Back to Articles
AI Automation

NDIS Mid-Term Audit: What to Expect at 18 Months and How to Prepare

NDIS Mid-Term Audit: What to Expect at 18 Months and How to Prepare

CareVisor

Editorial

01-10-2026
Published 01-10-2026

An NDIS mid-term audit is a certification audit that certified NDIS providers must start no later than 18 months after their registration period begins, under section 13B of the NDIS (Provider Registration and Practice Standards) Rules 2018. It's usually conducted on-site and focuses on governance and operational management, plus any areas flagged at your last audit. Providers on the verification pathway don't need one.

Find your registration certificate and look at the start date. Add 18 months.

That's the latest date your mid-term audit can begin. Not finish, begin.

Most certified providers know the audit exists. Fewer realise how early they need to book it. Two approved quality auditors left the market in 2026, and every unregistered SIL provider applying by 1 October 2026 needs a certification audit too. Auditor calendars are full.

This guide explains who needs a mid-term audit, when it's due, what the auditor checks, what it costs, and a checklist to get ready.

What is an NDIS mid-term audit?

An NDIS mid-term audit is a quality audit, conducted halfway through a certified provider's three-year registration, to check that the systems that passed certification are still working. It uses the certification method, so the auditor assesses how your practice compares against the NDIS Practice Standards.

Who audits NDIS providers? Independent approved quality auditors, not the NDIS Quality and Safeguards Commission itself. You choose and pay the auditor. They report their findings to the Commission, and the Commission makes any registration decisions. The Commission's types of audits guidance explains each pathway.

Who needs an NDIS mid-term audit, and who doesn't?

Provider

Mid-term audit?

Certified providers (for example SIL, personal care, behaviour support)

Yes, starting no later than 18 months into registration

Verification pathway providers (lower-risk supports)

No

Providers delivering only early childhood early intervention supports

Generally exempt

Providers delivering only specialist disability accommodation

Generally exempt

Transitioned providers

Generally exempt

If you're unsure, check the conditions of registration in your NDIS Commission portal. That's where your obligation is set out.

When is the NDIS mid-term audit due?

The mid-term audit must start no later than 18 months after your registration period begins. Many auditors allow it to begin from around 12 months. Book three to six months before your deadline, because auditor availability is tight in 2026.

The National Disability Services factsheet on registration and audit pathways sets out the full cycle: initial certification, a mid-term audit at 18 months, then renewal before your three-year registration ends. Our registration renewal guide covers the final step.

Missing the deadline is serious. An overdue mid-term audit breaches a condition of your registration, and the Commission can take compliance action, including suspension.

What happens during an NDIS mid-term audit?

  1. Book and scope. Sign a service agreement with your approved quality auditor and confirm the audit scope and date.

  2. Document request. The auditor asks for policies, registers and records ahead of the visit.

  3. On-site audit. Mid-term audits are on-site unless the criteria for a remote audit are met. Expect your head office and service sites to be included.

  4. Sampling and interviews. The auditor samples staff and participant records and may interview workers and participants.

  5. Closing meeting. The auditor summarises conformities and any non-conformities.

  6. Report and corrective actions. The report goes to the Commission. For any non-conformity, you submit a corrective action plan to the auditor within 7 calendar days.

What does the NDIS mid-term audit check?

The mid-term audit is narrower than full certification, but it isn't a light-touch check. Non-conformities raised at mid-term carry the same consequences as those raised at certification.

Governance and operational management

This is the core of most mid-term audits:

Focus areas from your last audit

Expect the auditor to check every non-conformity raised at certification and confirm your corrective actions still work. A finding that was "closed" but has quietly slipped back is a common mid-term problem.

Changes since certification

New sites, new supports, new key personnel or a big increase in staff all attract attention. The auditor wants to see that your systems grew with you.

