NDIS Human Resources Policy: What Auditors Look For

Why Your HR Policy Is a Priority Audit Item

When an approved quality auditor arrives at your organisation — whether for initial registration, re-registration, or a mid-term audit — your human resources policy sits near the top of the document request list. This is not administrative box-ticking. The NDIS Quality and Safeguards Commission treats workforce governance as a direct safeguard for participants. An inadequate HR policy signals systemic risk, not just paperwork gaps.

Under the NDIS Practice Standards, providers must demonstrate that their workforce is appropriately screened, trained, supervised, and supported. The strengthened 2026 framework places even greater weight on evidence — auditors are trained to look past policy statements and into the systems and records that prove those statements are lived reality.

The Six Areas Auditors Examine in an HR Policy

1. Worker Screening and Pre-Employment Checks

Auditors will verify that your HR policy explicitly requires — and your records prove — compliance with the NDIS Worker Screening requirements. This means:

• A current NDIS Worker Screening Check (or equivalent state/territory check) for all workers in risk-assessed roles before they commence unsupervised work with participants.
• A documented process for checking and recording clearance status, including expiry dates and renewal triggers.
• A clear policy position on what happens when a worker's clearance is pending, lapses, or is excluded — including immediate stand-down procedures.
• Reference to the NDIS Code of Conduct obligations that apply to all workers and contractors, not just employees.

A common non-conformance is policies that require checks at commencement but contain no mechanism for ongoing monitoring. Auditors will ask: how does your organisation know if a clearance is revoked between renewal cycles?

2. Recruitment and Selection Procedures

Your policy must describe a structured, values-based recruitment process. Auditors are looking for:

• Position descriptions that specify required qualifications, experience, and personal attributes aligned to the NDIS Code of Conduct.
• Interview and reference-checking frameworks that probe for attitudes toward participant rights, dignity, and safety.
• Documentation requirements — what records are created and retained for each recruitment decision.
• Probationary review processes with defined competency benchmarks.

Under the strengthened standards, auditors pay particular attention to whether organisations have embedded the NDIS Practice Standards' expectations around person-centred practice into their recruitment criteria — not simply assumed workers will absorb these values on the job.

3. Induction, Training, and Competency Development

A policy that says "all workers complete induction" without specifying content, timeframes, or sign-off mechanisms will attract a finding. Auditors expect to see:

1. A structured induction programme covering the NDIS Code of Conduct, mandatory reporting obligations, the organisation's incident management procedure, complaint handling, and participant rights.
2. Mandatory and role-specific training modules with completion timelines (e.g., restrictive practices training for workers in services where PBS plans are in place).
3. Evidence of ongoing professional development — not a once-per-year checkbox, but a system that responds to identified competency gaps and emerging Practice Standard requirements.
4. Records accessible to the auditor: individual training logs, sign-off sheets, or learning management system reports.

Refresher training on reportable incidents, abuse and neglect recognition, and restrictive practices is scrutinised particularly closely because these are the domains most directly linked to participant harm.

4. Supervision and Performance Management

Auditors distinguish between an organisation that monitors worker performance and one that genuinely supports worker development. Your policy should describe:

• Regular, documented supervision sessions — the frequency will depend on worker experience and role complexity, but the policy must set minimum expectations.
• A performance appraisal cycle linked to the organisation's quality objectives and the NDIS Practice Standards.
• A clear, fair, and documented disciplinary process, including how the organisation responds to Code of Conduct breaches or substantiated complaints involving a worker.
• A process for immediate response when a worker is the subject of an allegation — including interim management measures that protect participants without prejudging the outcome.

5. Workforce Wellbeing and Support

The 2026 strengthened framework places increased emphasis on provider obligations to support worker wellbeing as a condition of safe service delivery. Auditors will look for:

• Access to Employee Assistance Programme (EAP) or equivalent psychological support.
• Workload management policies that do not create conditions for worker burnout and associated participant risk.
• Mechanisms for workers to raise concerns about workplace safety, service quality, or management decisions without fear of reprisal — a whistleblower-adjacent provision aligned to the Code of Conduct.

6. Contractor and Agency Worker Management

Many providers assume their HR policy only covers direct employees. This is a significant non-conformance. The NDIS Practice Standards and Worker Screening requirements apply to the workforce broadly — including contractors and labour-hire workers. Your policy must address:

• How contractor screening compliance is verified before engagement.
• How contractors are inducted into your organisation's policies, particularly around incident reporting and participant rights.
• Contractual clauses requiring contractors to comply with the NDIS Code of Conduct.

What Auditors Actually Ask For: A Practical Document Checklist

The Most Common Non-Conformances

Based on the types of audit findings the NDIS Commission's audit framework is designed to catch, the most frequently observed HR policy non-conformances include:

• Out-of-date policies — HR policies last reviewed before the Practice Standards were strengthened, with no reference to current worker screening obligations.
• Missing scope clauses — policies that apply only to "employees" and do not cover contractors, agency staff, or volunteers in participant-facing roles.
• No stand-down procedure — the policy describes screening requirements but does not specify what happens if a worker's clearance is revoked mid-employment.
• Training policy not linked to records — a beautifully written training section, but no corresponding records system to prove completion.
• Supervision policy without frequency standards — policies that say supervision "will occur regularly" without defining what regular means in practice.
• No mechanism for allegation management — the policy does not address interim management steps when a worker is accused of a Code of Conduct breach.

Policy Template Excerpt: Worker Screening Clause

The following is an example of how a compliant worker screening clause might read within an HR policy:

5.2 NDIS Worker Screening

All workers engaged by [Organisation Name] in roles assessed as involving more than incidental contact with NDIS participants must hold a valid NDIS Worker Screening Check (or recognised equivalent) prior to commencing unsupervised work with participants. The People and Culture team maintains a Worker Screening Register, which is reviewed no less than monthly. Where a clearance is pending, the worker must be directly supervised at all times. Where a clearance expires or is withdrawn, the worker is stood down from participant-facing duties immediately, pending resolution. Contractors and labour-hire workers are subject to the same requirements; verification of clearance status is obtained in writing prior to engagement commencement.

Preparing for Your Next Audit

The most audit-ready HR policies are written for two audiences simultaneously: the worker who needs to understand their obligations, and the auditor who needs to verify the organisation is meeting the NDIS Practice Standards. This means plain language, clear scope, version control, and a direct link between every policy statement and a corresponding record system.

If you are building or overhauling your HR policy ahead of registration or re-registration, ndiscompliant.com.au offers a 136-document SIL compliance kit that includes a pre-built HR policy, worker screening register template, induction checklist, and supervision record forms — all aligned to the current Practice Standards framework.

Above all, treat your HR policy as a living document. The NDIS Commission expects providers to review and update policies in response to regulatory changes, internal incidents, and audit findings. A policy that has not been touched in several years is itself a red flag.