Most NDIS providers receive their audit notification 4–8 weeks in advance. Thirty days is enough time to get audit-ready if you work through the preparation systematically. AuditCore's Internal Audit AI runs the equivalent of this entire four-week process in 60 seconds — but understanding what the process involves helps you get far more out of the platform.
Week 1 — Run Your Internal Audit
The first thing to do is understand exactly where you stand right now. Do not wait until week three to discover a gap that takes two weeks to fix.
- Run AuditCore's Internal Audit AI — get a full S1–S4 compliance score in 60 seconds
- Review your non-conformance register — are there any open findings from previous audits?
- Check your CI Register — is your continuous improvement activity documented?
- Pull your last external audit report — did you address every corrective action?
- Identify your highest-risk areas and triage them for immediate attention
AuditCore's Internal Audit AI runs a full NDIS Practice Standards assessment against your live data — giving you a prioritised 30-day action plan with exactly what to fix before your auditor arrives.
Start Your Audit Readiness Check →Week 2 — Fix Your Policy Library
Policy gaps are the most common audit finding and the easiest to fix in advance. Auditors will check that you have all required policies, that they are current, and that staff can locate and reference them.
- Run AuditCore's Policy Gap Analysis — see which required policies are missing
- Check review dates on all existing policies — anything older than 12 months needs reviewing
- Update policies that reference outdated legislation or old NDIS Commission guidance
- Ensure every policy has been approved by your governance body and the approval is documented
- Check that your complaints management policy reflects your actual process
Week 3 — Audit Your Participant Files
Auditors will sample a selection of participant files and check them against Standard 3 requirements. Each file should tell a complete story — from intake and assessment through to current support delivery.
- Verify every participant has a current, signed support plan
- Check that support plans are linked to the participant's NDIS goals (not generic)
- Confirm risk assessments are completed and reviewed within the last 12 months
- Ensure consent forms are signed and on file for every participant
- Check that any mandatory reporting is documented — incidents, abuse, neglect
- Verify mealtime management plans exist for participants who require them
- Review a sample of case notes — are they written to standard?
Week 4 — Worker Compliance and Governance Evidence
Standard 2 (Governance) is the most complex standard and accounts for more audit findings than any other. Auditors will check your governance structure, your incident system, your HR records, and your risk management.
- Verify every worker has a current NDIS Worker Screening Check — AuditCore flags expired checks automatically
- Check WWCC and police check status for all relevant workers
- Confirm all workers have completed mandatory induction and the dates are documented
- Review your incident register — are all incidents logged, classified, and closed?
- Check that all Commission-reportable incidents were notified within five days
- Verify your risk register is current and that risks have been reviewed
- Pull your governance meeting minutes — evidence of active board/management oversight is essential
The Day Before Your Audit
Brief your team. Tell workers what to expect, what auditors will ask, and how to respond. Auditors are looking for consistent, genuine answers — not rehearsed scripts. Use AuditCore to print your compliance summary and have it ready.
- Print or export AuditCore's compliance dashboard as a summary document
- Prepare your evidence folder — organised by standard (S1, S2, S3, S4)
- Brief frontline workers: auditors may ask them about incidents, complaints, and participant rights
- Confirm your internet connection — auditors increasingly review live systems during audits
- Get a good night's sleep — panic on audit day does not help anyone
Every action item from your audit preparation automatically flows into the CI Register — creating an audit trail of completed improvements that auditors can review on the day.
See the CI Register →How AuditCore Compresses This Timeline
Providers using AuditCore do not start their 30-day preparation from scratch. Because AuditCore continuously monitors compliance — tracking incident deadlines, policy reviews, worker check expiry, and participant file completeness — the gaps that take most providers two weeks to find are already visible on the dashboard. The Internal Audit AI runs a full S1–S4 scan in 60 seconds and produces a corrective action plan. Most AuditCore providers are genuinely audit-ready within a week of their notification.