CQC safe: the 8 quality statements, the evidence for each, and what outstanding takes
For registered managers and quality leads in England: what CQC's safe key question covers, examples of the evidence to keep for each quality statement, how it's scored today, and what CQC's draft 2026 frameworks say good and outstanding look like.
Safe is the CQC key question about protecting people from abuse and avoidable harm. Today the regulator assesses it through eight quality statements, each scored from 1 to 4. Its draft frameworks swap the statements for seven topics in every sector. There’s no start date for them yet, so the current framework still applies.
| Quality statement | What CQC looks at | In the draft frameworks |
|---|---|---|
| Learning culture | Openness about safety, incidents investigated, and lessons that change practice | Safety culture |
| Safe systems, pathways and transitions | Safety and continuity when people move between services | Safe systems, pathways and transitions |
| Safeguarding | Protecting people from abuse and neglect, and acting quickly on concerns | Safeguarding |
| Involving people to manage risks | Person-centred risk assessments, and restraint only as a last resort | Managing risks during care and treatment |
| Safe environments | Safe premises, equipment and technology | Safe environments and infection prevention and control |
| Safe and effective staffing | Safe recruitment, staffing levels, training and supervision | Safe staffing |
| Infection prevention and control | Cleanliness, hygiene and managing outbreaks | Safe environments and infection prevention and control |
| Medicines optimisation | Safe prescribing, giving and reviewing of medicines, with people involved | Safe medicines and treatments for adult social care; safe delivery of treatments and medicines for the other three sectors |
The regulator hasn’t published a mapping between the quality statements and the draft topics. The right-hand column is our reading of each draft topic’s scope, the same reading as our CQC framework crosswalk.
What safe means to CQC
CQC’s framework opens the safe key question like this: “Safety is a priority for everyone and leaders embed a culture of openness and collaboration. People are always safe and protected from bullying, harassment, avoidable harm, neglect, abuse and discrimination. Their liberty is protected where this is in their best interests and in line with legislation.”
It goes on to expect a service to learn whenever people raise safety concerns, to know where its greatest safety risks lie, to work out solutions with people, and to have enough skilled staff to deliver safe care.
Put simply, safe asks whether the service protects people from harm, and whether it learns when something goes wrong or nearly does.
How CQC gathers safe evidence
Inspectors observe care and the care environment, including equipment and premises, and talk with people, staff and leaders. The regulator also draws on national data, such as the Learn from Patient Safety Events service, and requests evidence directly from providers, most likely by email. Providers don’t need to send evidence until it asks.
The 8 safe quality statements, and the evidence to keep for each
Each quality statement below starts with CQC’s own wording, then what it means in practice and examples of the evidence to have ready. Each one also lists the regulations behind it, and Regulation 12, safe care and treatment, sits under all eight.
1. Learning culture
“We have a proactive and positive culture of safety based on openness and honesty, in which concerns about safety are listened to, safety events are investigated and reported thoroughly, and lessons are learned to continually identify and embed good practices.”
What it means: safety is a top priority for everyone, staff and people using the service alike. The service treats risks as a chance to put things right and learn. Staff and people using the service feel able to raise concerns, confident nobody will blame them. The service investigates and reports incidents and complaints, and the lessons lead to changes that improve care.
Evidence to have ready:
- An incident log that shows each incident reported, investigated and closed, with the actions and learning
- Duty of candour records where the duty applies: who you told, the apology and the written follow-up (our guide to the CQC duty of candour sets out each step)
- Complaints, how the service investigated each one and what changed
- Lessons-learned updates shared with staff, and a later check that the change held
- Where they apply, patient safety events recorded through Learn from Patient Safety Events, and incident responses in line with the Patient Safety Incident Response Framework
In the draft frameworks: safety culture, which widens learning culture to safety culture as a whole. Regulations: 12 (safe care and treatment), 16 (complaints), 17 (good governance) and 20 (duty of candour).
2. Safe systems, pathways and transitions
“We work with people and our partners to establish and maintain safe systems of care, in which safety is managed, monitored and assured. We ensure continuity of care, including when people move between different services.”
What it means: safety and continuity come first through a person’s whole care journey, including referrals, admissions, discharge and moves between services. The service knows the risks along that journey, manages them with the person and their other care providers, and lines up its safety policies with those partners.
