How Providers Can Evidence That CQC Assurance Covers People Who Are Most at Risk

CQC assurance should show that providers understand which people are most at risk and how those risks are being controlled. A general audit programme may not be enough if it does not test people with complex needs, changing presentation, communication barriers or higher dependency. For wider context, see our CQC evidence and assurance guidance, CQC quality statements resources and CQC compliance knowledge hub.

Strong providers can show that assurance is targeted. They identify people who need closer oversight, test whether support is safe and record what changed when risk increased.

Why this matters

This matters because people with higher or changing risk can be missed by broad assurance checks. A service may look compliant overall while specific people experience avoidable gaps.

It also matters because CQC may test whether leaders know where the greatest risk sits. Provider assurance should show how risk is prioritised, monitored and reviewed before harm or poor experience occurs.

Clear framework for targeted assurance

The first requirement is risk stratification. Providers should identify people whose needs, communication, health, behaviour, mobility or medication risks require closer assurance.

The second requirement is evidence depth. Higher-risk assurance should connect care records, audits, feedback and staff practice. This reflects what good evidence looks like under CQC’s assurance expectations, because assurance must be current, relevant and tested against real delivery.

The third requirement is responsive governance. Leaders should review whether controls are working and act quickly when evidence shows drift.

Operational example 1: Evidencing assurance for people with changing mobility risks

Step 1: The Quality Lead reviews falls records, mobility assessments and daily notes, records people with changing mobility risk in the targeted assurance tracker, then identifies who needs closer review.

Step 2: The Registered Manager compares mobility risks with equipment records and staffing deployment, records findings in the safety assurance note, then confirms whether current controls remain suitable.

Step 3: The Deputy Manager observes support for selected people during transfers, records technique and equipment use in the validation sheet, then checks whether staff follow the current mobility plan.

Step 4: The Team Leader updates staff on revised mobility controls, records discussion in the shift communication log, then checks that staff apply the changes during routine support.

Step 5: The Registered Manager reviews mobility assurance through governance, records the outcome judgement, then escalates if falls, near misses or staff uncertainty continue.

What can go wrong is that mobility changes are recorded but not reflected quickly enough in practice. Early warning signs include near misses, staff using different techniques and delayed equipment review. Escalation may involve therapy input, urgent care-plan review or temporary additional staff support. Consistency is maintained by checking live support for people whose risk has changed.

Governance should audit mobility assessments, falls trends, equipment records and observed practice. The Registered Manager reviews monthly, senior leaders review quarterly, and action is triggered by changed mobility, repeated near misses or unclear staff practice. The baseline issue is inconsistent assurance for changing mobility risk. Measurable improvement includes safer transfers, fewer incidents and clearer staff confidence. Evidence sources include care records, audits, feedback and staff practice.

Operational example 2: Evidencing assurance for people with communication barriers

Step 1: The Communication Lead reviews care plans, feedback routes and communication passports, records people needing adapted engagement in the assurance tracker, then identifies whether their views are being captured.

Step 2: The Registered Manager compares communication evidence with reviews and complaint records, records the analysis in the experience assurance note, then checks whether people are involved meaningfully.

Step 3: The Deputy Manager observes staff communication with selected people, records use of preferred methods in the validation sheet, then confirms whether staff follow the agreed communication plan.

Step 4: The Team Leader reinforces communication guidance with staff, records learning in the team practice log, then checks that staff use the person’s preferred method consistently.

Step 5: The Registered Manager reviews communication assurance at governance meeting, records the judgement, then escalates if people’s views remain poorly evidenced or staff practice varies.

What can go wrong is that feedback systems rely on verbal or written methods that some people cannot use. Early warning signs include limited review comments, repeated family interpretation and staff uncertainty about communication tools. Escalation may involve speech and language input, advocacy or revised engagement methods. Consistency is maintained by checking whether each person’s voice is evidenced in a way that works for them.

Governance should audit communication plans, review involvement, feedback coverage and observed staff practice. The Registered Manager reviews monthly, senior leaders review quarterly, and action is triggered by missing voice evidence, narrow feedback or inconsistent communication practice. The baseline issue is weak assurance for people with communication barriers. Measurable improvement includes better involvement evidence, clearer staff practice and broader feedback. Evidence sources include care records, audits, feedback and staff practice.

Operational example 3: Evidencing assurance for people with complex medicines support

Step 1: The Medicines Lead reviews medicine profiles, MAR charts and recent changes, records people with complex medicines support in the assurance tracker, then identifies who needs enhanced checking.

Step 2: The Registered Manager compares medicines evidence with competency records and professional advice, records findings in the medicines assurance note, then confirms whether staff are suitably supported.

Step 3: The Deputy Manager observes medicines support for selected people, records checking and recording practice in the validation sheet, then confirms whether administration follows the current guidance.

Step 4: The Team Leader follows up any uncertainty with staff, records coaching in the medicines practice log, then checks that the next administration record is accurate and complete.

Step 5: The Registered Manager reviews complex medicines assurance at governance meeting, records the risk judgement, then escalates if errors, omissions or competency concerns continue.

What can go wrong is that complex medicines are audited in the same way as lower-risk administration. Early warning signs include repeated queries, unclear PRN guidance and MAR corrections for the same person. Escalation may involve pharmacist review, competency reassessment or temporary second checks. Consistency is maintained by applying enhanced assurance where medicines risk is higher.

Governance should audit MAR accuracy, medicine changes, competency evidence and professional advice follow-up. The Registered Manager reviews monthly, senior leaders review quarterly, and action is triggered by medicine changes, repeated errors or weak staff confidence. The baseline issue is insufficient assurance for complex medicines support. Measurable improvement includes fewer corrections, safer administration and stronger staff competence. Evidence sources include care records, audits, feedback and staff practice.

Commissioner expectation

Commissioners expect providers to know which people are most at risk and evidence how those risks are controlled. They look for targeted assurance, not only whole-service averages.

They also expect providers to act when risk changes. Assurance should become more focused when dependency, communication needs, health risks or medicines complexity increase.

Regulator / Inspector expectation

CQC assessors expect provider assurance to cover people who may be most vulnerable to poor outcomes. They may test whether higher-risk people are visible in care records, audits, feedback and governance.

Inspectors usually gain confidence when leaders can show focused checks and timely action. They lose confidence when assurance is broad but does not identify people whose risks need closer review.

Conclusion

Provider assurance is strongest when it pays close attention to people who are most at risk. Whole-service audits and general governance reports are useful, but they must be supported by targeted checks for people with changing needs, communication barriers and complex support arrangements.

Governance makes this targeted assurance visible. Risk trackers, validation sheets, communication logs, medicines records and governance summaries should show how leaders identify higher-risk people and test whether controls are working. Outcomes are evidenced through safer mobility support, better involvement, stronger medicines practice and clearer staff confidence.

Consistency is maintained when every higher-risk situation follows the same route: identify the person-specific risk, gather current evidence, test live practice, act on gaps and review whether outcomes improve. That helps providers show CQC that assurance is not only broad, but focused where it matters most.

---