NDIS audits: the workforce evidence reviewers ask for

If your organisation is preparing for an NDIS registration or renewal audit, the workforce section is often where evidence gaps show up first. Auditors do not just want to see that you have a screening policy. They want to see that the policy is operating: that every worker in a risk-assessed role is screened, that records are current, and that you can show the status as it stands when the audit runs.

This guide covers the workforce evidence an approved quality auditor typically reviews, how it differs from the Aged Care audit picture, and how to keep that evidence audit-ready rather than scrambling at renewal.

Verification or certification: which audit applies

Before you become a registered NDIS provider, and at renewal, you are assessed against the relevant NDIS Practice Standards by an approved quality auditor. The type of audit depends on the supports you deliver.

• Verification audit. Required for providers delivering lower-risk, lower-complexity supports and services. This is largely a desktop review of documentary evidence against the Verification Module.
• Certification audit. Required for providers delivering one or more higher-risk or more complex supports. It involves a desktop review followed by an onsite assessment, sampling participant outcomes and workforce records.

Either way, workforce evidence is in scope. The depth of sampling differs, but the underlying expectation is the same: your people are screened, oriented and competent for the supports they deliver. The NDIS Practice Standards workforce checklist breaks down the relevant indicators in more detail.

Worker screening: the foundation

Workers in risk-assessed roles and key personnel must hold an NDIS Worker Screening Clearance. Registered providers are responsible for identifying and recording which of their roles are risk-assessed, and for ensuring only cleared workers are engaged in those roles.

An NDIS Worker Screening Clearance is valid for up to five years from the date of issue, unless it is suspended, cancelled or revoked. Workers can apply to renew up to 90 days before expiry, and employers receive a notification when a linked worker's clearance is approaching its expiry date.

The NDIS Worker Screening Check already incorporates a nationally coordinated criminal history component, so you do not need to hold a separate police check alongside it for the same purpose. For the difference between the two, see NDIS worker screening vs police check.

The worker orientation module

The worker orientation module, "Quality, safety and you", explains what workers must do under the NDIS Code of Conduct, framed from a participant's perspective. It is free, online and self-paced, and it is mandatory for staff of registered NDIS providers.

All registered providers should include the module in their induction process and encourage existing workers to complete it. On completion, a worker receives a certificate. For audit purposes, that certificate, or a training record showing completion, is the evidence to keep. The module is covered in more detail in our orientation module explainer.

NDIS Code of Conduct

The NDIS Code of Conduct sets out expected standards of behaviour for workers and providers delivering NDIS supports. Auditors look for evidence that your workforce understands and is held to the Code: induction content that references it, acknowledgement records, and processes for managing breaches. The orientation module reinforces the Code, but you should be able to show how the Code is embedded in your own induction and conduct management, not only that workers sat the module. See the NDIS Code of Conduct in practice for what this looks like day to day.

Qualifications, training and supervision

Each participant's support needs should be met by workers who are competent for their role and hold relevant qualifications, expertise and experience. On the workforce side, an auditor typically reviews:

• Qualification records appropriate to the supports delivered, including any profession-specific evidence required under the Verification Module.
• Induction and onboarding records showing each worker was inducted before delivering supports.
• Ongoing training records, including any mandatory or role-specific training your supports require.
• Supervision arrangements, particularly where a worker is operating under a supervision arrangement while a clearance is pending or for specific support types.

Some professions follow a documented evidence pathway rather than the full set of standards. AHPRA registration may form part of that evidence for registered health practitioners, but it never replaces worker screening. A worker in a risk-assessed role still needs a clearance. For the registration side, see AHPRA registration check.

Dated evidence and current-state framing

Auditors are looking for evidence that your systems are working, not just that they exist. That means dated, real records: training logs with completion dates, screening clearances with issue and expiry dates, induction sign-offs, supervision notes. A policy that describes what should happen is not evidence that it did.

It is worth being clear about what compliance status means. Your records show the position as it stands when the audit runs, or when a report is produced. A clearance that is current today is current today. Compliance is a current-state picture, not a reconstructed history of who was compliant on which past date. Build your evidence so that, at any point, you can show the present status of every worker in a risk-assessed role.

Keeping evidence audit-ready

The common failure mode is a spreadsheet that drifts out of date between audits. Expiry dates pass unnoticed, a new hire slips through without orientation, or a role is reclassified as risk-assessed without the screening to match. For more on why static tracking struggles here, see background checks vs ongoing compliance and worker compliance tracking for providers.

How Koora fits

Koora gives each worker a portable Career Passport: a reviewed set of credentials a worker carries between roles and providers. Police certificates, qualifications, training and NDIS clearances are reviewed, and the AHPRA register and state working with children check portals are verified at source. Source verification of NDIS Worker Screening Clearances is on Koora's roadmap, and clearances are reviewed in the meantime.

For providers, that means a current-state view of where each worker stands against the requirements for their role, with the dated evidence behind each item ready to produce when an auditor asks. Koora pre-clears and surfaces status. The legal duty to sight evidence, confirm risk-assessed roles and decide who you engage stays with you. Expiry tracking flags upcoming lapses before they become audit gaps, but it does not lower the rigour you are responsible for. Records connect out via API and webhooks, so workforce evidence can sit alongside your existing systems rather than in a parallel spreadsheet.