Quality and safety monitoring
Providers should have reliable ways of monitoring whether services remain safe, effective and consistent.
CQC Regulation 17
CQC Regulation 17 – Good Governance Support
Regulation 17 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 requires registered providers to operate effective systems and processes for assessing, monitoring and improving the quality and safety of their services. It also covers risk management, accurate records, feedback, governance oversight and continuous improvement.
What Regulation 17 requires
What does CQC Regulation 17 require?
Regulation 17 is commonly referred to as the Good Governance regulation. In practical terms, providers should be able to demonstrate that they have effective systems for understanding how their service is performing, identifying risks and weaknesses, taking action where necessary and checking whether those improvements have worked.
Good governance should be visible in everyday practice. It is not simply a collection of policies or audit documents. CQC may look for evidence that leaders understand the service, monitor quality and safety, respond to concerns and use information to drive improvement.
Core governance areas
The core elements of Regulation 17 Good Governance
Risk management
Risks should be identified, recorded, reviewed and acted upon before they develop into larger compliance problems.
Audits and assurance
Audits should produce useful information and lead to clear actions rather than becoming paperwork that is completed and forgotten.
Accurate records
Governance records should be complete, current and capable of showing what was reviewed, what decisions were made and what action followed.
Feedback and learning
Complaints, incidents, safeguarding concerns, staff feedback and service-user feedback should inform improvement.
Leadership oversight
Registered Managers, nominated individuals and senior leaders should be able to demonstrate how they know the service is performing properly.
Useful evidence
Evidence CQC may expect to see
Governance meeting minutes
Audit results
Action plans
Risk registers
Incident and complaint analysis
Safeguarding oversight
Training records
Service-user feedback
Staff supervision and competency records
Policy reviews
Quality-monitoring reports
Evidence that actions were completed
The important point is not simply whether these documents exist. Providers should be able to show that the information is reviewed, understood and used to make improvements.
Continuous governance
Good governance should be continuous
Governance is not something that should only happen before a CQC inspection. Strong providers use an ongoing cycle of planning, monitoring, reviewing, improving and recording.
Plan → Monitor → Review → Improve → Record → Repeat. This cycle helps turn governance from an occasional compliance exercise into part of normal service management.
Common weaknesses
Common gaps we identify during governance reviews
Actions not followed up
Audits are completed but findings are not translated into owned, time-bound actions.
Generic or outdated policies
Policies do not reflect the actual service model, current practice or identified risks.
Poor governance records
Meeting records do not clearly show decisions, accountability or follow-up.
Risk registers not reviewed
Risks are documented but are not actively monitored, escalated or reassessed.
Repeated incidents without learning
Patterns are not analysed and there is little evidence of preventative action.
Weak evidence of improvement
Changes are made but providers cannot demonstrate whether they were sustained or effective.
How CQC Consultant can help
Regulation 17 Good Governance support
CQC Consultant can help providers review and strengthen their Regulation 17 governance systems. Our support can include governance audits, evidence reviews, quality-assurance frameworks, risk-monitoring arrangements, audit schedules, action planning and preparation for regulatory scrutiny.
Where weaknesses have already been identified by CQC, we can help turn findings into a structured remedial action plan and build the evidence needed to demonstrate improvement.
Governance review
Review existing systems, records and oversight arrangements.
Evidence mapping
Identify what evidence exists, where gaps remain and how information should be organised.
Audit and monitoring framework
Build a proportionate system for quality, risk and compliance monitoring.
Improvement planning
Convert findings into clear actions, responsibilities, deadlines and follow-up checks.
Regulation 17 FAQs
Common questions about CQC Good Governance
What is CQC Regulation 17?
Regulation 17 is the Good Governance regulation. It requires registered providers to operate effective systems and processes for monitoring quality and safety, managing risks, maintaining appropriate records and improving services.
What evidence is useful for Regulation 17?
Evidence can include audits, risk registers, governance meeting records, action plans, incident analysis, complaints, feedback, training records and evidence of completed improvements.
Does Regulation 17 apply to all CQC-registered providers?
It applies to registered providers carrying on regulated activities, although governance systems should be proportionate to the size, complexity and type of service.
Can a mock inspection review Regulation 17?
Yes. A mock inspection can test how governance systems work in practice and whether leaders can demonstrate effective oversight.
What happens if CQC identifies poor governance?
The provider should understand the concerns, address immediate risks, develop a clear action plan and be able to demonstrate that improvements have been implemented and monitored.
Need help with Regulation 17?
Strengthen your CQC governance systems
Book a free initial consultation to discuss Regulation 17, governance reviews, compliance audits or improvement planning.