openly in the process
• Focus on implementation, not just paperwork
• Involve staff in quality improvement
• Learn from findings
• Treat compliance as ongoing, not one-off

And perhaps most importantly: PLAN– Remember the 5P’s – proper planning prevents poor performance.  Formal audits require engagement with appropriate staff, review of records and interviews with participants.  Ensure you work with the external auditor on the plan, so you have the right people in the right place at the right time – do demonstrate evidence.  This includes scheduling participant interviews too!

“The strongest organisations are usually not the ones pretending to be perfect — they’re the ones willing to reflect, improve, and continuously strengthen their systems.

Well prepared organisations and well planned audits run smoothly.  Try to make everyone’s work easier by being prepared and having the right people available to demonstrate how the organisation meets requirements.”

Final Thoughts

NDIS audits should not simply be viewed as regulatory requirements.

When approached properly, they can provide enormous value by helping organisations:

• Strengthen systems and governance
• Improve participant safeguards
• Build workforce capability
• Reduce organisational risk
• Improve consistency and accountability
• Promote continuous improvement across the organisation

At EFQC, we believe good auditing is not just about compliance.

At Engels Floyd, we work alongside organisations as an experienced NDIS provider consultant, assisting providers with staff training, preparatory audits, internal audits, governance and quality reviews, gap analyses, corrective action support, and ongoing compliance mentoring and coaching.

If your organisation would like support preparing for an upcoming NDIS audit, understanding your current level of compliance maturity, or strengthening your systems and governance frameworks, our team can help. Book a consultation with our team today.