It is quarter to five on a Friday, and a care home manager has been asked to show the evidence behind one sentence in the last inspection report. The policy is in a binder in the office. The audit that tested it is on a spreadsheet nobody has opened since March. The action that followed is in an email from February, somewhere under about forty others. All of it exists. However, they do not belong to the same space.
The purpose of social care quality management is to prevent this from happening. Sometimes despite best efforts, the library goes stale due to the documents that are stored within the library itself. This article begins at the other end of the problem: the five questions that the inspector will ask, Regulation 17 and how to keep the library from going stale.
The trouble with folders named after documents
The CQC asks the same five questions of all care services: Safe, Effective, Caring, Responsive and Well-led. Yet very few filing systems reflect these questions. Folders by document type are rarely a decision. They accumulate over time: policies, training certificates, insurance policies and maintenance drawers. It looks tidy, until someone asks: “how do you know that people are protected from avoidable harm?” The answer involves three folders and an inbox.
Try it the other way up. Five headings, one for each key question, and under each one the policy, the audit, the result and what was done about it. Medicines are a good place to start. A medicines policy proves that a policy exists. Next to this example is a monthly audit of the home, which reveals that the medication for as-needed conditions was not being recorded by the Support Worker. The Support Worker is tasked with ensuring that the medication is recorded on the resident’s medication list. After the audit, the Support Worker has taken action to ensure that the medication is recorded properly. The result is that there are no gaps in the recording of the medication for the resident. This demonstrates that the home is performing audits to ensure that the Support Workers are following the protocols for the care of the residents.
What Regulation 17 asks a provider to keep
Regulation 17: Good Governance is a regulation that requires that all records of people who use the service are accurate, complete and contemporaneous with the individual’s use of the service. Also, all records of the management of the service must be kept securely. The regulation lists several types of records that must be kept, including policies and processes, service and maintenance records, audit and review records, purchasing records and records of any action plans that have been implemented as a result of any risks or incidents that may happen within the service.
Nothing there demands a particular system. Both paper and electronic records are acceptable if they meet the requirements of the Data Protection Act 2018 and that the records are accessible to those who are authorised to access them. For social care quality management, the test is whether the right person can access the right record quickly without others being able to access it. A shared drive that anyone can edit fails one half of it. A cabinet nobody holds the key to fails the other.
The same guidance sets a standard for audit information. It should be “up to date, accurate and properly analysed”. A certificate that ran out last month misses the first part. A spreadsheet that nobody opens misses the last.
Retention and disposal of records can be managed per the NHS England Records Management Code of Practice. The code of practice specifically mentions adult social care and suggests that a senior member of staff, such as the manager of a care home, should lead on records management within that care home. Periods vary by record type, so the Code itself will be the place to look.
A document proves very little on its own
A fire risk assessment on file proves that somebody wrote a fire risk assessment. Whether its actions were finished is a separate matter. A training matrix says who attended a session and nothing about whether practice changed afterwards.
A library that stops at the document can answer “do you have a policy?”. Regulation 17 leans towards a harder question: how does the service assess, monitor and improve quality and safety? To answer that, the library needs the check that tests the policy and a record of what happened when the check found something. Most libraries hold the policies well, the checks unevenly and the follow-up hardly at all.
Two shelves in practice
The Safe shelf is the medicines example above, plus risk assessments, health and safety checks and the actions that came from each finding.
The Responsive shelf works a little differently. It holds complaints and what changed because of them, and survey results with an action plan attached. The InvictIQ Quality Assurance menu stores and showcases action plans raised from survey results as supporting this key question, which turns the link between a comment and a change into something that can be shown and not just claimed. Effective, Caring and Well-led follow the same pattern: training and supervision records beside the checks that test practice, feedback from the people supported beside what changed, and governance audits beside the action log. These are examples, and each service decides what counts as its own evidence.
