The Aged Care Quality and Safety Commission does not assess whether you own a policy; it assesses whether your systems keep people safe in practice. A useful checklist, then, is not a list of documents. It is a living register that links each obligation to an accountable owner, a working control, a source of evidence and a review date. This guide shows how to build and use one.
Think of audit readiness as a pyramid: current policies mapped to the strengthened Aged Care Quality Standards, then owners and evidence per obligation, then controls tested rather than assumed, then evidence the control actually worked. It is built from the base up, not written the week before.
Replace the flat checklist with a register that covers the full breadth of obligations. At minimum, include:
For each requirement, record five fields:
| Field | What it captures |
|---|---|
| Accountable role | The named position that owns the requirement |
| Operational control | How the requirement is actually met day to day |
| Evidence location | Where proof lives, and how quickly it can be produced |
| Monitoring frequency | How often the control is checked |
| Escalation threshold | The point at which an exception must reach management |
If any field is blank, you have found a gap before an auditor does.
The heart of compliance is testing whether a control works, not whether a document exists. Four methods, used together, reveal the truth:
Where testing finds a gap, record it as an action with a due date, an owner and a verification step. "Policy updated" is not resolution; evidence that practice changed is.
Requirements change. Standards are revised, guidance is reissued, and obligations that applied last year may read differently now. An old checklist that looks complete can create false confidence, arguably worse than no checklist, because it stops people asking. Put legislative and standards references under controlled review, with an owner responsible for checking currency and a date stamped on every version. Treat the checklist itself as a controlled document.
Run this before you rely on your checklist:
Simple to use, yes, but backed by a register with real detail. The one-page view is fine for a stand-up; the register behind it is what stands up to scrutiny. A checklist that only lists documents gives a comforting but misleading picture.
Continuously, not just before an audit. Monitoring frequency should match the risk: high-risk controls such as medication, incidents and restrictive practices warrant more frequent testing than lower-risk administrative ones.
Records that show the control operated: sampled care records, action registers with documented resolution, competency records, meeting minutes with decisions. The test is whether you can produce it quickly and whether it demonstrates the control worked, not merely that it exists.
No. Software makes the register visible, keeps owners and due dates in front of people, and surfaces overdue actions, but accountability, judgement and control testing remain human work. The technology supports the team; it does not replace them. CareIQ's compliance readiness scoring tracks each obligation's owner, control, evidence and review date, and flags where a control is assumed rather than tested, so overdue actions are impossible to ignore.
CareIQ turns a static checklist into a live register where every obligation has an owner, a control, evidence and a review date, and overdue actions are impossible to ignore. See how it works for your service on the CareIQ compliance overview. If your compliance still lives in a folder of policies, talk to us about making it testable.
CareIQ links every obligation to an owner, a control, evidence and a review date. 2-month free trial, no setup fee.
Start Your 2-Month Free TrialThis article is general information for care providers, not legal, clinical or regulatory advice. Recheck current Australian aged care legislation and standards, and obtain qualified advice on obligations for your service, before acting or publishing.