Audit Preparation for Aged Care Providers: A Practical Compliance Guide for Australia and New Zealand

Aged care facility audits are not something to prepare for the week before they happen.  

Whether you operate in Australia under the new Aged Care Act 2024 or in New Zealand under the Health and Disability Services (Safety) Act 2001, audit readiness is a continuous operational discipline. Providers that treat it as a one-off exercise tend to find gaps. Providers that embed it into day-to-day practice build the kind of evidence base that holds up under scrutiny.

This guide explains what audits assess in both jurisdictions, what documentation and evidence is required, and how aged care providers can build a structured, always-on readiness process.

What Is an Aged Care Audit and Why Does It Matter?

An aged care audit is a formal assessment carried out by a regulatory body or designated auditing agency to determine whether a provider meets the required standards for delivering safe, quality care. Audits are used to make decisions about registration, accreditation and continued certification. They look forward as well as backward - assessing not just what has happened, but whether systems and processes are in place to maintain and improve performance over time.

Failing to meet the required standards can result in conditions being placed on registration, shortened certification periods, or in serious cases, loss of the right to provide government-funded aged care. The reputational consequences extend well beyond the regulatory outcome.

The Australian Regulatory Framework: What Providers Need to Know

The Aged Care Act 2024 and Strengthened Quality Standards

Australia's aged care regulatory landscape changed substantially from 1 November 2025, when the Aged Care Act 2024 and the Aged Care Rules 2025 came into effect. The new legislation introduced seven strengthened Aged Care Quality Standards, replacing the previous eight-standard framework that had been in place since 2019.

The strengthened Quality Standards are more detailed and measurable than the previous Quality Standards, reflecting the recommendations made by the Royal Commission into Aged Care Quality and Safety.

The seven strengthened standards cover:

• Standard 1: The person (dignity, rights, and person-centred care)

• Standard 2: The organisation (governance, leadership, and safety culture)

• Standard 3: The care and services (assessment, planning, and delivery)

• Standard 4: The environment (safe and appropriate physical settings)

• Standard 5: Clinical care (evidence-based clinical practices)

• Standard 6: Food and nutrition

• Standard 7: The residential community

Providers registered in categories 4, 5 and 6 are subject to audits against these strengthened Quality Standards. Registration, renewal and variation audits are all announced, and audits look forward, assessing the effectiveness of a provider's systems and processes to continuously improve and sustain conformance.

The Australian Audit Process: Step by Step

The Aged Care Quality and Safety Commission oversees audits of registered aged care providers in Australia. The process follows a defined sequence:

1. Audit initiation: The Commission contacts the provider, requests key documents and explains what to expect during the audit

2. Evidence collection: Providers must complete the Audit Evidence Collection Tool (AECT) and submit supporting documents

3. Care Delivery Evidence Collection Tool (CDECT): Required for renewal of registration; assesses how systems and processes are embedded at the service level

4. Meetings: The audit team meets with the governing body and senior management to understand governance, clinical care quality and staffing systems

5. Preliminary report: Issued to the provider before the audit is finalised, with an opportunity to review findings

6. Audit rating: The Commission rates performance against each outcome and standard using collected evidence

Providers must complete the Audit Evidence Collection Tool (AECT) and submit supporting documents as part of the audit process. Not submitting a completed AECT means the audit cannot proceed - making early and thorough document preparation a non-negotiable first step.

For further guidance, the Commission's Audit Guidance and Resources page provides standard meeting agendas, templates and tools to support preparation.

The New Zealand Regulatory Framework: What Providers Need to Know

Health and Disability Services (Safety) Act 2001 and Ngā Paerewa

In New Zealand, aged residential care providers must be certified and audited under the Health and Disability Services (Safety) Act 2001. Audits assess conformance with Ngā Paerewa Health and Disability Services Standard NZS 8134:2021, which came into effect in February 2022 and covers 34 subsections across quality of care and resident outcomes.

All rest homes and aged residential care facilities in New Zealand must be certified and audited to ensure they provide safe and appropriate care for their residents and meet the standards set out in the Health and Disability Services (Safety) Act 2001.

