SDA mid-term audits: A provider checklist for registration evidence

The NDIS Commission says registered providers that completed a certification audit and are registered for higher risk or more complex supports must complete a mid-term audit. Specialist disability accommodation is listed under registration group 0131 and requires a certification audit, so SDA providers should treat the mid-point of the registration period as an operational deadline, not a paperwork clean-up.

The Commission's quality audit guidance says a mid-term audit is completed 18 months into the registration period and focuses on provider governance and operational management, standards that previously required corrective action, and any extra standards the Commission requires. Recent public compliance notices also show that missed mid-term audit obligations can become a visible compliance issue.

For SDA teams, the risk is usually fragmentation. The housing team holds agreement evidence, finance holds rent and claim records, property managers hold maintenance notes, compliance holds policies, and owner reporting may sit somewhere else. A mid-term audit works better when those records connect before the auditor asks for them.

Before assembling evidence, confirm the provider's current registration scope. Check that registration group 0131 specialist disability accommodation is current, that any related support classes are understood, and that the Registered providers portal details are up to date so Commission communications do not go to an old contact.

If the organisation has changed services, bought or sold part of the business, added SIL, changed governance, or altered who delivers supports in a dwelling, record whether a variation or out-of-cycle audit conversation is needed. Do not leave scope decisions buried in email because they affect what the auditor, operations team and board think is in scope.

The practical output should be a one-page audit scope register: registration groups, period of registration, mid-term due date, auditor contact, open conditions, previous corrective actions, service locations, active dwellings, responsible executives and evidence owners.

The strongest audit evidence is not a policy library. It is proof that the policy works in current dwellings and participant records. For SDA, that means tying Practice Standards evidence to the operational file that staff actually use.

Mid-term audit preparation should not wait for a final evidence chase. Run a monthly exception review from the operating record. Useful exception labels include agreement review overdue, participant communication missing, dwelling evidence incomplete, RRC variance unresolved, claim blocked, owner statement adjustment pending, maintenance close-out missing, conflict disclosure required and audit evidence owner unassigned.

Each exception should have an accountable owner, due date, status, participant-safe notes and evidence link. That gives managers a live view of compliance quality without exposing sensitive participant information to owners or investors.

A simple rule helps: if a record would be hard to explain to an auditor, it will probably also be hard to explain to a participant, family member, owner or internal finance lead. Fixing exceptions early reduces audit stress and improves operational reliability at the same time.

SDA owners often want confidence that a dwelling is compliant, occupied, claim-ready and financially reconciled. They do not need private participant notes, disability details or support-provider history. Mid-term audit preparation is a good time to check that owner reporting separates property-level status from participant-identifying information.

A useful owner-safe report can show dwelling enrolment status, occupancy status, claim status, RRC received or outstanding, maintenance actions, vacancy pipeline, material exceptions and distribution assumptions. It should not copy service agreements, incident records or participant communication into an owner pack.

This matters because audit evidence and investor reporting often draw from the same operating data. If the underlying system does not separate compliance detail from owner-facing summaries, privacy risk grows as reporting becomes more automated.

StepFree SDA should help providers keep audit readiness close to daily operations: registration scope, dwelling records, participant agreements, RRC ledgers, SDA claim evidence, vacancy notes, exception queues and owner-safe reports should not live in disconnected systems.

The goal is not to replace the approved quality auditor or turn every operational note into an audit document. The goal is to make the evidence trail reliable before the mid-term audit starts, so compliance, finance, property operations and leadership can see the same current record.