What is NDIS Practice Standards?
The NDIS Practice Standards set the quality requirements registered providers must meet, covering rights and responsibilities, governance and operational management, the delivery of supports, and the provider’s environment. Registered providers are audited against the standards relevant to the registration groups they hold.
The standards are outcome-based: they state what must be achieved rather than prescribing a method, and an auditor looks for evidence that the outcome is actually met in practice.
That evidentiary framing is why records matter so much. Policies satisfy nobody on their own — the audit asks for the incident register, the training records, the service agreements, the progress notes and the complaints log that show the policy operating.
How the standards are organised
The standards are grouped into modules. Which ones apply depends on the supports a provider is registered to deliver.
- Core module: applies to all registered providers delivering higher-risk supports, covering rights and responsibilities, governance and operational management, provision of supports and the support provision environment
- Supplementary modules: added for particular supports, such as high intensity daily personal activities, specialist behaviour support, implementing behaviour support plans, early childhood supports, specialised support coordination, specialist disability accommodation and supported independent living
- Verification module: applies to providers delivering only lower-risk supports
Each module sets participant-focused outcomes, and quality indicators that auditors use to judge whether the provider meets them.
What auditors look for
The governance and operational management outcomes are where most evidence sits. Auditors expect to see:
- A documented risk management system covering incidents, complaints, finances, human resources, information, work health and safety, and emergencies
- A quality management system with a program of internal audits
- Records of pre-employment checks, qualifications, induction and training for each worker
- Participant information that is accurate, current, confidential and accessible to the participant
Policies alone are not enough. Auditors sample records, interview workers and participants, and check that what happens matches what the policy says.
Standards and audit type
Providers delivering only lower-risk supports are assessed against the verification module through a verification audit. Providers delivering higher-risk supports are assessed against the core module and any relevant supplementary modules through a certification audit, followed by a mid-term audit 18 months into the registration period.
How Rostery helps
Rostery keeps audit-ready records in one place: worker screening and qualification expiry, incidents with their deadlines, progress notes against each shift, and restrictive practice records, so evidence can be pulled for a sample without searching.
Compliance guides
In more depth from AuditCore, our sister NDIS compliance platform.
Questions people ask
Do unregistered providers have to meet the NDIS Practice Standards?
No. The Practice Standards apply to registered providers. Unregistered providers must still follow the NDIS Code of Conduct.
Which Practice Standards module applies to me?
It depends on your registration groups. The NDIS Commission's initial scope of audit tells you which modules and which type of audit apply.
What are quality indicators?
They are the measures auditors use to decide whether a provider meets each outcome in the Practice Standards. They are set out in the NDIS Practice Standards and Quality Indicators guidelines.
Checked against the official sources on 2 October 2026. Rules change: confirm the current position with the agency before you rely on it.
Related terms
More in Compliance
Rostery handles this in practice
SCHADS interpretation, NDIS price-guide validation, claiming and the evidence an audit asks for — built for Australian providers.