CQC readiness is often talked about as if it is a document exercise.

Create the folder. Update the policies. Check the training spreadsheet. Make sure the fire risk assessment is somewhere sensible. Hope nobody asks a difficult question.

But that is not real readiness.

Real CQC readiness is not about having a folder that looks tidy before inspection. It is about being able to show, clearly and confidently, how the practice runs every day.

That is the standard practices should be aiming for.

A well-prepared practice does not need to panic when inspection is mentioned. It already has a working system. The evidence is not artificially created for CQC. It is generated naturally through good governance, safe processes, clear accountability and regular review.

The problem with the “CQC folder” mindset

The traditional CQC folder can give a false sense of security.

A practice may have policies, templates, certificates, meeting notes and trackers, but still struggle to evidence how those things are used. A policy that nobody reads is not strong evidence. A spreadsheet that is not reviewed is not oversight. A meeting note without actions is not learning. A risk register that never changes is not risk management.

The five evidence questions

If a practice can answer those five questions across safeguarding, complaints, significant events, recruitment, training, premises, infection control, information governance, access and medicines safety, it is in a much stronger position.

That is the shift.

Not “where is the document?”

But “how do we know this is working?”

1. Start with accountability: who owns what?

One of the most useful pieces of CQC evidence is a clear management and responsibility structure.

This does not need to be complicated, but it does need to be honest. It should show who leads on key areas, who provides cover, how issues are escalated and where evidence is stored.

For example, a practice should be able to show clear ownership for:

• complaints
• significant events
• safeguarding
• infection prevention and control
• health and safety
• fire safety
• staff training
• recruitment checks
• information governance
• policies
• QOF and contract monitoring
• patient access
• premises compliance
• emergency equipment
• business continuity

This is where many practices become vulnerable. They may have capable people doing the work, but the responsibility is informal, undocumented or dependent on one person knowing everything.

That becomes a risk.

Example CQC responsibility matrix

This gives CQC, staff and the partnership a clear view of how the practice is governed. It also protects the practice operationally. If the manager is away, the system should still function. Readiness cannot live in one person’s head.

2. Staff confidence is evidence

CQC readiness does not stop with managers and partners.

Staff need to know what to do in the situations that matter. This includes reception, administration, nursing, dispensary, ARRS staff, trainees and clinicians.

A useful way to test this is not through a formal exam, but through a staff confidence check.

These are simple questions, but they reveal a lot.

If only one or two people know the answers, the process is fragile. If the wider team can answer confidently, the practice can demonstrate that safety processes are understood, not just written down.

A staff confidence check can be repeated every six or twelve months, discussed at a team meeting and used to identify training gaps.

The evidence is not just the completed quiz. The evidence is what the practice did with the answers.

3. Safeguarding evidence needs to show oversight, not just concern

Safeguarding is one of the clearest areas where practices need to evidence active oversight.

It is not enough to say that staff know how to raise concerns. The practice should be able to show that concerns are reviewed, discussed, acted on and followed up.

A strong safeguarding meeting record should include:

The key is to move away from a passive list of cases and towards an active safeguarding oversight log.

That tells a very different story.

It shows the practice is not only aware of safeguarding risk, but actively managing it.

4. Estates and premises evidence matters more than people think

Premises evidence can feel like the dull end of CQC preparation.

Fire alarms. PAT testing. Calibration certificates. Legionella reviews. COSHH assessments. Emergency lighting. Fridge checks. Boiler servicing.

Not glamorous. Not exciting. Very much the beige cardigan of compliance.

But premises safety is directly linked to safe care.

The important word here is live.

An estates tracker should not simply record that something exists. It should show:

• date last completed
• next review date
• responsible person
• current status
• gaps or overdue actions
• evidence location
• action taken

This turns estates compliance from a collection of certificates into a management system.

5. COSHH is not just a template exercise

COSHH assessments are a good example of where practices can hold paperwork without necessarily having assurance.

A COSHH assessment should clearly identify:

The practical question is whether staff using the substance understand the control measures.

For example, if a cleaning product requires gloves, ventilation or specific storage, that should not just sit inside a document. It should be reflected in staff practice.

Again, the aim is not beautiful paperwork. The aim is safe use, clear controls and evidence that the practice has reviewed the risk.

6. Risk assessments should show judgement, not just scores

Risk assessments are not there to make the practice look risk-free. They are there to show that risks are understood, controlled and reviewed at a proportionate frequency.

A useful risk assessment should include the hazard, who may be affected, likelihood, severity, current controls, additional controls, owner, timescale and residual risk.

Suggested review frequency

This is where risk assessment becomes useful evidence. It shows that the practice is not trying to remove every possible risk, but is making sensible, documented and proportionate decisions.

7. Workforce compliance is CQC evidence

Staff files and HR trackers are often viewed as internal administration. In reality, they are part of CQC readiness.

A practice should be able to evidence that staff are recruited safely, trained appropriately and reviewed regularly.

The tracker should not exist simply to say “yes” or “no”. It should support active management.

This gives the practice a clear view of workforce risk.

It also helps avoid the classic last-minute inspection scramble, where someone suddenly tries to locate five years of certificates from seven inboxes and a dusty USB stick named “training old maybe final final”.

8. Gaps are not always failures — unmanaged gaps are

One of the most important parts of CQC readiness is being honest about gaps.

No practice has perfect historical records, perfect premises evidence or perfect workforce files. The issue is not whether a gap has ever existed. The issue is whether the practice knows about it, has assessed the risk, put proportionate controls in place and documented the decision.

For example, a historic missing reference for a long-standing member of staff may not require the same response as a missing reference for a new starter. The practice should consider the context, the person’s length of service, DBS status, proof of qualifications, role, supervision, performance history and whether there is any actual concern.

The important part is documenting the judgement. This turns a weakness into evidence of active governance.

This is the difference between “we are missing a document” and “we identified a historic issue, assessed the risk and recorded why the current controls are proportionate.”

9. Policies need ownership, not just storage

Policies are another area where practices can appear prepared but lack real assurance.

Having policies stored somewhere is only the first step.

A practice also needs to know:

• who owns each policy
• when it was last reviewed
• when it is due for review
• whether staff have been told about updates
• whether the policy reflects actual practice
• whether any changes require training or communication
• whether the policy has been approved through the correct route

Example policy tracker

10. Complaints, significant events and learning

CQC will not expect a practice to be perfect.

They will expect the practice to identify problems, respond appropriately and learn.

This is why complaints and significant events are so important. They show how the practice listens, reflects and improves.

The final step is often missed.

Practices record the event, discuss it, agree an action — and then never close the loop.

That is what turns an event log into a learning system.

11. Well-led includes how you support staff

CQC readiness is not only about policies, premises and trackers. It is also about whether the practice creates a safe and supportive environment for staff.

Staff wellbeing evidence does not need to be overcomplicated. A practice should be able to show that staff know where to access support, how to raise concerns, how to speak up and where to find help when work or life pressures become difficult.

This helps evidence a culture where staff are supported, concerns can be raised and the practice recognises that workforce wellbeing is directly linked to safe patient care.

12. Build a monthly CQC readiness rhythm

The best way to stay ready is to stop treating CQC as a separate project.

Instead, build readiness into the normal management cycle.

This creates a steady system.

It also makes inspection preparation far less stressful. Instead of trying to build evidence retrospectively, the practice is continually generating it.

13. The CQC readiness operating model

A simple model for practices is:

This is what makes CQC readiness real.