Evidence to have ready:
- Admission, referral and discharge procedures, and records that show staff follow them
- The information that travels with people when they move, such as transfer forms and discharge summaries
- Notes from joint meetings with other services about shared risks
- Transition plans for young people moving to adult services, where relevant
In the draft frameworks: safe systems, pathways and transitions, unchanged. Regulations: 12 and 17, with 9 (person-centred care) to consider.
3. Safeguarding
“We work with people to understand what being safe means to them as well as with our partners on the best way to achieve this. We concentrate on improving people’s lives while protecting their right to live in safety, free from bullying, harassment, abuse, discrimination, avoidable harm and neglect. We make sure we share concerns quickly and appropriately.”
What it means: staff understand safeguarding and act on concerns straight away, working with partners. People who use the service know what being safe means to them and how to raise a concern. The service’s systems protect people from abuse and neglect and uphold their human rights, and it uses the Deprivation of Liberty Safeguards only when they’re in the person’s best interests.
Evidence to have ready:
- A safeguarding policy that says who staff report to and how concerns reach the local authority
- Safeguarding training records for all staff
- A log of safeguarding concerns: what was raised, the referral to the local authority, the notification to CQC and the outcome (our guide to CQC notifications covers when to report abuse)
- Mental capacity assessments, and Deprivation of Liberty Safeguards applications, authorisations and conditions (our DoLS guide covers the June 2026 change)
- How people using the service learn about staying safe and raising a concern
In the draft frameworks: safeguarding, unchanged, covering safeguarding and human rights, deprivation of liberty, bullying, harassment and discrimination, and sexual safety and empowerment. Regulations: 10 (dignity and respect), 11 (need for consent), 12 and 13 (safeguarding service users from abuse and improper treatment), with 9, 17 and 20 to consider.
4. Involving people to manage risks
“We work with people to understand and manage risks by thinking holistically so that care meets their needs in a way that is safe and supportive and enables them to do the things that matter to them.”
What it means: people know about the risks in their care and how to keep themselves safe. Risk assessments are person-centred and proportionate, respect people’s choices, and staff review them with the person where possible. Staff respond to distress in ways that protect people’s rights and dignity, and use restraint only as a last resort, lawfully and safely.
Evidence to have ready:
- Person-centred risk assessments, dated and reviewed with the person
- Care plans that record people’s own choices about the risks they take
- Records of any restraint or restrictive practice: the reason, how long it lasted, who reviewed it and the plan to reduce it
- Plans for supporting people in distress, such as positive behaviour support plans, where relevant
- Plans for emergencies, and for spotting when someone’s health is getting worse
In the draft frameworks: managing risks during care and treatment, with the emphasis on managing the risk. Regulations: 9 (person-centred care), 11 (need for consent) and 12, with 10 to consider.
5. Safe environments
“We detect and control potential risks in the care environment. We make sure that the equipment, facilities and technology support the delivery of safe care.”
What it means: the service keeps its premises, equipment and technology safe, in good repair and suited to people’s needs, and staff use equipment properly. The service monitors the safety of its premises, and leaders consider psychological safety as well as physical safety, including sexual safety and sensory needs.
Evidence to have ready:
- Premises safety records, such as the fire risk assessment and the gas and electrical safety checks, with the date each falls due
- Equipment servicing and maintenance records, and how the service acts on equipment alerts and recalls
- Plans for heatwaves, flooding and other environmental risks
- Checks on digital systems and technology
- Risk assessments for staff who work in people’s homes, where relevant
In the draft frameworks: safe environments and infection prevention and control, merged into one topic. Regulations: 12, 15 (premises and equipment) and 17.
6. Safe and effective staffing
“We make sure there are enough qualified, skilled and experienced people, who receive effective support, supervision and development. They work together effectively to provide safe care that meets people’s individual needs.”
What it means: recruitment is safe and thorough, for agency staff and volunteers too, and fair to people with any protected characteristic. Staffing levels and skill mix meet people’s needs. Staff get the training, supervision, appraisal and development their role needs, and managers deal with poor performance.
Evidence to have ready:
- Recruitment records with DBS checks and references, including for agency staff and volunteers
- Rotas, and how the service sets staffing levels and skill mix to match people’s needs
- A training matrix that shows each person’s role-relevant training and when it’s due
- Supervision and appraisal records, and professional revalidation where it applies
- Records of how managers handled performance concerns
In the draft frameworks: safe staffing. Regulations: 12, 18 (staffing) and 19 (fit and proper persons employed).
