Audit
NDIS group and centre based provider: audit preparation (2026)
NDIS group and centre based providers seeking registration or renewal in 2026 must undergo an approved quality audit against the NDIS Practice Standards, including the new strengthened framework requirements. Auditors assess governance, participant rights, incident management, and restrictive-practice controls. Starting preparation at least six months before your audit date significantly reduces the risk of non-conformances.
Who this guide is for
If your organisation delivers group or centre based activities — such as day programs, social and community participation groups, life skills centres, or supported employment settings — the NDIS Commission classifies you as a provider delivering supports under the Group and Centre Based Activities support category. From 2026, the strengthened NDIS Practice Standards and revised audit framework place heightened expectations on how you govern, document, and demonstrate participant safety. This guide explains exactly what an approved quality auditor looks for and how to get your organisation ready.
The 2026 audit landscape: what has changed
The NDIS Commission has progressively strengthened the Practice Standards since their introduction. The 2026 framework reinforces several areas that are directly relevant to group and centre based settings:
- Participant rights and dignity — stronger requirements to demonstrate active upholding of rights, not merely a written policy.
- Restrictive practices — tighter evidence obligations around behaviour support plans, authorisation pathways, and monitoring records for any regulated restrictive practice used in group settings.
- Incident management — clearer expectations around identifying, recording, investigating, and reporting incidents, including near-misses that occur in shared environments.
- Worker screening and training — renewed emphasis that all workers in group settings hold current NDIS Worker Screening Checks and have completed NDIS Worker Orientation Module requirements.
- Quality and safeguards governance — boards and executive leaders are expected to demonstrate active oversight of quality and safety, not passive receipt of reports.
The mandatory registration deadline for previously unregistered providers delivering certain supports in group contexts has been a key driver of audit demand. If this applies to you, act promptly — audits book out well in advance.
What an approved quality auditor checks: the core modules
Approved quality auditors assess your organisation against the NDIS Practice Standards. For group and centre based providers, the audit typically covers the following modules.
Core Module — Rights and responsibilities
Auditors examine whether your organisation can evidence that participants understand and actively exercise their rights. Expect file reviews, staff interviews, and participant or nominee interviews. Common non-conformances include rights documentation that is signed but not explained in accessible formats, and missing evidence that participants have received and understood their rights handbook.
Core Module — Governance and operational management
Your governance framework — policies, procedures, board oversight mechanisms, risk management, and complaints handling — is reviewed in depth. Auditors look for a live quality management system, not a folder of policies last updated three years ago. Non-conformances frequently arise from outdated policies, absent complaint register reviews, or governance minutes that show no discussion of safety indicators.
Core Module — Provision of supports
Every participant must have a current support plan aligned to their NDIS goals. In group settings, auditors check that individual plans are not replaced by a generic "group program description." Each participant's outcomes, adjustments, and preferences must be individually documented, even where the activity is delivered collectively.
Core Module — Support planning
Planning records must demonstrate person-centred practice. Auditors will sample files and look for evidence of participant (or nominee) involvement in setting goals, consent to supports, and regular review cycles.
Supplementary Module — Implementing behaviour support
This module is almost universally triggered for group and centre based providers. Any use of a regulated restrictive practice — including certain de-escalation techniques, environmental restrictions, or mechanical restraints — must be authorised under state or territory law, documented in a behaviour support plan developed by a registered behaviour support practitioner, and monitored with regular review. Auditors check the register of restrictive practices, authorisation documentation, and staff training records.
Step-by-step audit preparation plan
- Book your auditor early. Approved quality auditors can have significant lead times, particularly for desk audits and certification audits. Contact the NDIS Commission or check the list of approved quality auditors on the Commission website to identify your options and confirm timelines.
- Conduct an internal gap analysis. Map every Practice Standard indicator relevant to your registration groups against your current policies, procedures, and evidence. Use the NDIS Commission's self-assessment tool as your starting framework.
- Audit your participant files. Pull a representative sample — including participants with complex support needs — and check that each file contains a current support plan, signed consent, up-to-date risk assessment, and (where applicable) a behaviour support plan with current authorisation documentation.
- Verify worker compliance. Confirm that every worker, volunteer, or contractor with more than incidental contact with participants holds a valid NDIS Worker Screening Check and has completed required training. Keep a register with expiry dates and refresh reminders.
- Review your incident register. Check that all incidents (including near-misses and participant-reported concerns) are captured, categorised correctly under the Commission's reportable incident definitions, investigated, and closed with documented learnings. Any reportable incidents must have been notified within required timeframes.
- Test your complaints system. Can participants and families easily raise concerns? Is there an accessible format? Auditors will look for a functioning complaints register, evidence of timely responses, and demonstration that complaints drive improvement.
- Prepare your governance evidence pack. Collate board meeting minutes, quality and safety reports presented to leadership, and records of any corrective actions taken. This pack demonstrates active governance rather than passive compliance.
