The Care Provider's Quality Audit Checklist

A practical, England-only guide to building a quality-monitoring system that satisfies Regulation 17 (Good Governance) and gives CQC the evidence it looks for. Written for registered managers, nominated individuals and quality leads.

Why quality auditing matters

Regulation 17 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 requires every provider to operate effective systems to assess, monitor and improve the quality and safety of the service — and to keep accurate records that show they are doing it. Under CQC's single assessment framework, "Well-led" is judged largely on whether your governance actually drives improvement, not just whether audits exist on paper.

A strong quality-audit system does three things: it catches problems before they become incidents, it produces the evidence that proves your service is safe and well-run, and it shows a clear line from finding to action to improved outcome — the "golden thread" inspectors follow.

The three levels of quality checking

Effective providers do not rely on a single annual audit. They layer three kinds of checking so that nothing falls through the gaps.

The test of a good system is not how many audits you run — it is whether findings from the continuous layer feed the scheduled layer, and whether the formal audit confirms the picture the other two are painting.

What to audit — the core checklist

Use this as your master list. Not every area needs the same frequency, but every area needs an owner and a schedule.

Safe

• ☐ Medication management (MAR charts, storage, competency, PRN protocols, covert medication authorisations)
• ☐ Risk assessments — current, person-centred, reviewed after every change or incident
• ☐ Accidents, incidents and near-misses — logged, analysed for trends, actioned
• ☐ Safeguarding — concerns raised, referrals made, outcomes recorded
• ☐ Infection prevention and control — cleaning schedules, PPE stocks, IPC audits
• ☐ Health and safety — environment, equipment servicing, fire safety, water safety
• ☐ Staffing levels against assessed dependency

Effective

• ☐ Care plans — reviewed at the required frequency, reflect current needs and outcomes
• ☐ Consent and mental capacity — assessments, best-interest decisions, DoLS/authorisation status
• ☐ Nutrition and hydration — assessments, monitoring where required
• ☐ Staff training and competency — mandatory training compliance, supervisions, appraisals

Caring

• ☐ Dignity, privacy and independence observed in practice
• ☐ People and families involved in decisions about their care
• ☐ Communication needs met (Accessible Information Standard)

Responsive

• ☐ Care personalised to preferences, culture and history
• ☐ Complaints and compliments — logged, responded to in time, learned from
• ☐ Activity and engagement meaningful to each person

Well-led

• ☐ Quality-assurance calendar in place and up to date
• ☐ Action plans tracked to completion
• ☐ Notifications to CQC made when required
• ☐ Policies current and reflected in practice
• ☐ Staff feedback, meetings and culture

Setting an audit frequency

These are sensible starting points, not legal minimums — increase frequency for any area where you have a recent incident, a new team, or a known weakness.

Turning findings into improvement

An audit that ends with a score is only half done. The half that CQC cares about is what you did next. For every finding, capture:

1. The finding — what was not right, with the evidence.
2. The root cause — why it happened (not just what happened).
3. The action — the specific corrective step.
4. The owner — one named person responsible.
5. The target date — when it will be complete.
6. The review — the date you will check it actually worked, and the outcome.

This finding-to-outcome trail is the "golden thread." When an inspector picks any single issue, you should be able to show it flowing from audit, to action, to verified improvement.

How your quality system maps to CQC evidence

Under the single assessment framework, CQC gathers six categories of evidence. A good audit system directly feeds four of them:

Common pitfalls to avoid

• Audits with no action plan. A score alone proves nothing improved.
• Actions with no owner or date. They never close.
• Auditing only when an inspection is due. Governance must be continuous.
• Copying last month's report. Inspectors spot recycled findings instantly.
• No trend analysis. Individual incidents matter less than the pattern across them.
• Filing and forgetting. The point of an audit is the change it triggers.

Put this on autopilot

MyCareAudit turns this entire checklist into a live, scheduled system: every audit has an owner and a due date, every finding becomes a tracked corrective action, and every action links back to the evidence — so your Regulation 17 governance builds itself in the background and is inspection-ready on any given day.