Audit
NDIS Mid-Term Audit 2026: What SIL Providers Must Prepare For
An NDIS mid-term audit is a mid-registration-cycle desk or site audit conducted by an approved quality auditor to verify ongoing compliance with the NDIS Practice Standards and Code of Conduct. For 2026, the strengthened framework means auditors scrutinise governance, incident management, restrictive practices, and workforce screening more rigorously than in previous cycles.
What Is an NDIS Mid-Term Audit?
Registered NDIS providers operating under a three-year registration cycle are subject to more than a single certification audit at renewal. Depending on their registration group risk rating, providers may be required to complete a mid-term audit — sometimes called a surveillance audit or mid-cycle audit — roughly halfway through their registration period. This audit is conducted by an approved quality auditor (AQA) appointed by the NDIS Quality and Safeguards Commission.
For Supported Independent Living (SIL) providers and other higher-risk registration groups, the mid-term audit is not optional. It functions as a formal check that the systems, policies, and workforce practices evidenced at certification are still in place — and that any corrective actions from the initial audit have been addressed.
In 2026, the stakes are higher than previous cycles. The NDIS Commission's strengthened Practice Standards, which took effect progressively from late 2024 and into 2025, introduced more specific outcome indicators and a greater emphasis on evidence of lived implementation rather than documented intent alone.
Who Must Complete a Mid-Term Audit in 2026?
Your obligation to complete a mid-term audit depends on your registration group risk rating assigned by the NDIS Commission. SIL providers universally fall into the higher-risk tier, which requires a certification audit at initial registration and a mid-term audit before renewal. Providers offering:
- Specialist Disability Accommodation (SDA) alongside SIL
- Behaviour support planning services
- Restrictive practice implementation
- High-intensity daily personal activities
…are subject to the most comprehensive audit scope. If you are unsure of your audit type and timing, your registration certificate issued by the NDIS Commission specifies your next audit due date. You can also verify this through the myNDIS provider portal or by contacting your AQA directly.
What Approved Quality Auditors Check in 2026
Auditors assess evidence against the NDIS Practice Standards (the legislative instrument under the National Disability Insurance Scheme Act 2013) and the associated Quality Indicators. For SIL providers, the following modules receive the closest scrutiny:
1. Rights and Responsibilities
Auditors verify that each participant has access to information about their rights in a format they can understand, and that staff can demonstrate how they uphold participant choice and control in daily practice — not just in policy documents.
2. Governance and Operational Management
This module covers complaints management, incident management, and continuous improvement systems. Auditors will sample actual incident records, checking that notifications to the Commission were made within prescribed timeframes and that investigations were conducted and documented adequately. Under the strengthened framework, auditors look beyond whether a policy exists to whether it has produced measurable improvement outcomes.
3. Provision of Supports
Service agreements, support plans, and daily support notes are reviewed for evidence that supports are delivered as agreed and that changes in participant circumstances are responded to in a documented, timely way.
4. Support Provision Environment
For SIL specifically, this covers the physical environment of the home, safety planning, medication management, emergency and evacuation procedures, and infection control protocols. Auditors typically conduct site visits for SIL providers.
5. Safeguarding of Participants
This is the area receiving the most attention under the 2026 strengthened framework. Auditors examine:
- NDIS Worker Screening Check currency for all workers and volunteers in risk-assessed roles
- Mandatory reporting training completion records
- Restrictive practice registers, authorisation documentation, and reduction plans
- Evidence that the provider has reported all reportable incidents, including use of unauthorised restrictive practices, to the Commission
6. Behaviour Support
Where a provider implements behaviour support plans authored by a registered behaviour support practitioner, auditors verify that the plans are current, authorised under the relevant state or territory's regulatory framework, and that all implementing staff have been trained on the individual plan.
Common Non-Conformances Found at Mid-Term Audits
Based on the NDIS Commission's published guidance and sector experience, the most frequently identified gaps at mid-term audits for SIL providers include:
- Stale or unsigned service agreements — agreements not reviewed when participant circumstances changed or support packages were re-planned.
- Incomplete worker screening records — workers whose clearances have lapsed or where the provider cannot demonstrate verification was conducted before the worker commenced in a risk-assessed role.
- Incident notifications not lodged within required timeframes — particularly for reportable incidents involving injury, unlawful physical contact, or unauthorised restrictive practices.
- Restrictive practice registers not maintained — practices being implemented without written authorisation or without a corresponding behaviour support plan in place.
- Complaints register gaps — complaints recorded verbally but not entered into the register, or no evidence of resolution and outcome communicated to the complainant.
- Support plans not reviewed after significant events — hospitalisation, change in living situation, or changes to a participant's NDIS plan without a corresponding update to the provider's support plan.
- Training records incomplete — mandatory training such as the NDIS Code of Conduct module, infection control, or medication administration not completed by all relevant staff or records not retained.
Step-by-Step: How to Prepare for Your 2026 Mid-Term Audit
- Confirm your audit due date and scope. Log in to the myNDIS provider portal or contact your AQA. Confirm whether you require a desktop audit, a site visit, or both. SIL providers almost always require a site visit component.