7. Infection prevention and control
“We assess and manage the risk of infection. We detect and control the risk of it spreading and share any concerns with appropriate agencies promptly.”
What it means: the service manages the risk of infection in line with current national guidance, keeps premises and equipment clean and hygienic, gives staff clear infection control roles, and shares information about infection risk with partners, people using the service and visitors.
Evidence to have ready:
- Who leads infection prevention and control, and the policy they work to
- Cleaning schedules and hygiene audits, with the actions taken
- Outbreak records: what happened, who you told and what you learned
- Staff training on hand hygiene, infection control and personal protective equipment
- Food hygiene records where you prepare food, and clinical waste arrangements
In the draft frameworks: merged with safe environments. Regulations: 12 and 15, with 17 to consider.
8. Medicines optimisation
“We make sure that medicines and treatments are safe and meet people’s needs, capacities and preferences by enabling them to be involved in planning, including when changes happen.”
What it means: people take part in decisions about their medicines, and their care plan records the support they need and their preferences. Everyone who prescribes, supplies or gives medicines follows the law, national guidance and the Mental Capacity Act 2005. Accurate information goes with people when they move between services, nobody uses medicines to control people’s behaviour inappropriately, and the service manages controlled drugs safely.
Evidence to have ready:
- Medicines administration records, complete and checked, and the audits of them
- Policies for ordering, storing and disposing of medicines, and the controlled drugs register
- Medicines reviews held with the person, and the mental capacity assessments and best-interest decisions behind any covert administration
- Protocols for medicines given only when needed (PRN medicines)
- Medicines errors and near misses, with the learning from each
- STOMP reviews (stopping over medication of people with a learning disability), where relevant
In the draft frameworks: safe medicines and treatments for adult social care; safe delivery of treatments and medicines for mental health and for primary care and community services; safe delivery of medicines and treatments for hospitals. Regulations: 9 and 12, with 11 to consider.
Our guide to the CQC well-led key question covers its eight quality statements the same way.
Request the CQC safe evidence checklist
Drop your email and the team will send a copy over.
Request received
Thanks. We will send the scoped copy to your inbox within one working day.
Could not send that request
Something went wrong on our side. Please try again, or use our contact form and we'll get the scoped copy over.
How CQC scores the safe key question today
CQC scores each quality statement it assesses from 1 to 4. A 1 means the evidence shows “significant shortfalls”, a 2 “some shortfalls”, a 3 “a good standard” and a 4 “an exceptional standard”. With eight statements, safe has a maximum score of 32. CQC divides the total by that maximum and reads the rating from the percentage.
| Safe score | Rating |
|---|---|
| 25 to 38% | Inadequate |
| 39 to 62% | Requires improvement |
| 63 to 87% | Good |
| 88% and above | Outstanding |
Two limits apply. If the percentage falls in the good range and any statement scores 1, safe is rated requires improvement. If it falls in the outstanding range and any statement scores 1 or 2, the rating stops at good.
Say seven safe statements score 3 and one scores 1. That’s 22 out of 32, or 69%, which sits in the good range, and the score of 1 limits safe to requires improvement. Our guide to CQC ratings shows how the five key questions combine into the overall rating.
Scoring is set to go with the new frameworks. In March 2026, CQC said consultation feedback supported its proposal to remove scoring and make rating judgements directly at key question level, which the rating characteristics will support.
What good and outstanding look like in the draft frameworks
The draft frameworks describe each rating for each topic, in what CQC calls rating characteristics. The regulator wrote them by first asking people what good care looks like, then describing the other ratings around that. They’re drafts and may change before they start. They’re also the plainest account yet of what CQC will look for.
The lines below come from the adult social care draft, version 9. The mental health, primary care and community services, and hospitals drafts ask some questions in different words, and each topic lists more characteristics than we quote here.
Safety culture
CQC’s question: “Is there a positive and equitable safety culture where risks are proactively managed, concerns are listened to, incidents are thoroughly investigated, and lessons are learned to improve care?”
Good:
- “Safety is a shared priority for everyone, including staff and people using the service.”
