Audit template
Policy & Procedure Audit
Confirms policies are current, reviewed, version-controlled and read by staff. This template runs annual in MyCareCompliance and carries 9 mapped checks across 7 CQC quality statements.
Last reviewed: September 2026. This guidance reflects CQC information available at the date above — always refer to cqc.org.uk for current regulatory requirements.
What the audit covers
Every question in the Policy & Procedure Audit is mapped to a CQC quality statement and the underlying regulation, so a failed check tells you exactly which part of the single assessment framework is at risk. This is an optional template you can switch on when it applies to your service.
- Runs annual — optional template
- Part of the Safety & governance audit category
- Maps to 4 regulations: Regulation 12 — Safe care and treatment, Regulation 13 — Safeguarding service users from abuse and improper treatment, Regulation 16 — Receiving and acting on complaints, Regulation 17 — Good governance
- Failed checks become tracked improvement actions with an owner, due date and evidence
The 9 checks
Infection prevention and control
Safe — 1 check- Regulation 12 — Safe care and treatmentPolicy & Procedure Audit
Does the Infection Prevention and Control (IPC) policy align with current national guidance and cover domiciliary-specific risks?
What we look for: Review the IPC policy to ensure it addresses specific risks in people's own homes (e.g., clinical waste disposal, pet risks, handling soiled laundry). A fail is an outdated policy or one written for a clinical/care home setting that doesn't translate to homecare.
Evidence: IPC policy, PPE guidance, spot check records, waste disposal procedures
Safe systems, pathways and transitions
Safe — 1 check- Regulation 12 — Safe care and treatmentPolicy & Procedure Audit
Does the Business Continuity plan provide actionable procedures for emergencies specific to a domiciliary care service?
What we look for: Review the Business Continuity plan for scenarios like severe weather, mass staff sickness, cyber-attacks, or office power failure. It must include a robust priority rating system for service users. A fail is a generic plan lacking prioritized lists for missed visits.
Evidence: Business continuity plan, on-call folder, IT failure procedure, severe weather plan
Safeguarding
Safe — 1 check- Regulation 13 — Safeguarding service users from abuse and improper treatmentPolicy & Procedure Audit
Does the Safeguarding policy accurately reflect the current multi-agency procedures of the local authority?
What we look for: Cross-reference the service's safeguarding policy with the local Safeguarding Adults Board (SAB) procedures. It must include correct local contact details and thresholds. A fail is a generic national policy that lacks local referral pathways.
Evidence: Safeguarding policy, local authority SAB guidelines, incident reporting flowcharts
Listening to and involving people
Responsive — 1 check- Regulation 16 — Receiving and acting on complaintsPolicy & Procedure Audit
Is the Complaints policy provided in accessible formats to people using the service and their relatives?
What we look for: Check the information pack given to people at the start of their care. The complaints process must have clear timescales and detail how to escalate to the Ombudsman. A fail is if the policy is only available upon request or lacks escalation options.
Evidence: Service user guide, Easy Read complaints procedure, website, welcome pack
Freedom to speak up
Well-led — 1 check- Regulation 17 — Good governancePolicy & Procedure Audit
Is the Whistleblowing policy actively promoted, clearly outlining external escalation routes (e.g., CQC, Local Authority)?
What we look for: Check that the policy clearly distinguishes whistleblowing from grievances and lists correct external contacts (CQC, Whistleblowing Helpline). Staff must feel safe to use it without fear of reprisal. A fail is if the policy only directs concerns internally.
Evidence: Whistleblowing policy, staff noticeboards, staff handbook, induction records
Governance, management and sustainability
Well-led — 3 checks- Regulation 17 — Good governancePolicy & Procedure Audit
Are all mandatory policies and procedures readily accessible to all staff, including remote domiciliary care workers?
What we look for: Check if care workers can easily access key policies (e.g., via an app or secure portal) while in the community. Good practice means immediate access without having to visit the office. A fail is if staff rely on outdated paper copies or cannot locate policies.
Evidence: Staff app or portal access, policy index, staff handbook, spot checks with staff on duty
- Regulation 17 — Good governancePolicy & Procedure Audit
Is there a robust version control system ensuring all policies are reviewed annually or when legislation changes?
What we look for: Review a sample of 5 key policies (e.g., Safeguarding, Medication, IPC). Ensure they have an active version number, date of last review, and date of next review. A fail is finding past-due review dates or multiple versions of the same policy in circulation.
Evidence: Policy review schedule, policy document footers (version control), minutes of management meetings
- Regulation 17 — Good governancePolicy & Procedure Audit
Are data protection and confidentiality policies compliant with UK GDPR, with clear guidelines for mobile devices and remote working?
What we look for: Ensure policies cover the secure use of digital care planning apps on personal or company mobile phones (e.g., screen locks, not sharing passwords). A fail is the absence of clear instructions on handling sensitive data securely in the community.
Evidence: Data protection policy, mobile device usage policy, staff confidentiality agreements
Shared direction and culture
Well-led — 1 check- Regulation 17 — Good governancePolicy & Procedure Audit
Is there evidence that staff read, understand, and formally acknowledge critical policy updates?
What we look for: Sample 3 recently updated policies and check the tracking system used to confirm staff have read them. Good practice includes brief knowledge checks. A fail is a lack of evidence that staff are informed of crucial changes in practice guidelines.
Evidence: Policy sign-off sheets, digital read-receipts, supervision records, team meeting minutes
See it running for your service
Book a free demonstration and we will run the Policy & Procedure Audit against scenarios from a service like yours, or start your 7-day trial and try it yourself.
See it with your own service
Book a free demonstration and we will walk through the platform using scenarios from a service like yours.
