What auditors actually check:
They don't just check you HAVE policies. They check you USE them.
Module 2a — Verification Module covers:
• Provider Governance — Board/director oversight, strategic planning, business plan, financial plan
• Operational Management — Policies, procedures, quality systems, feedback mechanisms
• Employment Screening — NDIS Worker Screening, police checks, Working with Children, qualifications
• Continuity of Supports — Business continuity plan, handover processes, what happens if things go wrong
The #1 audit finding nationally: "Provider has policies but cannot demonstrate implementation." Every register, incident, and note is evidence that you walk the talk.
Your strengths going in:
• VisualCare is capturing completion notes (680+ analyzed)
• Note monitor is active and catching gaps
• All 341 incidents closed with office comments, outcomes, and follow-up actions
• All incidents categorised (LOW/MEDIUM/HIGH/EXTREME) with priorities set
• All reportable incidents have 24h and 5-day reports filed
• 120+ policy documents in the knowledge base
Remaining gaps:
• Business plan and financial plan need updating
• Registers need to be current (risk, complaints, feedback, training)
• Internal audit schedule needs evidence of execution
• 32 LOW/MEDIUM risk incidents still missing office comments (non-critical)