- Brief your team. Staff interviews are a core part of certification and verification audits. Ensure workers understand the organisation's rights-based approach, know how to report incidents and complaints, and can explain their role in restrictive-practice oversight.
- Address findings before audit day. Close any gaps identified in your internal review. Document what was wrong, what you did, and the outcome. Auditors view genuine pre-audit improvement positively.
Common non-conformances in group and centre based audits
| Non-conformance area | Typical finding | How to address it |
|---|---|---|
| Individualised support planning | Group program description substituted for individual plans | Create individual goal-aligned plans for every participant; reference the group activity as a delivery method, not the plan itself |
| Restrictive practices register | Register incomplete or not updated after reviews | Assign a named owner; set calendar-based review reminders; link register entries to authorisation documents |
| Incident reporting timeliness | Incidents recorded internally but not notified to the Commission within required windows | Build a notification checklist into your incident procedure; train team leaders on reportable categories |
| Worker screening currency | Expired checks not flagged; register not maintained | Maintain a live register with expiry dates; set alerts at least 90 days before expiry |
| Governance oversight evidence | Board minutes show no substantive safety or quality discussion | Add a standing safety and quality agenda item; include incident data, complaint trends, and corrective actions |
A practical policy excerpt template: participant rights in group settings
The following is a realistic example of the type of participant rights policy statement an auditor would expect to see. Adapt it to your organisation's voice and context.
Policy: Upholding participant rights in group and centre based activities
[Organisation name] recognises that each participant in a group setting retains full individual rights, including the right to make decisions about their own participation, to raise concerns without fear of retribution, and to receive supports that reflect their personal goals and preferences. Staff facilitating group activities are responsible for ensuring that group dynamics, scheduling, and activity choices do not inadvertently override individual participant choices. Where a participant indicates — verbally or through supported communication — that they do not wish to participate in a scheduled activity, staff will immediately offer an alternative and document the participant's preference in their support record. Participant rights are reviewed with each individual at least annually and whenever their circumstances change.
Pulling it together before audit day
Organisations that perform well in NDIS audits share a common characteristic: they treat compliance as a continuous operational discipline, not a pre-audit scramble. Your quality management system should be generating real evidence of improvement and participant outcomes on an ongoing basis, so that when an auditor arrives, you are sharing what you already do — not assembling a paper trail in a hurry.
If your team needs a structured starting point, ndiscompliant.com.au offers a 136-document audit-ready SIL and centre based compliance kit covering policies, registers, checklists, and templates aligned to the current Practice Standards — a practical foundation for providers building or rebuilding their quality system ahead of 2026 audits.
Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.
Frequently asked questions
Does a group and centre based provider need a certification audit or a verification audit?
It depends on the registration groups you hold. Group and centre based activities typically sit in a higher-risk registration group and require a certification audit, which involves document review, staff interviews, and participant interviews conducted by an approved quality auditor. Check the NDIS Commission's registration group list to confirm which audit type applies to your specific supports.
How far in advance should we start preparing for an NDIS audit?
A minimum of six months is strongly recommended for group and centre based providers. This allows time to conduct a thorough gap analysis, update policies, close file deficiencies, verify worker screening, and address any issues with restrictive practice documentation before the auditor arrives.
Can a group program plan replace individual support plans for participants?
No. An NDIS approved quality auditor will expect to see an individual support plan for every participant, even where supports are delivered in a group setting. The group activity is a delivery vehicle; each participant's goals, preferences, consent, and outcomes must be documented individually.
What restrictive practices documentation is required for group settings?
Any regulated restrictive practice used in a group or centre based context must be documented in an individual behaviour support plan developed by a registered behaviour support practitioner, authorised under the relevant state or territory law, recorded in a restrictive practices register, and reviewed regularly. Auditors will check all four elements.
What happens if our audit finds a non-conformance?
The auditor will issue a finding and you will be required to submit a corrective action plan within a specified timeframe. Minor non-conformances may allow conditional registration while you remediate; major non-conformances can delay registration. The NDIS Commission retains the power to refuse or revoke registration where serious non-conformances are not addressed.
Are volunteers in our centre required to hold NDIS Worker Screening Checks?
Yes, if they have more than incidental contact with participants. The NDIS worker screening rules apply to workers and volunteers in risk-assessed roles, regardless of whether they are paid. Maintain a screening register that includes volunteers and verify currency before each person commences their role.
Keep reading
- NDIS group and centre based provider: documentation checklist (2026)
- NDIS group and centre based provider: policies and procedures you need (2026)
- NDIS group and centre based provider: pricing and funding basics (2026)
- NDIS group and centre based provider: registration requirements (2026)
- NDIS Audit Preparation Checklist (2026): A Guide for SIL and Registered Providers
Free: the SIL Readiness Pack
A checklist and a sample policy page, sent as a download. No sequence.