Skip to main content

Governance layer · Risk register

Risk register built for care governance

Track, escalate, and mitigate risks, with a full audit trail connected to your compliance posture. Every risk carries a likelihood × impact rating, a named owner, and a review date.

CQC Regulation 17 requires evidence of risk management: identifying risks, taking action, and recording outcomes. The risk register is the system that produces this evidence.

How the register works

Scored, not listed
Likelihood × impact ratings from the shared risk matrix. Residual rating is tracked separately once mitigations are in place.
Owned and dated
Every entry has a named owner and a review date. Overdue reviews flag the entry and pull the compliance posture score down.
Linked to action
Mitigations are action plan entries, not free text — closing the loop from identified risk to completed action.
Moves readiness scoring
Open and escalated risks change your inspection readiness state in real time, visible on the compliance dashboard.

Key capabilities

Risk Kanban board

Open, Escalated, Mitigated, Accepted, and Closed columns, with card-level detail on owner, rating, and days open.

Risk rating

Likelihood × Impact scoring with colour-coded severity bands. Residual rating tracked separately after mitigation.

Linked control effectiveness

Active controls scored against each risk. Evidence that mitigation measures are working, not just documented.

Overdue tracking and escalation

Risks past their review date are flagged automatically. Escalation changes the compliance posture score.

Connected to compliance posture

Open and escalated risks change your inspection readiness state in real time, visible on the compliance dashboard.

Full audit trail

Who created, changed, and closed each risk entry, timestamped and immutable. CQC evidence on demand.

What it looks like

The risk register Kanban board, with risk cards showing owner, rating, and days open.

See the register scored against your risks.

Walk through the full workflow: risk entry, escalation, mitigation, closure, and the audit trail, with your own regulatory context.