How to Conduct a Comprehensive CQC Audit

A CQC audit refers to a systematic, evidence-based review of a care service’s compliance with the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014. The audit evaluates policies, procedures, and operational practices against the Care Quality Commission's (CQC) five Key Questions: Safe, Effective, Caring, Responsive, and Well-led. The goal is to proactively identify compliance gaps before an inspection triggers enforcement action.

In practice, failing to conduct a thorough CQC audit leaves Registered Managers vulnerable to breaches, particularly under Regulation 17: Good Governance. Inspectors will typically zero in on areas where evidence of monitoring, risk assessments, or improvement plans is missing. For example, if medication errors are logged but no trend analysis or corrective action is documented, this could lead to concerns about compliance with CQC standards. A robust audit not only identifies such gaps but ensures there is a clear evidence trail addressing them. In this guide, I’ll break down how to prepare, execute, and follow up on a comprehensive CQC audit to safeguard your service’s compliance.

The Real Compliance Risk

The primary compliance risk in conducting a CQC audit is failing to identify and evidence gaps in governance and oversight, particularly under Regulation 17 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014. This regulation explicitly requires providers to have systems in place to assess, monitor, and mitigate risks to service quality. Inspectors will scrutinise whether your audit process itself demonstrates robust oversight or merely ticks boxes without driving improvement.

In our audits at MyCareAudit, we consistently see services falter when they treat audits as a paperwork exercise rather than a tool for proactive governance. For example, a care home may have a beautifully formatted audit template for medication management, but if no follow-up actions are recorded or completed, this could indicate a potential compliance issue under Regulation 17. The evidence trail inspectors follow starts with your audit records and ends with actions taken—if there’s no clear thread connecting the two, you’re in trouble.

A common failure point is focusing too heavily on low-priority areas while neglecting high-risk ones. For instance, we’ve seen domiciliary care providers spending hours auditing staff files for training certificates while missing glaring issues in risk assessments for service users. Inspectors will prioritise areas that directly impact safety and well-being—like how you manage falls, pressure ulcers, or medication errors. If your audit doesn’t reflect this focus, it signals to the CQC that your service lacks a clear understanding of risk management.

Another operational blind spot is inconsistent documentation of staff competence and training under Regulation 18. Inspectors will often ask for evidence that staff are trained and assessed as competent to deliver safe care. For example, if a care worker’s supervision notes highlight a need for additional dementia training but there’s no evidence this was arranged or completed, this could indicate a potential issue under Regulation 18 (Staffing). Your audit must not only confirm training is completed but also verify its impact on practice.

If you take ONE thing from this post, it’s this: Don’t let your audit process become your compliance risk. Make sure it’s more than a checklist—inspectors are looking for a living, breathing quality assurance system that identifies, addresses, and tracks risks to completion.

What Inspectors Often Find

Inspectors may review compliance documentation for issues such as incomplete MAR charts, missing signatures, or gaps in follow-up actions. These issues can suggest poor record-keeping and raise questions about the overall quality of care and the robustness of the provider’s governance framework.

For example, medication administration records (MAR charts) may have omissions, such as doses not signed off or unexplained gaps in administration times. These types of issues could raise concerns about compliance with Regulation 12 (Safe Care and Treatment) if they suggest a lack of accountability and oversight in medication management.

Governance audits are another area where gaps may be identified. For instance, internal audits may be unsigned or incomplete, which could lead inspectors to question whether findings were reviewed, acted upon, or escalated appropriately. Systemic gaps, such as unsigned health and safety audits with no evidence of risk mitigation, may raise compliance concerns.

Supervision records are also commonly reviewed for completeness. In some cases, services may document the date and topics discussed during staff supervisions but fail to record follow-up actions or evidence of completion. This could raise concerns about compliance with Regulation 18 (Staffing) if there is insufficient evidence that staff are being adequately supported and trained.

Finally, care plans and incident logs are often scrutinised for updates and escalation. A common issue is care plans that have not been revised after significant events, such as a fall or hospital admission. Similarly, incident logs that lack evidence of escalation to external professionals or safeguarding teams may raise questions about the service’s approach to risk management and compliance with Regulation 13 (Safeguarding).

Common Evidence Gaps

The most common evidence gaps in CQC audits include missing or unsigned supervision records, care plans that lack regular review dates, incomplete incident logs with no evidence of safeguarding escalation, and outdated risk assessments. Such gaps may raise concerns about compliance with Regulation 17 (Good Governance) if oversight and audit trails are inadequate.

Supervision records are often a weak point. A common issue is missing signatures or dates, which can leave inspectors questioning whether staff have been supervised within the expected timeframes. For example, a Registered Manager may claim supervisions occur quarterly, but the evidence folder may show fewer signed records than expected. This discrepancy could suggest either non-compliance with internal policies or poor record-keeping.

