Guides

Audit preparation timing

How far before an NDIS audit should a small provider start preparing?

For providers planning around a known audit, renewal or registration date.

Short answer: Confirm your audit scope and date. List the documents and records you have. Then leave time to fill the gaps, put procedures into practice and review the evidence. See the sources.

Work backwards from a confirmed date

Start with your confirmed audit, renewal or registration date. Then count back the time you need for three things. Producing truthful evidence from real work. Closing the gaps you find. Letting the auditor ask for or sample material.

Set an internal review date before the evidence is due. If the external date is not confirmed, label your planning date an estimate.

Write down four dates: the known date, your submission date, the date your evidence will be ready, and your next internal review. The order below is our planning aid. It is not an official approval window.

Preparation checklist

1. Scope. Confirm your provider type, supports, sites, modules, workers, registration status and audit pathway. Keep the source and dated letters.
2. Evidence. List your policies, registers, worker screening, HR records, practice examples and index. Mark Not available, partial or Unsure honestly.
3. Owners. Give every control and every gap one owner. Note what each one waits on.
4. Sample. Take one redacted sample. Can an auditor see the practice, dates, owner and closeout?
5. Release. Before anything goes out, check the facts, privacy, scope, version dates and open questions.

If the date is close

Write down the deadline, where it came from, your scope and what is missing. Then split the work in two. Some of it can be done on paper. Some of it needs real work to happen first.

A consultant can organise your policies, index, response pack or action tracker. You have to run the controls and produce truthful practice evidence.

If the date is tight, decide what you need next. That might be a scope clarification, a written request for information, a triage of the notice, or a staged plan. Then confirm what you can finish before the deadline.

Common mistakes

• Treating your own planning date as the auditor's confirmed date.
• Counting pages in a policy folder instead of checking owners, registers and real examples.
• Knowing the audit date but not the scope, the missing evidence or who acts next.

Sources

• NDIS Quality and Safeguards Commission, Types of audits, accessed 25 August 2026. This supports the audit types and process; the preparation sequence above is Clearharbour practical guidance.