- “When an incident has happened, staff are open and transparent with people and those close to them. All incidents are recorded, investigated and outcomes are communicated to those involved.”
Outstanding:
- “When an incident has occurred, the people affected are partners in helping to understand what has gone wrong.”
- “Leaders demonstrate visible commitment to safety. They are open, responsive and able to show clear, sustained improvements in safety outcomes for people.”
Managing risks during care and treatment
CQC’s question: “Are risks to each person monitored and managed so that their care and treatment is safe and supportive?”
Good:
- “People’s care plans reflect any foreseeable risks and how they should be managed.”
- “Staff anticipate and proactively seek to identify what is causing people’s distress, and always take a least restrictive approach.”
Outstanding:
- “A rights-respecting culture is embedded in the service and reducing restrictive practices is a shared priority, which is reflected in decision-making about managing risks.”
- “Improvements to risk management are implemented promptly and sustained, and learning is identified, acted on and shared internally and externally.”
The other three drafts ask whether care and treatment are “planned and monitored to identify and manage risks, emergencies, and deterioration”.
Safe systems, pathways and transitions
CQC’s question: “Are there systems to enable collaborative working across care pathways and services, to ensure that safety and continuity of care are prioritised?”
Good:
- “Plans and information for care during transitions are established and shared before people move between services.”
- “Staff can access the information they need to assess and understand people’s needs, and to plan and deliver care.”
Outstanding:
- “Care journeys are proactively planned and co-ordinated across services from the earliest stage.”
- “Transitions, referrals and discharges are co-designed with people and those close to them.”
Safeguarding
CQC’s question: “Does the service work with partners and people to protect their rights to live in safety and be free from abuse and improper treatment?”
Good:
- “Staff can identify abuse and improper treatment. They recognise early indicators of potential abuse or poor care, even when these do not meet the threshold for formal safeguarding concerns.”
- “People are deprived of their liberty lawfully. Any potential deprivation of liberty is recognised promptly and appropriate authorisation is sought.”
Outstanding:
- “Safeguarding is a shared, strategic priority embedded across the whole service.”
- “All staff and people who use the service are actively involved in reviewing and improving safeguarding practice.”
Safe environments and infection prevention and control
CQC’s question: “Are potential risks within the care environment detected and managed appropriately to enable safe delivery of care for people and staff?”
Good:
- “The service monitors and acts on equipment alerts, recalls and safety information.”
- “The service manages the control and prevention of infection well. Infection prevention and control roles are clear.”
Outstanding:
- “There is a culture of shared ownership for the safety of the care environment where everyone is empowered to identify and act on risks, and improvements are celebrated and shared across the system.”
- “People are engaged as partners in infection prevention and control. They are involved in identifying and managing risks.”
Safe staffing
CQC’s question: “Are there enough qualified, skilled and experienced staff who receive adequate support, supervision and development to keep people safe and meet their needs?”
Good:
- “Actions are taken to protect staff from fatigue, and leaders understand its impact on the safety of those who use services.”
- “Staff and volunteers receive training that is appropriate to their role. This is embedded into practice and refreshed at regular intervals.”
Outstanding:
- “Staffing levels are safe and optimised to enable proactive, personalised care.”
- “Supervision is an empowering process for staff, which fosters a culture where reflective practice and continuous learning are a shared priority.”
The other three drafts add “with strategies to manage demand and capacity safely” to this question.
Safe medicines and treatments
CQC’s question: “Are medicines and treatments safe and delivered in a timely way, in line with people’s needs and preferences?”
Good:
- “The administration of PRN medicines (medicines taken when required) is guided by clear protocols, and there are timely reviews.”
- “Controlled drugs are stored, recorded, administered and disposed of in line with legislation and guidance.”
Outstanding:
- “People are treated as partners in assessing their medication needs.”
- “The service uses creative and innovative ways to avoid using covert administration of medicine.”
What changes for safe under CQC’s new frameworks
CQC published four draft frameworks on 24 March 2026, one each for adult social care, mental health, primary care and community services, and hospitals. Feedback closed on 12 June 2026, and the regulator piloted the drafts with providers over the summer. Its latest update, on 27 August 2026, plans more sector-by-sector engagement this autumn and gives no start date. Until the new approach starts, CQC asks providers to “continue to refer to the current published guidance on how we assess quality and performance”.
