Four areas NDIS auditors check under 0138 SIL medication management, and what your documentation needs to prove before your next audit.
If your medication records were pulled in an audit tomorrow, could you prove that every staff member who administered medication was competent to do it? Not just trained. Competent. There’s a difference, and auditors know it.
Under 0138 SIL registration, medication management sits inside the NDIS Practice Standards Core Module. The quality indicators go further than most providers realise. Providers walk into audits with full filing cabinets and still come out with a nonconformity on medication. They had documentation. What they couldn’t prove was that the system was working. That’s the consistent gap. Here are four areas auditors actually check.
1. Training Records Are Not the Same as Competency Evidence
This is where most providers get caught.
You can show an auditor a training certificate. They’ll look at it, and then they’ll ask what happened after the training. What’s your process for confirming that a staff member can safely administer medication in a real situation with a real participant?
Under the NDIS High Intensity Support Skills Descriptors, providers who support participants with medication administration need to demonstrate that staff aren’t just trained, they’re assessed as competent. That means a competency assessment conducted by someone qualified to carry it out, and a record that links the specific staff member to the specific type of medication support they’re authorised to provide.
A certificate of completion doesn’t do that. A signed competency assessment does.
Here’s what this looks like in practice. A staff member completes medication training in February. You also have a written record, signed by a registered nurse or another qualified assessor, confirming this staff member was observed and assessed as competent to administer oral medication to a named participant. That second document is what auditors want to see. Most providers only have the first one.
Check your staff files now. For every person who administers medication in your SIL homes, confirm whether you have a competency assessment, not just a training record. If you don’t, that’s your first priority.
2. Your Medication Plans Must Be Current, Specific, and Signed by the Right People
Every participant in your SIL home who receives medication support needs a current, written medication management plan. Not a generic plan. A plan specific to that participant, their medication, the route of administration, and any risks or support needs relevant to them.
Auditors check three things on that plan.
First, who authored it. The plan needs to be signed or authorised by a relevant health professional, typically the participant’s GP, prescribing specialist, or pharmacist, depending on the medication.
Second, when it was last reviewed. A medication plan from two years ago that hasn’t been updated isn’t a current plan. If a participant’s medication has changed and the plan hasn’t been updated to reflect that, you have a nonconformity before the auditor says a word.
Third, whether the participant and, where relevant, their support people or nominees, were involved in decisions about their medication support. Consent and involvement need to be documented.
A provider can have medication plans for every participant in every SIL home, complete documentation, and still receive a finding if two participants had medication changes in the previous twelve months and those changes weren’t reflected in the plans. The plans were real, signed documents. They were still out of date. That’s a finding.
Set a review trigger. Every time a participant’s medication changes, the plan gets updated before administration continues. At minimum, review every plan annually even when nothing has changed.
3. Your Medication Administration Records Tell a Story, and Auditors Read It
The Medication Administration Record tracks every medication event: what was given, when, by whom, in what dose, and what the outcome was.
Auditors aren’t just checking that the MAR exists. They’re checking that it tells a complete and consistent story.
A full MAR entry includes the date and time, the name of the staff member who administered the medication, the medication name, dose, route, outcome, and a record of what happened if a dose was missed or refused.
That last part is where providers fall short most often. Missed doses and refusals happen. They’re not automatically a problem. They do need to be documented, and there needs to be a record that the participant’s support team and, where required, their health team, was informed.
If an auditor sees a MAR with gaps, unexplained blanks, or entries corrected without explanation, that raises questions. The MAR needs to be a contemporaneous record, filled in at the time, not reconstructed at the end of a shift. If your staff are completing MARs hours after administration, that’s something to address now.
4. Your Incident Reports Need a Closed Loop
Every medication error, near miss, or adverse event needs to go through your incident management system. What providers miss is the chain that has to follow it.
Auditors want evidence that incidents aren’t just recorded, they’re reviewed, and the review results in something changing.
The chain looks like this. An incident is recorded on the day. A supervisor or manager reviews it within your defined timeframe, and that review is documented. If the incident meets the threshold for a reportable incident under NDIS Commission requirements, it’s reported. And then, at the end of the process, there’s a record of what changed as a result. A procedure updated. A staff member given additional support. A participant’s plan reviewed.
An incident that ends with a form and nothing else is the one that creates a finding.
Before Your Next Audit
Medication management under 0138 isn’t complicated when you know what auditors are actually looking for. Competency evidence, current and specific plans, complete MARs, and a closed incident loop. Those four things, documented well, are what separate providers who walk out of an audit with confidence from providers who don’t.
Pull your files now. You have time to fix what needs fixing before someone else finds it for you.