Allied Health NDIS Audit Checklist: worksheet
NDIS Practice Standards and Quality Indicators. Edition held: Rules Schedules 1 to 8, Compilation No. 6 (F2026C00527) and Quality Indicators Guidelines Compilation No. 3 (F2026C00528), in force 1 July 2026; checked current on 6 October 2026 (Federal Register: both compilations are the latest version on 6 October 2026).
Under review, not in force: The NDIS Commission's review of the Practice Standards (a proposed quality framework and changes to the standards and how they are assessed) is still being considered; nothing from it is in force.
Standards library: https://compliance.theartofservice.com/frameworks/australia-ndis-practice-standards-and-quality-indicators. Page: https://allied-health-ndis-audit-checklist.theartofservice.com/rules/ndis-practice-standards/module-6-risk-management/
When the practice is also audited by certification: The obligations on this page stay for the practice's therapeutic supports. One certification audit assesses them (certification satisfies a verification requirement, Rules s 23), and Core module: Risk management covers the same ground, so one set of evidence can serve both.
| Ref | Requirement (our statement of the clause) | Evidence an auditor or the regulator asks for | Common gap to check | Held (yes, partly, no, not applicable) | Where it is kept | Owner | Last reviewed | Next review |
|---|---|---|---|---|---|---|---|---|
| Module 6 3.1 | The provider has a documented risk management system that effectively manages work health and safety risks and is proportionate to its size and scale and the scope and complexity of its supports. Source: https://www.legislation.gov.au/F2018L00631/latest/text | Documented risk management procedure covering work health and safety; Risk register with ratings, controls and review dates; Hazard or WHS incident reports and the actions taken | Risk register not reviewed since registration; Procedure copied from a template that does not match the services | ☐ yes ☐ partly ☐ no ☐ n/a | ||||
| Module 6 3.2 | The provider holds appropriate insurance, including professional indemnity, public liability and accident insurance, at levels that match the supports it is registered to deliver and kept current. Source: https://www.legislation.gov.au/F2018L00631/latest/text | Current certificates of currency for professional indemnity, public liability and accident or workers compensation insurance; Insurance renewal register; Policy schedules showing cover matches the registration groups | A certificate of currency expired at audit; Professional indemnity missing for a sole practitioner | ☐ yes ☐ partly ☐ no ☐ n/a | ||||
| Module 6 3.3 | The provider's risk management system includes planning for emergencies and disasters, covering how participants will be kept safe and critical supports continued if an emergency or disaster disrupts services. Source: https://www.legislation.gov.au/F2018L00631/latest/text | Emergency and disaster management plan; Records of plan testing or review; Participant and worker communication plan for emergencies | No emergency plan for supports delivered in participants' homes; Plan never reviewed or tested | ☐ yes ☐ partly ☐ no ☐ n/a | ||||
| Module 6 3.4 | Risk assessments are done regularly and consider how far participants rely on the provider's services for daily living and how disruption of those services would affect their health and safety. Source: https://www.legislation.gov.au/F2018L00631/latest/text | Participant risk assessments rating reliance on the service and the impact of disruption; List of participants prioritised for continuity if services stop; Risk assessment review dates in participant files | Risk assessments do not address disruption of services; Assessments done once and never repeated | ☐ yes ☐ partly ☐ no ☐ n/a | ||||
| Module 6 3.5 | Standard infection prevention and control precautions are put in place in every setting where the provider delivers supports, including participants' homes, the community and the provider's own premises. Source: https://www.legislation.gov.au/F2018L00631/latest/text | Infection prevention and control procedure covering home, community and clinic settings; Hand hygiene and cleaning checklists; Outbreak management records where an outbreak occurred | Infection control procedure covers only the clinic; No supplies for hand hygiene during home visits | ☐ yes ☐ partly ☐ no ☐ n/a |
Completing this worksheet records what your practice holds and where. It does not make a practice compliant or ready for audit, and it is not legal advice.