Three ways to hold the same evidence
| Paper binders | Shared drive folders | Evidence linked to audits and actions | |
| Finding what an inspector asked for | Depends on who filed it and how | Depends on folder names and search | Drill from a score into the report and evidence |
| Seeing what is overdue | Only by reading each page | Only if someone keeps a separate tracker | Due and overdue actions shown, with escalation |
| Linking a document to its check and follow-up | By hand, if at all | Through file names or a separate list | Findings, evidence and actions held together |
| Showing change over time | By comparing old and new copies | By file history, where the drive keeps it | Trends across audits over time |
The table describes how each approach is built; not how any particular service performs. A tidy, well-run binder can still beat a neglected platform. What differs is the effort each design asks of the people running it.
Keeping it current
Libraries go stale for one plain reason: nobody owns them. Each shelf needs a named person, usually the Registered Manager or a deputy, and the name matters less than having one. A review date on every document helps, with a line saying what changed. An generic example of a review note: reviewed after the quarterly falls audit, wording on post-fall observations clarified, next review due in six months.
The steadier habit is to let routine checks fill the library. With InvictIQ one can schedule audits automatically across sites, turns findings into suggested assignable actions that can be escalated when they stall, and keeps findings, evidence and actions in one place. Every completed check adds material, so the library grows as a side effect of ordinary work and not from a panic before a visit. That is what good social care quality management looks like day to day. InvictIQ is built for quality assurance and compliance. Daily care recording stays in the care recording system a service already uses.
During an inspection, the live Quality Assurance Dashboard can be shared, so the conversation moves from a compliance score into the report and evidence behind it. Set-up typically takes three to five business days, and existing paper or spreadsheet forms can be migrated onto the platform. The features page and the modules page explain what each part does, and an earlier article on how the wrong platform adds admin time covers the cost of a poor choice.
The 28 days, and the wider picture
One line in Regulation 17 is easy to miss. When CQC asks, the registered person must send a written report within 28 days, counting from the day after the request, explaining how, and to what extent, the requirements to assess, monitor and improve quality and safety, and to mitigate risk, are being met. CQC also notes that failing to submit the report can lead directly to prosecution without a warning notice first. A library arranged by question turns that report into a job of selecting. A library arranged by document type turns it into a project.
On the wider picture, the CQC State of Care ratings charts list 3,062 ratings for adult social care services published under the single assessment framework as at 1 August 2025, alongside 20,467 services whose current ratings come from earlier frameworks. CQC cautions that these figures are not directly comparable with earlier years, because assessments were prioritised by risk. The figures say nothing about how services keep their evidence. They do show a framework still being rolled out at that date, which is a reason to keep records current as a routine and not to rebuild them once a visit is announced.
Frequently asked questions
What counts as evidence for CQC in a care home?
The CQC guidance on Regulation 17 describes records about the management of a service as anything relevant to planning and delivering care, which can include audits, reviews, policies, maintenance records and action plans. Evidence is strongest when a document is linked to a check and to what happened afterwards.
Is a shared drive enough?
It can store documents securely if access is controlled. By design, though, it does not tell a service which documents are overdue for review or which findings have no follow-up. A separate tracker, or a system that links findings to actions, fills that gap.
How long should records be kept?
It depends on the type of record. The NHS England Records Management Code of Practice is the usual reference and covers adult social care, so the Code should be checked for each category.
Does InvictIQ replace the system where care is recorded?
No. It is built for quality assurance and compliance, which means documents, policies, audits, findings, feedback, evidence and actions. Daily care recording stays in the care recording system a service already uses.
How should a group organise the library across several services?
The same five shelves can be used in every service, which keeps evidence comparable. The InvictIQ Detailed View under Quality assurance page showcases the view across all services and benchmarking between teams, so Head Office can see where evidence is strong and where a service needs support.
How quickly can a service get started?
InvictIQ states that implementation typically takes between three and five business days, with existing templates added during set-up and no software installation required.
A simple test to finish
Pick one sentence from the last inspection report and try to put the policy, the check and the follow-up on one table. If that takes minutes, the library is working. If it takes an afternoon, the shelves need rearranging. Good social care quality management exists to shorten that afternoon.
To see how you can simplify holding findings, evidence and actions together, book a demo or read about who InvictIQ helps.