- Map the Practice Standards modules to your evidence. For each Quality Indicator in the relevant modules, identify where your evidence lives — which policy, which register, which staff training record.
- Run an internal mock audit. Appoint someone not responsible for daily compliance to ask the same questions an auditor would ask. Pull 10 participant files at random and check for complete, current documentation.
- Audit your worker screening register. Every person in a risk-assessed role must have a current clearance before they deliver supports. Export your register and flag anyone whose clearance expires within the next six months.
- Review your incident and restrictive practice records. Confirm all reportable incidents from the past 12 months were notified to the Commission within required timeframes. Confirm all restrictive practice authorisations are current and that behaviour support plans name the implementing provider.
- Update service agreements and support plans. Any agreement more than 12 months old without a review notation should be refreshed and re-signed with participants.
- Prepare staff. Workers may be interviewed by the auditor. Ensure all staff understand the Code of Conduct and can explain their reporting obligations without referencing a script.
- Organise your document library. Auditors typically request an evidence bundle in advance of the site visit. Prepare a master index so you can locate any document quickly during the audit day.
What Happens If You Have Non-Conformances
A mid-term audit resulting in minor non-conformances will typically generate a corrective action plan agreed between the provider and the AQA. The Commission is notified of the audit outcome. Where non-conformances are significant — particularly in safeguarding or restrictive practices — the Commission may impose conditions on registration, suspend registration, or in serious cases, commence revocation proceedings.
It is important to treat any corrective actions from your previous certification audit as high priority. Auditors will specifically check whether those actions have been closed at the mid-term audit. Unresolved corrective actions from a prior audit compound risk at renewal.
Preparing Your Document Library
A well-organised evidence library is the single biggest time-saver on audit day. Your library should contain, at minimum:
| Document Category | Key Items |
|---|---|
| Governance | Complaints register, incident register, continuous improvement log, meeting minutes |
| Workforce | Worker screening register, training matrix, position descriptions, induction records |
| Participant records | Service agreements, support plans, risk assessments, consent forms |
| Restrictive practices | Authorisation letters, behaviour support plans, monitoring records, reduction plans |
| Environment | Safety audit records, medication management logs, emergency plans |
| Policies | All policies referenced in the above, with version control and review dates |
Providers who find assembling this evidence package time-consuming may benefit from a structured compliance kit. The 136-document SIL compliance kit at ndiscompliant.com.au is built around exactly the document categories auditors request, with policies, registers, and templates pre-mapped to the NDIS Practice Standards Quality Indicators.
Key Dates and Ongoing Obligations
The NDIS Commission publishes guidance on audit timelines through its website. Providers should not wait for a reminder from the Commission — it is the provider's responsibility to initiate the audit with an AQA in sufficient time before the due date. Leaving the audit booking too late can result in a registration lapse, which prevents lawful delivery of registered supports.
Staying audit-ready is a continuous obligation, not a pre-audit sprint. The goal of the strengthened 2026 framework is to see compliance embedded in daily operations so that an auditor could walk in on any given day and find the same standard of evidence.
Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.
Frequently asked questions
How often do SIL providers need a mid-term audit under the NDIS Commission?
SIL providers are classified as higher-risk and typically require a certification audit at initial registration or renewal, plus a mid-term (surveillance) audit approximately halfway through the three-year registration cycle. The exact timing is specified on your registration certificate and confirmed by your approved quality auditor.
What is the difference between a certification audit and a mid-term audit?
A certification audit is the full assessment against all relevant NDIS Practice Standards modules conducted at registration or renewal. A mid-term audit is a targeted check — usually narrower in scope — that verifies your systems remain functional and that any previous corrective actions have been addressed. SIL providers generally require a site visit for both.
Can the NDIS Commission cancel my registration if I fail a mid-term audit?
Yes. Significant non-conformances identified at a mid-term audit are reported to the NDIS Commission, which has powers under the NDIS Act to impose conditions on registration, suspend registration, or commence revocation. Minor non-conformances typically result in a corrective action plan with a set timeframe.
Do workers need a current NDIS Worker Screening Check for the mid-term audit?
Yes. Every worker and volunteer in a risk-assessed role must hold a current NDIS Worker Screening clearance before delivering supports. Auditors will review your worker screening register and may cross-reference individual clearances through the national database. Clearances that have lapsed are a common non-conformance.
What should I do if I discover gaps in my compliance documentation before the audit?
Address gaps as quickly as possible and document what you have done. Do not backdate records — auditors are trained to identify retrospective documentation and it significantly worsens audit outcomes. Where a gap cannot be rectified in time, be transparent with your AQA and present a realistic corrective action plan.
Are restrictive practices specifically assessed at mid-term audits for SIL providers?
Yes, restrictive practices receive close scrutiny at every audit for SIL providers. Auditors check that every restrictive practice being implemented has valid state or territory authorisation, is documented in a behaviour support plan authored by a registered practitioner, and that the provider reports all use of restrictive practices to the NDIS Commission as required.
Keep reading
Free: the SIL Readiness Pack
A checklist and a sample policy page, sent as a download. No sequence.