Area

What the auditor samples

Evidence to have ready

Workforce

Staff files from the last 18 months

Screening and credentials current on each service date (credential tracking)

Incidents

The register and recent reportable incidents

Notifications within SIRS timeframes (SIRS compliance)

Participants

A sample of participant files

Current agreements, consents and goal-linked notes (participant file checklist)

Quality

Internal audits and improvement actions

A continuous improvement register with completed actions

Previous findings

Your corrective action plan

Evidence that each fix is still working

NDIS audit cycle timeline showing certification, mid-term audit at 18 months and registration renewal at three years

NDIS mid-term audit checklist

6 months before your deadline

  • Confirm your 18-month date in the NDIS Commission portal

  • Book your approved quality auditor and agree the scope

  • List every change since certification: sites, supports, key personnel

3 months before

  • Run an internal audit on governance and operational management

  • Re-test every corrective action from your certification audit

  • Check worker screening and credentials against service dates, not today's date

  • Reconcile your incident register against Commission notifications

1 month before

  • Sample 3 participant files, including service agreements and progress notes

  • Confirm policies are current and signed

  • Brief staff on incident and complaint processes, so they can explain them in their own words

  • Let participants know about possible interviews

The week of the audit

  • Name one evidence owner per area

  • Make sure records can be produced in minutes, not hours

SIL providers face the heaviest site sampling. See SIL provider compliance. For the full evidence list across every audit type, use our NDIS audit checklist.

How much does an NDIS mid-term audit cost?

One industry guide estimates NDIS mid-term audits at around $1,000 to $4,000. The real cost depends on your number of sites, staff, registration groups and the auditor you choose. Mid-term audits usually cost less than full certification because the scope is narrower.

Get at least three quotes and confirm whether site visits and travel are included. For certification and verification costs, see our guide on how to prepare for an NDIS audit.

What happens if you fail an NDIS mid-term audit?

There's no single pass or fail result. The auditor raises minor or major non-conformities:

  • Minor: submit a corrective action plan within 7 calendar days, then close the finding within 18 months.

  • Major: close or downgrade it within 3 months, confirmed by a follow-up audit.

Our guide to common NDIS audit findings shows what gets raised most often and how to close each finding.

NDIS mid-term audit preparation checklist grouped by timeline for certified providers

Key takeaways

  • Certified providers must start their mid-term audit no later than 18 months after registration begins.

  • Verification providers, and some early childhood, SDA and transitioned providers, don't need one.

  • Mid-term audits are usually on-site and focus on governance, previous findings and changes since certification.

  • An overdue mid-term audit breaches a registration condition and can lead to suspension.

  • Book three to six months ahead, and re-test every past corrective action first.

Frequently asked questions

What is the NDIS mid-term audit and when is it required?
It's a certification audit that checks a certified provider still meets the NDIS Practice Standards halfway through registration. It must start no later than 18 months after the registration period begins. Verification providers don't need one.

Who audits NDIS providers?
Approved quality auditors, which are independent bodies you engage and pay. They assess you against the NDIS Practice Standards and report to the NDIS Quality and Safeguards Commission, which makes registration decisions.

Is the NDIS mid-term audit on-site?
Usually yes. Mid-term audits are conducted on-site unless the criteria for a remote audit are met. They typically include site visits plus sampling of staff and participant records.

What standards does the mid-term audit use?
It uses certification against the NDIS Practice Standards, with a focus on governance and operational management, plus areas flagged at your previous audit and any changes since certification.

What happens if I miss my mid-term audit?
Not starting the audit by the deadline breaches a condition of your registration. The NDIS Commission can take compliance action, including suspension, so book your auditor well before the 18-month mark.

What raises a red flag in a mid-term audit?
The usual red flags are:

  • corrective actions from certification that weren't sustained

  • credentials that were expired on past service dates

  • late incident notifications

  • empty improvement registers

  • new sites or supports with no updated policies

Is there an NDIS mid-term audit checklist PDF?
Yes. Print the checklist above, or use the mid-term section of our full NDIS audit checklist, which covers verification, certification and mid-term audits in one place.

Walk into month 18 with nothing to hide

It sounds like the worry isn't the audit itself. It's not knowing whether what passed 18 months ago is still true today.

Start a free CareVisor trial, load your real records, and see your audit-readiness score before your auditor does. No credit card is needed.

Start your free 7-day trial →

About CareVisor
CareVisor is the audit-ready operating system for Australian NDIS providers, built in Sydney by NDIS operators who have prepared for and passed Quality and Safeguards Commission audits. Worker screening, credential tracking, incident registers, participant files, progress notes, complaints, continuous improvement and SCHADS payroll live in one platform mapped to the NDIS Practice Standards, with a time-stamped audit trail so every record shows when it was created. See how it works as NDIS compliance software, or read what NDIS auditors check.

TAGS

NDIS mid-term auditNDIS mid-term audit checklistNDIS mid-term audit requirementsNDIS mid-term audit costNDIS certification auditNDIS audit processNDIS approved quality auditorNDIS Practice StandardsNDIS audit preparationNDIS registration renewal