Choosing the Right NDIS Auditor
Learn how to choose an approved quality auditor for your NDIS registration, why price alone can be a costly mistake, and what to ask about experience, process, and fees. The episode also breaks down Stage 1 and Stage 2 audits, participant sampling, and the practical checks that can save new providers time and stress.
Is this your podcast and want to remove this banner? Click here.
Chapter 1
The auditor is not just a box to tick
Will, EnableUs Community
[warmly] Welcome to the show. I'm Will, here with Winter. And Winter, I wanna start with the moment that catches a lot of new providers off guard: you've finally lodged your NDIS registration application, the NDIS Commission sends you your Initial Scope of Audit document... and suddenly one choice in front of you can affect your stress levels for months.
Winter, EnableUs Community
[curious] That phrase -- Initial Scope of Audit -- sounds very official, very intimidating. Is that basically the point where it stops feeling like paperwork and starts feeling real?
Will, EnableUs Community
[short pause] Exactly. That's when you need to choose your auditor. And a lot of people treat that like booking a tradie -- just find someone, get it done, move on. But this person, or really this audit body, is going to assess whether you meet the NDIS Practice Standards. They may review your documents, visit your sites, interview staff, and potentially speak with participants. So this is NOT just a box to tick.
Winter, EnableUs Community
[matter-of-fact] And the first hard rule here is simple: only approved quality auditors can assess you. Not consultants, not someone who says they've “done heaps of compliance work”, not a friend of a friend.
Will, EnableUs Community
[calm] Yep. Only Approved Quality Auditors. And this part matters too: those auditors are not part of the NDIS Commission. The scheme is managed by JAS-ANZ -- that's the Joint Accreditation Scheme of Australia and New Zealand -- on behalf of the Commission. JAS-ANZ accredits them, monitors them, and oversees compliance with the NDIS auditor guidelines and Code of Conduct.
Winter, EnableUs Community
[reflective] JAS-ANZ is the name I'd want written down if I were listening in the car. Because if someone sounds convincing on the phone, you still go back to the official source and check the approved list on the NDIS Commission website. Every time.
Will, EnableUs Community
[firm] Every time. The list changes. The source material even notes that JPS Audit Specialists was approved from 2020 to 2025 and is no longer on the approved list. So don't rely on an old recommendation or an outdated webpage. Verify it before you engage anyone.
Winter, EnableUs Community
[skeptical] Which brings us to the beginner mistake I completely understand, by the way: you get a few quotes, one number is much lower, and you think, “Beauty, that'll save me a bit.”
Will, EnableUs Community
[short pause] I get the temptation. Especially when you're building a new service and watching every dollar. But choosing on price alone can backfire badly. A cheaper option might not have strong NDIS sector experience. They might be unclear in how they explain the process. Or they may miss risks early that become expensive later, especially if non-conformities come up.
Winter, EnableUs Community
That word -- non-conformity -- sounds like one of those terms people nod at without really wanting to ask. In plain English, that's basically the auditor saying, “You don't meet the standard here,” yeah?
Will, EnableUs Community
That's it. A gap against the Practice Standards. And catching a problem in preparation is usually far cheaper than scrambling after it's formally identified mid-audit. That's why cheapest isn't always best. You're not just paying for a report. You're paying for a process that should be thorough, fair, and clear.
Winter, EnableUs Community
[reflective] I think that's the piece new providers need to hear. A good auditor shouldn't make the whole thing feel mysterious. They should be able to explain what's happening, what they're reviewing, what comes next, and what you need to do without wrapping it in fog.
Will, EnableUs Community
[warmly] Yeah. You want someone who makes a serious process feel understandable. Not casual -- it's still high stakes -- but understandable. If your early conversations already feel confusing, rushed, or vague, that's probably telling you something. The right fit can make the registration journey feel structured and manageable. The wrong fit can make it feel like you're being examined in the dark.
Chapter 2
The questions that save you time, money, and headaches
Winter, EnableUs Community
[curious] So if I'm a new provider and I've got the approved list open, what am I actually asking? Because “Are you good?” feels... a bit undercooked.
Will, EnableUs Community
[laughs] Slightly undercooked, yes. The biggest question is sector experience. Ask how many providers with similar registration groups and similar business size they've assessed. Not just “Do you do NDIS audits?” but “Have you assessed services like mine?” Disability support has its own language, context, and expectations.
Winter, EnableUs Community
And “similar supports” is the bit I'd zoom in on. Because there's a big difference between somebody who mostly sees low-complexity services and somebody who understands specialist or more complex supports. Same system, different realities.
Will, EnableUs Community
Exactly. Then ask about the audit process itself. Both verification and certification audits have a Stage 1 component. That's the documentation review. They're looking at your policies, procedures, records -- basically whether the organisation says the right things on paper and whether the required systems are there.
Winter, EnableUs Community
[questioning tone] Stage 1 is the paperwork test. So what makes Stage 2 different?
Will, EnableUs Community
[matter-of-fact] Stage 2 applies for certification providers. That's where the auditor validates that you're actually doing what your documents say you're doing. They may visit sites, interview staff, and speak with participants. It's the “show me in real life” stage.
Winter, EnableUs Community
And that's a really useful question to ask upfront, isn't it? “How do you handle Stage 1? Do you provide feedback before Stage 2?” Because if Stage 1 flags issues early, that can save a heap of grief.
Will, EnableUs Community
Yes. Ask that directly. Also ask how they communicate during the process. Are timelines clear? Are inclusions clear? Because cost can vary a LOT. Lower-risk verification audits might sit around $1,500 to $3,000. Higher-risk certification audits often start at $3,000 and can go beyond $10,000, especially with multiple sites, complex supports, or travel. Then mid-term surveillance audits can add another $1,500 to $5,000.
Winter, EnableUs Community
[sharp] That “beyond $10,000” number is the one people remember. And across a full registration cycle, with initial, mid-term and renewal audits, it can be $15,000 to $25,000 or more. So yes -- get at least THREE quotes.
Will, EnableUs Community
And compare what's included. Don't just compare the top-line dollar figure. Ask if travel is extra. Ask if extra document reviews are extra. Ask what happens if there are multiple sites. A quote that looks cheap can stop looking cheap once those extras appear.
Winter, EnableUs Community
[curious] There's another bit people get nervous about: participant involvement. The word “sampling” can sound clinical, but what does it mean here in normal language?
Will, EnableUs Community
[calm] It means participants are central to the audit. Auditors may seek their views, directly or indirectly, about the quality of supports and whether the provider is helping them meet their goals. The sampling method is opt-out, so participants are automatically included unless they choose not to be. Providers need to notify participants before the audit and give them that opportunity to opt out.
Winter, EnableUs Community
Opt-out is important. That's not “surprise, you're in the audit.” That's “you are included unless you say no,” and providers should ask auditors how they approach that sensitively -- especially for people with complex communication needs or cultural and linguistic diversity requirements.
Will, EnableUs Community
[warmly] Well put. And one last practical point: if a major non-conformity is found, you've got three months to address it before registration can progress. A minor one gives you longer and the process can continue. So the right auditor isn't there to make you feel trapped. They should give you clarity on what they're assessing, confidence in the process, and a fair shot at a smooth registration journey.
Winter, EnableUs Community
[softly] Which is maybe the best test of all: after the first conversation, do you feel more grounded... or more confused? Because registration is hard enough. Your auditor shouldn't be the foggiest part of it. [warmly] Thanks for listening.
