Whether the audit is conducted by the Aged Care Quality and Safety Commission, the NDIS Quality and Safeguards Commission, or a certification body, this guide is about building that state of readiness. It moves past the last-minute scramble and sets out how to map your obligations to evidence, test your own controls the way an assessor will, and close gaps in a way that holds up under scrutiny.
Audit readiness is a property of your operating rhythm, not a project you switch on. The foundation is a live register that connects each requirement to a control, an owner and an evidence source. For every obligation that applies to your service, record:
Keep the register current and reviewed. An out-of-date register does worse than nothing: it creates false confidence that a control exists when the requirement behind it has moved on. For the underlying obligations, start from an aged care compliance checklist.
Assessors do not read your policies and stop there. They pick a resident or participant and follow their journey through your records, looking for consistency between what you say you do and what actually happened. You should do exactly the same to yourself, first.
Select a real journey and trace it end to end:
Then sample worker files and action registers the same way. A tracer review exposes the gaps between policy and practice that a document check never will, and it does so while you still have time to fix them.
A policy on a shelf is not evidence of a working control. The difference between a provider who passes comfortably and one who struggles is whether controls are tested or merely present. For your highest-risk obligations, go beyond confirming a document exists:
Where a control fails the test, record it as an action with a due date and a verification step, not a note to "review later."
When an assessor talks to your staff, they are testing whether your systems live in daily practice or only on paper. You should pressure-test the same thing. Ask open questions and listen for genuine understanding rather than a recited policy:
If people cannot explain how a process works in their own words, a written policy will not persuade an assessor that the process is real. Where you find gaps in understanding, the fix is supervision and support, not a memo.
The most common audit failure is not the original gap. It is a gap that was "closed" by changing a status field to complete without anything actually changing on the floor. Prioritise your gaps by risk, and close each one with evidence:
| Step | What it means |
|---|---|
| Prioritise by risk | Address the gaps that most affect safety and rights first |
| Assign an owner | A named role accountable for the fix |
| Set a due date | A real deadline, tracked |
| Implement the change | The actual process change on the floor |
| Verify | Confirm, with evidence, that the change worked |
| Monitor | Check it holds over time |
A closed action should mean a verified change, not a changed status. That distinction is what turns a one-time fix into durable readiness, and where a connected incident-and-action system earns its place, by surfacing overdue and high-risk items instead of letting them disappear into a spreadsheet.
Continuously. Providers who treat readiness as an ongoing property of their operating rhythm, a live register, regular tracer reviews, monitored actions, face audits with far less stress than those who cram before the visit.
You select a real resident or participant journey and follow it end to end through your records, assessment, agreement, delivery, incidents, feedback and review, checking that practice matches policy. It is the single most useful readiness exercise.
Because it tests whether your systems are real. If staff cannot explain a process in their own words, a written policy will not convince an assessor that it operates in practice.
Prioritise by risk, assign an owner and due date, make the actual change, then verify it worked. Avoid the trap of "closing" a gap by editing a status field.
Many providers value an independent mock audit, and you should obtain qualified advice on the specific obligations that apply to your service. Use this guide to make that support more effective, not to replace it.
CareIQ connects your incidents, actions, qualifications and clinical records, with compliance readiness scoring that surfaces overdue and high-risk items before an assessor does, so readiness is continuous rather than a scramble.
Start Your 2-Month Free TrialSee how audit readiness fits into the CareIQ compliance tools.
General information only, prepared for Australian care providers. It is not legal, clinical or regulatory advice. Recheck current Australian regulations and standards, and obtain qualified advice on the obligations applying to your service, before acting.