Article

The systems an experienced inspector would build

When people think about CQC compliance, they think about documents: policies, audits, registers, training records, minutes, action plans, risk assessments. Those documents matter, but they are not the system. A service can hold a complaints log, an incident log, a safeguarding file, a risk register, an audit schedule and a folder full of policies, and still not have good governance. The real test is whether those things connect.

By Klaudiusz Zembrzuski, ex-CQC inspector.

That is the part experience teaches. Not secret knowledge, not a hidden inspection trick, not a shortcut to a rating, just the practical ability to see how one piece of evidence should lead to another. A complaint may reveal a safety issue. An incident may show a policy is not working in practice. A safeguarding concern may expose a training gap. A repeated audit failure may belong on the risk register. An overdue action may say something about oversight. After years of inspecting, that is what I learned to look for first, and it is the difference between recordkeeping and running a service well.

Records are not the same as grip

For most providers the problem is not absence. It is separation. The incident record is in one place, complaints somewhere else, safeguarding handled separately, audits saved as files, actions in a spreadsheet, risks reviewed when someone remembers, and the meeting minutes mention issues without clearly linking back to the original event. Each item looks acceptable on its own. The weakness appears the moment someone asks what changed, who reviewed it, whether the risk was escalated, whether the same thing happened again, whether the action was actually completed, and whether this was an isolated event or a pattern.

A service may have all the right registers, but if they do not speak to each other the provider cannot easily show learning, oversight or improvement. Good governance is not just recording that something happened; it is showing what the organisation did with that information. That is the question a provider should be able to answer without rebuilding the evidence afterwards: what did we know, what did we do, and how do we know the action worked? The natural movement of that, from something happening, through review and risk and action and learning, to a checked, closed loop, is the spine of good governance, and it is worth understanding in its own right.

Why a stretched manager misses the connections

This is not a criticism of registered managers. The role is genuinely hard. In a small service the registered manager may also be carrying staffing, clinical operations, premises, rota gaps, recruitment, patient queries, audits, policies, equipment and contractors, all at once. They may know the service intimately and care deeply and work very hard, and still miss connections, because the system around them is weak.

If governance depends on memory, the manager has to hold too much: that this month's complaint relates to last month's incident, that an audit finding should link to a risk, that a policy changed because of a safeguarding concern, that the nominated individual still needs to see an open action. That works for a while. It does not scale, and it does not survive pressure. The better answer is not to expect the manager to remember more. It is to build a system that prompts the right connections, so that when an incident is logged the questions an experienced person asks instinctively, was there harm, was this predictable, had it happened before, were controls in place, does this belong on the risk register, what learning should be recorded, are prompted rather than relied upon. That is the practical value of embedded inspector thinking: it does not replace professional judgement, it prompts it.

Policies describe the system; evidence shows it working

Policies are important and often overvalued. A policy says what should happen; governance shows whether it is happening. A provider may have a safeguarding policy, but the real question is whether staff recognise concerns, escalate them, record decisions and follow through. They may have a complaints policy, but the question is whether complaints are answered, themed, learned from and used to improve. The policy describes the intended system; the evidence shows whether the system works. That is why a governance platform should not try to be a policy library. Its real job is to show the live evidence of governance in practice.

Actions are where you see whether governance is real

If I had to choose one sign of whether governance is real, I would look at actions, and not whether there are actions, but whether they are owned, dated, followed up and closed with evidence.

Weak governance produces vague actions: staff reminded, policy to be reviewed, discussed with team, manager to monitor. Sometimes those are true, but they rarely show whether anything actually changed. A stronger system asks who owns the action, what exactly needs to happen, by when, what evidence will show it is done, who checked it, whether it worked, and whether the risk remains. This is where many small providers lose grip, not because they failed to spot the issue or even to act on it, but because the follow-through was not visible enough. An experienced inspector does not only ask whether a service identified a problem. They ask what happened next.

Oversight is not the same as involvement

In a small service the nominated individual, owner or provider is often involved informally: they speak to the manager regularly, know the main pressures, are approachable and committed. That is useful, but it is not the same as evidenced oversight. Oversight means the right person can see the right information at the right level. They do not need to read every record; they do need to know which risks are open, which actions are overdue, which themes are emerging, and where the manager needs support. Without that structure, oversight is a conversation. With it, oversight is evidence: a registered manager working from a live view of incidents, complaints, safeguarding, audits, actions and risks, and a nominated individual seeing the higher-level version of the same picture, what is improving, what remains unresolved, what needs escalation.

Readiness as a byproduct, not a project

The wrong way to prepare for inspection is to start building the story when the pressure arrives, reconstructing evidence, checking dates, chasing actions, rewriting summaries and trying to remember why decisions were made. That creates stress and weakens credibility. The better way is to let the story build itself through routine governance, so that an inspection pack is not a separate project but a filtered view of the evidence the service already uses. That is the point of continuous governance: not inspection prep as an event, but readiness as a byproduct of running the service well.

This is what small independent providers most need, because they face a disproportionate burden. They rarely have a quality team, a governance department or analyst support, yet they must still show that care is safe, effective, caring, responsive and well-led. The answer is not to drown a small service in bureaucracy. It is a lean system that connects the important things, the assurance calendar, incidents, complaints, safeguarding, audits, risks, actions, manager oversight, nominated individual oversight and inspection evidence, adapted to the size and complexity of the provider. Not hospital-scale bureaucracy, not a folder of generic policies, just a practical governance loop that shows the service knows its risks, acts on them, and learns.

What software can and cannot do

Software is not the judgement. The registered manager, clinical lead and provider still have to make decisions, understand their service, act when risk appears, and lead. The role of software is to make the right governance behaviour easier and harder to forget: to prompt the connections, show the gaps, keep the evidence trail, reduce reliance on memory, and help a newer or stretched manager work with the structure that a more experienced person would otherwise build by hand. That is a realistic promise, and it is worth being plain about what it is not. Not use this and you will get a better rating. Not you no longer need experience. Not the platform does the manager's job. Simply: the system helps the manager run governance in a joined-up way.

Experience is pattern recognition

The systems an experienced inspector would build are not complicated because the rules are mysterious. They are structured because care is complex. Experience teaches pattern recognition: that a complaint can be a safety signal, an incident can be a policy failure, an audit can expose a leadership gap, and an overdue action can tell you something about oversight. That is the thinking a good governance system should encode.

For small providers this matters because they do not have years to build that structure slowly. They need something proportionate, practical and usable now. The aim is not to replace the registered manager. It is to support their judgement, reduce key-person risk, and make the evidence of good governance visible as the service runs. That is what joined-up governance looks like. Not more folders. Better connections.