Another frequent issue is care plans that are not reviewed at the required intervals. Inspectors may find care plans that are out of date, with no evidence of review following significant changes in a resident’s condition. For instance, a care plan for someone with deteriorating mobility might still reference them as mobile, despite recent falls documented in daily notes. This creates an evidence gap that could suggest the service is not responsive to changing needs, potentially raising concerns under Regulation 9 (Person-Centred Care).

Incident logs are another area where providers may fall short. A common pattern is incomplete reporting, where incidents are documented but there is no record of follow-up actions or escalation to safeguarding, even in cases where this would clearly be expected. For example, an incident involving a resident’s unexplained bruising may be logged, but inspectors may find no evidence of a body map, a safeguarding referral, or even a discussion at staff handover. This could raise concerns about safeguarding practices.

Finally, gaps in training and competency records, especially around medication administration, may also raise concerns. Competency checks that are overdue or poorly documented could lead to questions about whether staff are adequately prepared to administer medication, which could affect compliance with CQC standards.

Addressing these gaps requires not just better record-keeping but also a robust system of internal quality assurance to catch issues before they escalate.

How to Self-Audit This Area

To self-audit compliance with CQC standards, start by reviewing your evidence against the five Key Questions (Safe, Effective, Caring, Responsive, Well-Led). Begin with your governance framework: ensure audits, policies, and team meetings are documented and up to date. Pull key records—care plans, incident logs, and staff training files—and cross-check for gaps. Finally, conduct a mock inspection by walking through the service as an inspector would, identifying areas where evidence is weak or missing.

First, pull your last three months of care plans. Inspect for consistency between assessments, care delivery, and reviews. For example, if a resident is assessed as at risk of falls, ensure the care plan includes specific, dated interventions and evidence that staff have followed these. Inspectors will typically find discrepancies here, such as outdated risk assessments or generic care plans that fail to reflect individual needs.

Next, review your incident logs for the past six months. Check that every incident has been categorised, escalated, and resolved appropriately. A common failure point is incomplete follow-through—inspectors will ask to see how incidents influenced changes in practice or triggered staff training. For instance, if a medication error occurred, was this reviewed in a team meeting, and is there evidence of updated staff guidance?

Now, focus on staff training and supervision. Pull your training matrix and ensure every staff member has completed mandatory courses within the required timeframe. Then, review your supervision log to confirm that all sessions are documented, with clear follow-up actions. Competency checks that are overdue or poorly documented could raise concerns about compliance with CQC standards—inspectors will want to see a clear audit trail here.

Finally, schedule a 30-minute governance review meeting this week with your senior team. Bring the last three months of internal audits and quality assurance reports. Discuss recurring themes, such as complaints or safeguarding concerns, and agree on immediate corrective actions. In practice, services often overlook these meetings or fail to document outcomes robustly, leaving inspectors questioning leadership oversight. Ensure minutes are taken and actions assigned with deadlines.

Conclusion

Conducting a comprehensive CQC audit isn’t just about ticking boxes; it’s about identifying and closing evidence gaps before inspectors do. If you take ONE thing from this post, let it be this: your audit is only as good as the evidence you can present. Policies that aren’t reflected in practice, incomplete care plans, or a lack of governance oversight are all red flags CQC inspectors will seize upon. The best audits don’t just highlight compliance issues—they include a clear action plan to address them, with accountability and timelines baked in.

A well-structured internal audit can help identify and address compliance issues, potentially improving outcomes. Use our compliance templates to mirror the CQC’s five Key Questions and ensure your governance framework is watertight. Don’t wait for an inspection to spot the cracks—run a self-audit today and take control of your compliance journey.

Run Your Own Compliance Check

Use our free Audit Checklist Generator to instantly create a tailored compliance checklist for your service. It takes under two minutes and covers all key regulatory areas.

Generate Your Free Checklist →

Need Help Passing Your Next Inspection?

MyCareAudit offers expert-led support to help you prepare with confidence:

• Book a Mock Inspection — a realistic, no-risk rehearsal with detailed feedback
• Get CQC Registration Support — end-to-end guidance through the application process

Speak to our compliance team today.

Further Reading

Explore more compliance guides and inspection preparation resources in our CQC Domiciliary Care Compliance hub.

Frequently Asked Questions

Q: How often should I audit this area?
A: Best practice is to conduct focused audits monthly, with a comprehensive review at least quarterly.

Q: What evidence will inspectors look for?
A: Inspectors typically request documented policies, completed audit trails, staff training records, and evidence of continuous improvement.

Q: Can I use MyCareAudit to prepare?
A: Yes — our free audit tool and checklist generator are designed specifically for UK care providers preparing for inspection.