CQC Audit Requirements: Evidence Inspectors Ask For (2026)
The audits CQC expects a care home to run, the evidence inspectors actually ask to see, and how to turn findings into the closed-loop action trail that scores well.
Statixs Compliance Team
Statixs
What CQC Means by "Audit"
When inspectors talk about audits, they don't mean a once-a-year external review. They mean the routine internal checks a well-run home does on itself — medication, care plans, infection control, falls — and, crucially, what you do with the findings.
Here's the line that separates a pass from a requirement notice: an audit that lists problems and stops there scores badly. An audit that finds a problem, assigns an action to a named person, and proves it was fixed is what "good governance" looks like under Regulation 17. CQC is checking the loop, not the checklist.
The Audits CQC Expects You to Run
There is no single legally fixed list, but inspectors consistently expect to see these, at a sensible frequency:
| Audit | Typical frequency | What it checks |
|---|---|---|
| Medication (MAR) | Monthly | Signing gaps, stock counts, fridge temperatures |
| Care plan quality | Monthly / quarterly | Personalisation, review dates, risk alignment |
| Infection prevention (IPC) | Monthly | PPE, cleaning schedules, outbreak readiness |
| Falls | Monthly | Trends, post-fall reviews, prevention actions |
| Health and safety | Quarterly | Environment, equipment, risk assessments |
| Staff files / recruitment | Quarterly | DBS, references, right to work, training |
| Accidents and incidents | Monthly | Patterns, reporting, lessons learned |
| Safeguarding | Ongoing | Referrals, outcomes, staff training levels |
Frequency should follow risk. A home that had two medication errors last month audits medication weekly until it's stable — and being able to show that responsiveness is itself strong evidence.
The Evidence Inspectors Actually Ask to See
Under the single assessment framework, "processes" is one of six evidence categories, and audits are how you prove it. Expect requests for:
- Completed audit records with dates and the name of who carried them out.
- Action plans linked to findings — not a separate document nobody reads, but actions tied to the specific issue found.
- Evidence of completion — the follow-up that shows the action actually happened.
- Governance meeting minutes where audit results were discussed and decisions made.
- Trend analysis — three months of falls or medication data with a note on what the pattern told you.
The weakest spot I see, again and again, is the middle of that list. Homes run the audits and file them, but the trail from finding to fix is missing. On paper it reads as: we noticed, and then nothing.
Turning Audits into a Closed Loop
A good audit trail has four parts, and inspectors can follow it end to end:
- Find — the audit identifies a specific issue ("3 of 12 care plans overdue for review").
- Assign — a named person owns the fix, with a deadline.
- Act — the work happens and is recorded.
- Verify — a re-check confirms it's resolved, and the result feeds the next governance meeting.
When that loop is visible, an inspector scoring the "processes" and "outcomes" evidence categories has everything they need to award a 3 or 4. When it isn't, even genuinely good care can score a 2 because the evidence doesn't demonstrate control.
This is where continuous systems earn their keep. A CQC compliance operating system links each audit finding to an owner, a deadline and a completion record, so the trail assembles itself instead of being rebuilt before a visit. For the wider picture of what inspectors assess, our CQC compliance guide maps the standards behind these audits.
A Practical Monthly Rhythm
You don't need a compliance department to do this well — you need a rhythm:
- Week 1: medication and MAR audit; log actions.
- Week 2: care plan sample (5–10 residents); check reviews and risk alignment.
- Week 3: infection control and health-and-safety walkround.
- Week 4: pull the month's incident and falls data, look for trends, take it to your governance meeting.
Rotate the sample each month so you're not auditing the same easy files. Over a year that gives you full coverage and a defensible evidence base.
Common Reasons Audits Fail to Impress CQC
| Problem | Why it costs you | Fix |
|---|---|---|
| Audit with no action plan | Shows monitoring, not governance | Attach owned actions to every finding |
| Actions with no completion evidence | Loop never closes | Record the follow-up and re-check |
| Same issues recurring | Suggests actions aren't working | Analyse root cause, not just symptoms |
| Audits done but not discussed | No leadership oversight | Standing audit item in governance minutes |
| Everything scored "green" | Reads as a rubber stamp | Honest findings score better than perfect ones |
That last row surprises people. A home whose audits only ever say "all fine" looks less credible than one that finds and fixes issues. Inspectors trust evidence of self-correction.
FAQs
What audits does CQC require a care home to do?
There is no single fixed list, but CQC expects routine audits of medication, care plans, infection control, falls, health and safety, staff files, incidents and safeguarding, at a frequency that reflects the home's level of risk.
How often should care home audits be carried out?
Most quality audits run monthly, with some (like health and safety) quarterly. Frequency should increase after a problem is found and stay high until the issue is stable. Being able to show that responsiveness is itself good evidence.
What audit evidence does CQC ask to see?
Completed audit records with dates and names, action plans linked to the findings, evidence that actions were completed, governance minutes discussing the results, and trend analysis over time.
Why do care home audits fail CQC inspection?
The most common reason is a broken loop: audits identify problems but there is no owned action, no completion evidence, or no governance discussion. CQC assesses whether issues are found, acted on and closed, not just recorded.
Is good governance the same as running audits?
No. Under Regulation 17, governance means using audit findings to drive improvement. Running audits is necessary but not sufficient — the evidence has to show findings turning into completed, verified actions.
Make the Audit Trail Build Itself
Statixs links every audit finding to an owner, a deadline and a completion record, and keeps the whole trail inspection-ready — so when CQC asks for evidence, it's already there.
From £5 per user per month. All features included.
Book a Demonstration | Explore CQC compliance software
Related: CQC Compliance Guide | Single Assessment Framework Explained | Governance and Regulation 17 | CQC Inspection Checklist
CQC Inspection Checklist
Everything inspectors look for, structured by the five key questions. Free for care providers.
Get the checklistStay Updated on Care Home Compliance
Get weekly tips on CQC compliance, DBS checks, and care home management. Plus exclusive guides and updates.
Free weekly newsletter • Unsubscribe anytime • No spam, ever
See Statixs in your environment
A demonstration tailored to your compliance requirements: CQC compliance, DBS checks, scheduling, and workforce management.
Book a Demonstration