The evidence is current
Policies, training, contact information and governance records reflect the organisation as it operates now.
What a reviewer should be able to see
Audit readiness is not a one-off document exercise. It is the ability to show that safeguarding expectations are understood, concerns are acted on, decisions are recorded and leaders use evidence to improve practice.
The chronology tells the story
An authorised reviewer can follow what was known, what was decided, who acted and what happened next.
Learning leads to action
Quality checks identify themes and gaps, with named owners and evidence that improvements were completed.
Complete the readiness review
Work through each area with the people responsible for safeguarding, governance, operations and data protection. Keep evidence links or locations beside each completed item.
Governance and policy
Confirm that responsibilities and expectations are clear.
- Current safeguarding policies are approved, published where required and aligned with applicable guidance.
- Named safeguarding roles, deputies, escalation routes and out-of-hours arrangements are accurate.
- Leaders, governors or trustees receive appropriate safeguarding information and record challenge and follow-up.
- Previous audit, review or inspection actions have owners, deadlines and completion evidence.
People, training and confidence
Check that people know how to recognise, record and escalate concerns.
- Required safeguarding and role-specific training is current and completion evidence is available.
- Induction and refresher arrangements include the practical reporting process.
- Staff and volunteers know how to report concerns about a child or adult and concerns about another adult.
- Supervision, support and escalation arrangements are understood by relevant teams.
Concern and chronology quality
Sample records across categories, teams and levels of risk.
- Records are timely, factual, dated and attributed to the person making the record.
- The person’s voice and exact words are preserved where relevant.
- Observation, third-party information and professional judgement are clearly distinguished.
- Related events, decisions, referrals and outcomes form a coherent chronology.
Actions, referrals and outcomes
Make sure the evidence continues beyond the initial concern.
- Every required action has a named owner, due date and visible status.
- Risk assessment and decision rationale are recorded at the point decisions are made.
- Referrals, professional advice and multi-agency communication are documented appropriately.
- Completed actions include an outcome, and overdue work is reviewed and escalated.
Access, sharing and retention
Review how sensitive information is protected and handled.
- Access reflects current roles and is removed promptly when responsibilities change.
- Audit trails are available for important record and permission activity.
- Information sharing decisions record purpose, recipient and relevant rationale.
- Retention, transfer, secure export and deletion arrangements follow policy and applicable requirements.
Quality assurance and improvement
Show how leaders know whether practice is working.
- A proportionate quality-assurance schedule covers record quality, open actions and emerging themes.
- Samples include different teams, concern types, outcomes and time periods.
- Findings identify patterns rather than relying only on individual case corrections.
- Improvement actions, training needs and policy changes are tracked through to completion.
Keep the evidence ready
Choose a cadence proportionate to your setting and document it. This example separates operational oversight from deeper quality and governance review.
Manage current risk
Review urgent concerns, referrals and overdue actions at a frequency matched to risk.
Test record quality
Sample chronologies for timeliness, clarity, rationale, ownership and recorded outcomes.
Review themes
Consider trends, repeat gaps, user confidence, training needs and progress against improvement actions.
Refresh the framework
Review policy, roles, permissions, training plans and applicable guidance as a complete system.
Guidance references for England
Use these official sources alongside your organisation’s policies and the requirements that apply to your sector and location.
Information and data
Information sharing advice for safeguarding practitionersICO data sharing guidanceQuick answers
Concise answers to common questions about applying this guidance.
What does safeguarding audit readiness mean?
It means your policies, records, actions, oversight and improvement evidence are current, internally consistent and easy for an authorised reviewer to understand.
How often should safeguarding records be quality checked?
Set a documented frequency proportionate to your organisation’s volume and risk. Many teams review urgent and overdue work frequently, sample record quality regularly and complete a broader governance review each term or quarter.
What is commonly missing from safeguarding evidence?
Common gaps include unclear decision rationale, actions without owners or outcomes, missing chronology links, incomplete training evidence and improvement actions that were never closed.
Should every case be reviewed before an audit?
Prioritise open, high-risk and complex cases, then use a representative sample across teams, categories and time periods. Record how the sample was selected and what action followed.
Make good safeguarding practice easier to evidence.
RecordMy connects concerns, decisions, actions and outcomes in one secure chronology, giving teams a clearer way to record, review and report.