NDIS Self-Assessment: Policy, Practice, Evidence
Will and Winter unpack why the self-assessment is a compliance rehearsal, not a box-ticking exercise, and how the gap between policy and day-to-day practice can expose weak systems. They also explain how to answer with confidence by using your current reality, naming the gaps, and understanding what auditors look for on verification versus certification pathways.
Is this your podcast and want to remove this banner? Click here.
Chapter 1
The self-assessment is your compliance rehearsal
Will, EnableUs Community
Welcome to the show. I'm Will, here with Winter -- and Winter, I wanna start with the bit that makes providers squirm a little: the NDIS self-assessment is often the moment you find out whether your business has real compliance... or just very tidy documents.
Winter, EnableUs Community
[skeptical] "Very tidy documents" is such a polite way of saying somebody bought a policy template, popped their logo on it, and hoped for the best. [short pause] And honestly, auditors can smell that, can't they?
Will, EnableUs Community
They usually can. Because once you're preparing for registration, especially before audit, there has to be what I call the three-way match: policy, practice, and evidence. Your policy says what should happen. Practice is what your team actually does on a Tuesday afternoon when something goes wrong. Evidence is the trail that proves it happened -- forms, registers, case notes, training records, follow-up actions.
Winter, EnableUs Community
[curious] That three-way match -- policy, practice, evidence -- that's the bit I think people miss. They stop at number one. They've got a nice incident policy, a nice complaints policy, nice headings, nice definitions... and then you ask, "Okay, show me one real example," and the room goes quiet.
Will, EnableUs Community
Exactly. Take complaints handling. On paper, a provider might say, "We welcome feedback and complaints, we resolve them fairly, and participants can complain without fear." Beautiful sentence. But then you ask staff how a complaint gets logged, who reviews it, how timeframes are tracked, whether the participant was updated, whether the outcome was recorded -- and suddenly nobody's using the same process.
Winter, EnableUs Community
Or worse -- [leans in] the complaint got handled in a text message and a quick chat in the car park. Which means maybe the participant felt heard in the moment, but there is NO record. No register. No trend analysis. No evidence the organisation learned anything.
Will, EnableUs Community
That's it. And that gap matters because an auditor isn't only assessing whether you wrote the right words. They're looking at whether your organisation meets the Practice Standards in real life. If your policy says complaints are reviewed systematically, but you've got no complaints register and no documented actions, you don't look mature -- you look exposed.
Winter, EnableUs Community
[matter-of-fact] And I think this is the uncomfortable part for new providers: having a policy is not the same as having a system. A policy is the promise. A system is the people, the training, the steps, the records, the follow-up.
Will, EnableUs Community
Well said. Same with incident management. A provider might have a strong incident policy that explains reporting, escalation, and response. But if staff can't explain what counts as an incident, or minor incidents aren't being recorded consistently, or there's no evidence of review after the incident, then the policy is basically decorative.
Winter, EnableUs Community
[laughs softly] Decorative compliance. That one's gonna stick with me. Because that's really the risk, isn't it? You can look compliant at first glance and still reveal, through the self-assessment, that the day-to-day operation is a bit... improvised.
Will, EnableUs Community
[warmly] Yep. And that's actually the good news. The self-assessment isn't there to catch you out for sport. It's your rehearsal. It's the safest point in the process to discover that your staff need clearer workflows, your evidence is patchy, or your policy doesn't match reality yet.
Winter, EnableUs Community
So if you're filling it out and feeling a bit exposed, that doesn't mean you've failed. It probably means you're being honest enough to see the difference between "we have a policy" and "our team actually USES it." And that difference -- painful as it is -- is where the real prep begins.
Chapter 2
Complete it with confidence, not guesswork
Winter, EnableUs Community
[calm] So let's make this practical. If you're staring at the self-assessment and thinking, "How do I answer this without either overselling us or underselling us?" -- there's a simple method. Read the relevant Practice Standard. Answer from your CURRENT reality. Then name the gap and the action plan.
Will, EnableUs Community
I like that because it takes the drama out of it. Not "What do I wish was true?" Not "What will sound impressive?" Just: what does the Practice Standard require, what are we doing right now, what's missing, and what are we doing about it?
Winter, EnableUs Community
Exactly. And "current reality" is the key phrase. If your complaints process exists but staff training is only half done, say that. If your incident register has been created but hasn't been used consistently yet, say that. Auditors are generally looking for honest reflection and functioning systems -- not a fantasy version of your business.
Will, EnableUs Community
[questioning tone] And this is where pathway matters too. Because the depth of what you prepare depends on whether you're going through verification or certification.
Winter, EnableUs Community
Yes -- that's a big one. Verification audits are generally for lower-risk registration groups, and the evidence burden is narrower. Certification audits are for higher-risk supports, and they go deeper. There's still a Stage 1 component where documentation is reviewed, but for certification there's also Stage 2, where auditors validate that what you wrote is actually happening through site visits and interviews with staff and participants.
Will, EnableUs Community
So if you're on the certification pathway, "we have the document" is nowhere near enough. Stage 2 is where someone checks whether the lived service matches the paperwork. That's the three-way match again -- policy, practice, evidence -- but under brighter lights.
Winter, EnableUs Community
[responds quickly] Under VERY bright lights. Because if you say, "All complaints are logged and reviewed," and then staff can't explain the process or the register's half empty, that's not a wording issue. That's a system issue.
Will, EnableUs Community
And listeners should remember: auditors are not expecting perfection. What they want to see is that you understand your obligations, you have clear systems, and where something isn't fully mature yet, improvement is underway. Honest self-assessment is usually more credible than glossy overstatement.
Winter, EnableUs Community
I think that's such an important reset. People hear "audit" and imagine they need to present a flawless machine. But a better goal is a transparent organisation. One that can say, "Here's our process. Here's our evidence. Here's the gap we identified. Here's the date training is being completed. Here's who's responsible."
Will, EnableUs Community
[reflective] Right. Because if you identify the weakness first, you've got options. You can tighten the workflow, retrain staff, start using the register properly, gather missing evidence. If the auditor finds it first, you're now fixing it under pressure, and that is always more stressful -- and sometimes more costly.
Winter, EnableUs Community
So the strongest self-assessment isn't the one that makes you look perfect on paper. It's the one that helps you catch the problem before the auditor does. [softly] That's not busywork. That's how you walk into registration with a lot more confidence.
Will, EnableUs Community
And maybe with fewer decorative policies. [chuckles]
Winter, EnableUs Community
[laughs] We'll take substance over decoration any day. See you next time.