ACIS COMPLIANCE, AUDITS & CORRECTIVE ACTION
Keep your ACIS certification audit-ready under ACIS 5.0
HCPA helps attendant care providers maintain ACIS 5.0 requirements, prepare for surveillance and recertification audits and respond to non-conformities before certification is put at risk.
ACIS compliance continues well beyond the initial certification audit. Policies, staff records, client documentation, risk controls and quality systems need to remain current and reflect how services are actually being delivered.
When ACIS compliance needs immediate action
Compliance becomes urgent when an audit is approaching, operational evidence has fallen behind or a non-conformance exposes a wider weakness in the provider’s systems.
An ACIS surveillance audit is approaching
Review client files, staff records, policies, risk registers and previous corrective actions early enough to address gaps before the audit begins.
Policies no longer match ACIS 5.0
Review policies against the current ACIS 5.0 requirements and check that staff practice still matches the documented process, rather than simply updating the version number.
Client or staff evidence is incomplete
Check that client files, service agreements, incidents, feedback and staff records provide enough evidence to show that the provider’s systems are working in practice.
An ACIS non-conformance has been raised
Identify the cause of the finding, assign corrective action and gather the evidence needed to close it within the required timeframe.
Key ACIS 5.0 compliance requirements
Maintaining certification means keeping the provider’s quality systems active between audits.
Keep policies and procedures current
Policies should reflect the current ACIS Standard, the provider’s actual services and the way staff work day to day.
A policy can become non-compliant even if the document itself has not changed, simply because the Standard, service model or operating process has moved on.
Maintain staff competency and evidence
Training, role requirements and relevant staff records should remain current so the provider can demonstrate that workers understand the systems they are expected to follow.
This becomes particularly important where workers deliver complex physical, behaviour or mental health support requiring additional competency.
Maintain complete client documentation
Client evidence should show how the service was planned, delivered, monitored and reviewed.
Depending on the service, this may include service agreements, care records, incidents, feedback and other evidence showing how the provider’s systems operate for an individual client.
Use internal audits before external audits
Internal audits can identify gaps while the provider still has time to address them.
Review a sample of real staff and client files against the applicable ACIS requirements rather than checking policy documents in isolation.
Keep risk and continuous improvement active
Risk reviews and continuous improvement should capture issues as they arise rather than becoming documents produced only for the auditor.
Actions should show what changed, who owns the action and how completion was verified.
Track ACIS 5.0 requirements as the business changes
ACIS 5.0 covers areas including rights and responsibilities, corporate governance, clinical governance, service delivery, service environments and complex support.
As the provider adds services, locations or more complex supports, check whether the scope of certification and the evidence being maintained still reflect the work being delivered.
The practical test is whether the provider can show that its documented systems are being applied consistently across staff, clients and service delivery.
ACIS surveillance and recertification audit readiness
Certification is maintained through an ongoing audit cycle rather than a single assessment.
That means audit evidence needs to be maintained as the service operates, not reconstructed shortly before surveillance or recertification.
An ACIS audit can review evidence such as:
current policies and internal audit records
risk and continuous improvement evidence
staff files, competency and training records
client files and service documentation
incidents, complaints and feedback
previous non-conformities and corrective actions
planning and educational practices
ACIS 5.0 audit guidance also allows for client and staff interviews, file reviews and review of previous non-conformities. The audit therefore tests whether the documented system can be demonstrated through real service delivery, not simply whether the required policies exist.
HCPA can conduct a pre-audit gap review, identify missing evidence and help providers strengthen the systems that are likely to be tested during surveillance or recertification.
Speak with an HCPA ACIS consultantWhat to do after an ACIS non-conformance
Understand the finding
Confirm the ACIS requirement involved, whether the finding is major or minor and what evidence the certification body expects.
Identify the root cause
Determine whether the issue sits with the policy, staff training, documentation, oversight or the way the service is actually being delivered.
Submit a practical corrective action plan
Document the action, responsible person, timeframe and evidence required to demonstrate completion. ACIA’s Audit Report Timeframes Policy requires the plan within five business days of written notification.
Close the finding with evidence
Implement the action and provide evidence showing that the underlying issue has been corrected. Major and minor findings must then be closed within the applicable ACIA timeframe.
Why choose HCPA for ACIS compliance support?
ACIS audits look beyond whether a provider owns the right documents. They test whether those systems can be demonstrated through staff knowledge, client records and operational evidence.
HCPA can review the organisation before the external audit, identify weak evidence and help connect policies, staff practice, client files and corrective actions into a consistent compliance system.
businesses supported
industry consultants
billion in client revenue
Support can include ACIS 5.0 gap assessments, internal audits, policy and procedure updates, audit preparation, evidence reviews and corrective action planning.
Frequently asked questions about ACIS compliance and audits
What evidence is reviewed during an ACIS surveillance or recertification audit?
The exact scope depends on the provider and services being audited, but auditors may examine policies, client and staff files, risk systems, continuous improvement, incidents and previous corrective actions.
Audits can also include staff and client interviews and file reviews, so providers need to demonstrate how the systems work in practice rather than relying only on written policies.
How should a provider complete an ACIS corrective action plan and prevent certification suspension?
Start with the specific non-conformance, determine its root cause and set out the action, responsible person, deadline and evidence that will demonstrate resolution.
Submit the CAP within the required timeframe and make sure the action fixes the underlying process. ACIA’s current policy requires a CAP within five business days and sets formal closure periods for major and minor findings.
What changed with ACIS 5.0?
ACIS 5.0 is the current version of the Australian Community Industry Standard.
Its framework covers rights and responsibilities, corporate and clinical governance, service delivery and service environments, with supplementary standards for areas including complex physical support, behaviour support, mental health support and assistive technology.
Do existing ACIS providers need to transition to ACIS 5.0?
Yes. Existing certified providers are expected to transition their next surveillance or recertification audit to ACIS 5.0 unless an alternative arrangement has been approved.
Can an outdated policy manual lead to an ACIS non-conformance?
Potentially, particularly where the policy no longer aligns with the current Standard or the provider’s actual operations.
More importantly, an updated policy will not solve the problem if staff practice or client records still demonstrate the old process.
What should be maintained in ACIS client files?
The evidence will depend on the support provided, but files should demonstrate the service delivered and how the provider has applied its quality systems to that client.
That may include service agreements, care documentation, incidents, feedback and other evidence relevant to the service being provided.
Are previous non-conformities reviewed at the next ACIS audit?
They can be.
ACIS audit guidance allows previous non-conformities to be reviewed, so providers should retain evidence showing that corrective actions were implemented and remained effective.
What is the difference between an internal ACIS audit and the external certification audit?
An internal audit is the provider’s opportunity to test its own systems and identify gaps before an external auditor does. It can examine policies, files, staff practice and previous actions against the ACIS requirements and create a remediation plan.
The external audit is conducted by the certification body and forms part of maintaining ACIS certification.
Why does ACIS certification matter for attendant care providers?
ACIS is specifically designed for community and attendant care services.
For example, Comcare strongly recommends ACIA-certified attendant care providers and its scheme guidance directs claims managers to use the ACIS Provider Register when promoting quality attendant care options.
Certification therefore has practical value beyond the audit itself because it can support credibility within personal injury and compensation-funded care markets.
Related ACIS resources
Become ACIS certified
Looking to enter personal injury or compensation-funded care?
Grow your ACIS business
Ready to generate more funded-care referrals?
