Insights

September 28, 2026

How to prepare for an Aged Care Quality and Safety Commission audit

Preparing for an Aged Care Quality and Safety Commission audit is not simply a matter of assembling policies shortly before auditors arrive. The Commission examines whether a provider’s governance arrangements, systems and processes support care that conforms with the applicable strengthened Aged Care Quality Standards, and whether those systems are embedded in service delivery. Effective preparation therefore combines an accurate understanding of obligations with testing of everyday practice.

At Critical Success Solutions, we recommend treating audit readiness as an ongoing management and governing-body responsibility. This article sets out a practical preparation process for aged care executives, quality managers and clinical leaders. For a broader explanation of the requirements, read our Ultimate Guide to the Strengthened Aged Care Quality Standards.

Confirm the audit type and scope

Begin by establishing whether the organisation is preparing for initial registration, renewal of registration or a variation that adds a registration category. The Commission audits against the strengthened Standards when a provider applies for registration, renewal or variation involving Categories 4, 5 or 6. The audit process and evidence collection tools should be checked against the specific application rather than assumed to be identical in every case.

Next, map the services delivered against the Standards that apply. Category 4 providers must meet Standards 1–4 and, where they are responsible for care management or restorative care management, Outcome 5.1 on clinical governance. Category 5 providers must meet Standards 1–5, while Category 6 providers must meet Standards 1–7. A provider operating across multiple categories should identify its obligations for each relevant service type and location.

Understand the audit stages

The Commission describes three stages: audit initiation, audit delivery and audit reporting. During initiation, the Commission contacts the provider, requests information and arranges an initiation meeting. During delivery, auditors assess provider-level arrangements and examine how systems operate in care delivery. For renewal audits, this includes an audit at every Category 6 residential care home and at a sample of Category 4 and 5 care delivery locations. Reporting involves a preliminary report with a conformance rating for each assessed Outcome, an opportunity for provider feedback and supporting evidence, and a final report. Category 6 providers renewing their registration that conform with all seven Standards may also be invited to submit evidence for an exceeding rating.

This distinction helps providers prepare the right people for the right conversations. Governing-body members and senior managers should be able to explain oversight of quality, safety and risk. Service managers and workers should be able to describe how approved processes operate in practice. Records should support both accounts.

Build an evidence map

We recommend creating an evidence map for each applicable Standard and Outcome. The map should identify the relevant policy or procedure, the person accountable for its implementation, the records showing it has been used, and the results of monitoring or improvement activity. This prevents teams from treating a policy document as sufficient evidence of effective practice.

For example, a complaints procedure explains how concerns should be handled. A stronger evidence set also shows that complaints were recorded, investigated, responded to and reviewed for recurring issues. Similarly, a clinical governance framework should be supported by reporting, decisions and follow-up actions demonstrating that clinical risks are being overseen. The Commission’s audit process considers evidence of both provider systems and their application in care delivery.

The Commission provides an Audit Evidence Collection Tool (AECT) appropriate to the audit type. Renewal audits also require a Care Delivery Evidence Collection Tool (CDECT); the version depends on whether the service is a Category 4 or 5 care delivery location or a Category 6 residential service. Use the Commission’s current tools and instructions rather than an outdated internal checklist.

Test practice, not just documentation

A useful internal review follows a sample of older people’s experiences through the organisation’s systems. We suggest checking whether assessments inform care plans, whether plans reflect preferences and changing needs, whether staff can access current instructions, and whether significant risks are escalated and reviewed. Where clinical care is provided, test whether roles, scope of practice and clinical governance arrangements are clear.

Compare what documents require with what records and interviews reveal. If staff describe a different process from the approved procedure, investigate the cause before the audit. The solution may require a revised procedure, further supervision, improved record design or a change to the operational process itself.

Prepare leaders and workers

Audit preparation should include governing-body members, executives, service managers and frontline workers, but each group has a different role. Leaders should understand the organisation’s principal quality risks, recent findings and improvement priorities. Managers should be ready to explain how they monitor services and address gaps. Workers should know the procedures relevant to their duties and where to seek guidance when circumstances change. The Commission meets with governing-body and senior management representatives as part of its provider-level audit.

We recommend briefing people using real organisational processes rather than rehearsed answers. Auditors need to understand how care is delivered; inconsistent or scripted responses can obscure the practical issues the organisation needs to address.

Close gaps and verify improvement

An internal audit or readiness review may reveal overdue policy updates, incomplete records, inconsistent training evidence or corrective actions that have not been evaluated. Record each finding, assign an accountable person and deadline, and check whether the action resolves the underlying problem. An action marked “complete” does not, by itself, demonstrate that a risk is controlled.

The final preparation stage should test the improvement. Repeat a sample review, examine subsequent incidents or feedback, and confirm that workers understand any changed process. Keep governing-body reporting aligned with material findings and unresolved risks. This gives leaders a defensible account of what was identified, what changed and what still requires attention.

Respond to audit findings

The preliminary audit report is an opportunity to check the accuracy of the Commission’s findings and provide relevant supporting information within the specified deadline. Providers should review it systematically, distinguish factual corrections from disagreements about assessment, and coordinate any response through a nominated lead. The Commission then prepares its final reporting.

Audit preparation does not end with the report. Findings should inform the organisation’s risk register, quality improvement programme, workforce development and future internal audit schedule.

Independent audit support

We provide aged care auditing services to help providers assess their systems, identify gaps between documented processes and actual practice, and prepare a prioritised improvement plan. An independent review can be particularly valuable when an organisation delivers several service types or needs to test whether governing-body assurance reflects what is occurring in care delivery.

For an explanation of the regulatory framework behind the audit, visit our Ultimate Guide to the Strengthened Aged Care Quality Standards. To discuss audit readiness or an independent review, contact Critical Success Solutions.

Related Posts

Our solutions are critical to your success

Contact Critical Success Solutions to discuss our tailored consulting services.

insights