Audits are carried out by Designated Auditing Agencies (DAAs) approved by the New Zealand Ministry of Health. The certification period granted following an audit - typically between one and four years - reflects how well the facility performed. Unannounced audits typically take place midway through a rest home's certification period, checking whether previous issues have been addressed and that care standards are maintained.

Providers operate under the Age-Related Residential Care (ARRC) Services Agreement, a national contract between Health New Zealand and providers, which underpins the audit assessment framework.

What Evidence Do Auditors Look For?

Across both jurisdictions, auditors are assessing the same core question: can this provider demonstrate that it has robust, embedded systems that consistently deliver safe, quality care?

The evidence base auditors typically request includes:

Governance and organisational documents:

• Governing body meeting minutes and attendance records

• Risk management frameworks and incident registers

• Policies and procedures (current versions, regularly reviewed)

• Staff rosters, qualifications and training records

• Complaints registers and evidence of resolution

Care and clinical documentation:

• Individual care plans, current and reviewed at appropriate intervals

• Assessment records aligned to each resident's care needs

• Medication management records

• Clinical incident and near-miss reports

• Wound management, falls prevention and infection control records

Facility and environment records:

• Maintenance schedules and completion records

• Safety inspection logs and corrective action documentation

• Contractor compliance records (licences, insurances, induction records)

• Fire safety, emergency management and evacuation documentation

Continuous improvement evidence:

• Internal audit results and action plans

• Quality improvement initiatives and outcomes

• Resident and family feedback surveys with documented responses

Common Audit Readiness Gaps

Even well-run aged care facilities can be caught out by predictable preparation gaps. The most common include:

• Outdated policies that have not been reviewed or updated to reflect the current regulatory framework

• Incomplete care plans where assessments exist but have not been updated following changes in a resident's condition

• Maintenance records held in silos across paper files, email and informal logs rather than a central system

• Contractor documentation gaps where licences or insurances have lapsed without the facility noticing

• Incident records not fully completed, missing timelines, contributing factors or follow-up actions

• No audit trail for internal reviews, making it difficult to demonstrate continuous improvement

Each of these gaps may appear minor in isolation. In the context of an audit, they collectively indicate a system that cannot reliably sustain compliance - which is precisely what auditors are looking for evidence against.

Building an Always-On Audit Readiness Framework

Reactive audit preparation creates unnecessary pressure and increases the risk of missing critical evidence. An always-on approach distributes the work across the year and keeps the documentation base current.

Step 1: Map your evidence obligations Review the requirements for your jurisdiction and registration category. Identify every document category required and assign ownership to a responsible team member.

Step 2: Centralise your documentation Paper files and shared drives create version control problems and retrieval delays. A centralised digital compliance system ensures every document is accessible, version-controlled and retrievable on demand.

Step 3: Set expiry alerts for time-sensitive records Policies, care plans, staff credentials, contractor insurances and fire safety certificates all have review and expiry dates. Automated alerts prevent lapses from going unnoticed.

Step 4: Conduct structured internal audits Internal audits against the relevant quality standards, conducted quarterly at a minimum, surface gaps before external auditors do. Document the results and the actions taken - this becomes part of your continuous improvement evidence.

Step 5: Maintain a live improvement register Auditors want to see that a provider identifies issues and acts on them. A live register of quality improvements, with documented outcomes, demonstrates exactly that commitment.

Step 6: Brief your governing body and senior management In both Australia and New Zealand, governance accountability is explicitly assessed during audits. Senior leaders need to be across the evidence base and able to speak to the systems in place.

The Role of Digital Systems in Audit Readiness

Manual documentation processes cannot scale reliably in a high-compliance environment. A purpose-built digital facility management system gives aged care providers centralised control over maintenance records, contractor compliance, safety inspections and incident documentation - all of which form a critical component of the audit evidence base.

When an auditor requests maintenance records for the past 12 months or contractor induction logs for a specific period, a digital system produces that evidence in seconds. A folder of handwritten maintenance sheets does not.

Ready to build your audit-ready foundation? Whether your next audit is six months or six weeks away, FMI Works can help you centralise your documentation, automate compliance tracking and give your team the visibility it needs to stay consistently audit-ready.

Book a free demo today and see how purpose-built FM software supports aged care providers across Australia and New Zealand.