Safe stays one of the five key questions. Its eight quality statements become seven topics in all four drafts, each with a key line of enquiry and rating characteristics. The main changes:
- Learning culture becomes safety culture, which covers raising safety concerns, closed cultures and the duty of candour.
- Safe environments and infection prevention and control merge into one topic.
- Involving people to manage risks becomes managing risks during care and treatment, with the emphasis on managing the risk.
- Safe and effective staffing becomes safe staffing, and medicines optimisation widens to cover treatments as well as medicines.
- Safe systems, pathways and transitions, and safeguarding, keep their names.
Evidence organised around the five key questions carries across. Evidence filed under the eight quality statement names will need remapping to the new topics. Our free CQC framework crosswalk maps every current quality statement to the draft topics, sector by sector, and our guide to CQC’s new assessment frameworks tracks what CQC publishes next.
Or show what changed after every incident, on one record
Report an incident once and CompliantCare’s Incident Management runs it end to end, from capture through investigation to action and learning. Actions get owners and deadlines, the system tracks the duty of candour, and the issue, action, outcome and learning sit in one thread.
Common questions
What does safe mean in CQC?
Safe is the CQC key question about protecting people from abuse and avoidable harm. The regulator's framework says "Safety is a priority for everyone and leaders embed a culture of openness and collaboration", and that "People are always safe and protected from bullying, harassment, avoidable harm, neglect, abuse and discrimination."
What are the 8 quality statements for safe?
Learning culture; safe systems, pathways and transitions; safeguarding; involving people to manage risks; safe environments; safe and effective staffing; infection prevention and control; and medicines optimisation.
What are examples of evidence for the safe key question?
An incident log that shows each incident investigated and the learning from it, duty of candour records, safeguarding referrals and their outcomes, person-centred risk assessments, premises and equipment safety checks, recruitment records with DBS checks, a training matrix, infection control audits, and medicines administration records with their audits.
What are the CQC safe KLOEs?
KLOE stands for key line of enquiry. CQC's frameworks used them until 2023, and the draft frameworks bring them back as one question per topic, with seven for safe in every sector. For safety culture, the question is: "Is there a positive and equitable safety culture where risks are proactively managed, concerns are listened to, incidents are thoroughly investigated, and lessons are learned to improve care?"
How is the safe key question scored?
CQC scores each of the 8 quality statements from 1 to 4, so the maximum is 32, and turns the total into a percentage: 25 to 38% is inadequate, 39 to 62% requires improvement, 63 to 87% good, and 88% and above outstanding. A score of 1 on any statement limits a good result to requires improvement, and a score of 1 or 2 limits an outstanding result to good.
Is safeguarding part of the safe key question?
Yes. Safeguarding is one of the 8 safe quality statements, and it keeps its own topic in all four draft frameworks. CQC expects services to share concerns "quickly and appropriately", and abuse or an allegation of abuse is one of the events a provider must notify CQC about without delay.
Is the safe key question changing?
Yes, when CQC brings in its new sector frameworks. In the drafts published on 24 March 2026, safe has seven topics in every sector: learning culture becomes safety culture, safe environments merges with infection prevention and control, and medicines optimisation widens to medicines and treatments. CQC's latest update, on 27 August 2026, gives no start date.
References
- CQC: Safe, the key question in the single assessment framework
- CQC: Learning culture (quality statement)
- CQC: Safe systems, pathways and transitions (quality statement)
- CQC: Safeguarding (quality statement)
- CQC: Involving people to manage risks (quality statement)
- CQC: Safe environments (quality statement)
- CQC: Safe and effective staffing (quality statement)
- CQC: Infection prevention and control (quality statement)
- CQC: Medicines optimisation (quality statement)
- CQC: How we reach a rating
- CQC: How we gather evidence
- CQC: Draft sector-specific assessment frameworks (adult social care draft version 9, and the mental health, primary care and community services, and hospitals drafts)
- CQC: Our March update (24 March 2026)
- CQC: May 2026 update on improving how we work
- CQC: August 2026 update on improving how we work
- Care Quality Commission (Registration) Regulations 2009, regulation 18: Notification of other incidents
For general information only and reflects our understanding of CQC's approach as of October 2026. The framework is changing during 2026, so always check cqc.org.uk for the current framework for your sector.
