NDIS audits should be done every three years, as this is the length of validity of their permits. However, for those who offer complex or high-risk services, they need to conduct mid-term audits on the 18-month mark of their permit as part of their requirements to operate.