Governance vs Assurance in Care: What Is the Difference and Who Does What?
Two words used together in job titles and CQC conversations, often confused. Here is the practical difference, with a worked example and a template for care homes and home care providers.
Governance is how a care provider directs and controls itself: the rules, responsibilities and decisions. Assurance is the evidence that those arrangements are working. In a care home or home care agency, governance decides who is accountable and what happens when something goes wrong; assurance (audits, spot checks, trend reports, re-audits) shows leaders whether it actually does. CQC’s Regulation 17 asks providers to have both.
If you have seen a “governance and assurance officer” advert or been asked how your “governance and assurance” works, you have met a pairing that is easy to blur. They are different jobs. One makes decisions; the other tests whether those decisions are carried out and whether they work.
The distinction comes from outside social care. A project management body puts it simply: governance is about making decisions, while assurance supplies the evidence to support them (Association for Project Management). A public sector finance body defines governance as the arrangements that ensure an organisation fulfils its purpose, achieves its intended outcomes and operates economically, effectively, efficiently and ethically (CIPFA). This guide translates both into care provider terms.
Key takeaways
- Governance sets direction and accountability; assurance checks the arrangements work and tells leaders the truth.
- You need both. Assurance without governance produces audits nobody acts on; governance without assurance produces policies nobody checks.
- Assurance is weakest when the people being assured do the checking. Build in some independence.
- Regulation 17 is the legal link: it requires systems and processes to assess, monitor and improve quality and safety and to act on what they find.
- An assurance map (risk, owner, check, frequency, evidence) is the simplest way to see both at once.
In this guide
- What Is the Difference Between Governance and Assurance?
- How Does Regulation 17 Connect the Two?
- What Does the Difference Look Like in Practice? A Medicines Example
- What Are the Common Mistakes?
- How Do Quality Assurance, Compliance and Governance Roles Fit Together?
- Assurance Map Template: Copy This for Your Service
- How Can CQC Logic Help?
- Frequently asked questions
What Is the Difference Between Governance and Assurance?
| Governance | Assurance | |
|---|---|---|
| Question it answers | Who decides, who is accountable and what do we expect? | Is it happening, and is it working? |
| Typical owner | Provider, nominated individual, registered manager | Quality, compliance or governance and assurance staff; managers checking other areas |
| Care provider examples | Policies, scheme of delegation, governance meeting terms of reference, risk appetite, decisions on staffing and investment | Audits, spot checks, sampling of records, trend reports, mock inspections, re-audits, feedback analysis |
| Evidence | Approved policies, minutes, decisions, action logs | Audit results, findings, closed actions, re-audit outcomes, reports to leaders |
| Failure looks like | No-one is sure who owns a risk; decisions are not recorded | Problems are found late, or not found; leaders hear only good news |
Assurance supports governance by giving decision makers a reliable picture. Without it, governance relies on assumptions.
How Does Regulation 17 Connect the Two?
CQC’s Regulation 17 (good governance) requires systems or processes that are established and operated effectively to assess, monitor and improve the quality and safety of the service and to assess, monitor and mitigate risks. It also covers accurate records, seeking and acting on feedback and evaluating how you use all of this information. In plain terms: governance is the system; assurance is how you show it works. Our Regulation 17 guide goes through each duty and what inspectors look for.
CQC’s five key questions bring them together in the “well-led” question: leaders need to know how the service is performing, and the way they know is assurance.
What Does the Difference Look Like in Practice? A Medicines Example
Take a medicines error in a care home or home care agency.
Governance
The medication policy says who may administer and how errors are reported. The registered manager is accountable. The governance meeting decides that all errors are reviewed monthly and repeat errors trigger retraining. Decisions are minuted with owners and dates.
Assurance
A monthly medication audit samples records. The error log is analysed for patterns by person, shift or care worker. A re-audit after retraining shows whether errors have fallen. A short report goes to the governance meeting.
If either side is missing, the system fails in a recognisable way. A policy with no audit means nobody knows whether it is followed. An audit with no decision-making forum means findings sit in a folder. See what to do after a medication error and the medication error log template.
What Are the Common Mistakes?
- Assurance by the people being assured. A manager auditing their own home will tend to find what they expect. Have someone else sample, or use a cross-check between services.
- Reporting only the good news. If a governance pack shows only green ratings for a year, ask what is not being measured.
- Findings with no owner or date. Without an owner and date an action is just a note.
- Treating the policy as the assurance. A written policy is governance. Evidence that staff follow it is assurance.
- No feedback loop. Re-audit to prove the fix worked, then tell the team what changed.
How Do Quality Assurance, Compliance and Governance Roles Fit Together?
Job titles blur these words. A useful working split:
| Term | Working meaning in a care provider |
|---|---|
| Governance | The structures and decisions that direct and control the service |
| Assurance | Evidence that the structures work and the risks are controlled |
| Quality assurance | The routine checks (audits, observations, feedback) that monitor care quality |
| Compliance | Meeting legal and regulatory requirements, and being able to show it |
| Quality improvement | Changing practice to get better outcomes, then checking the change worked |
The government’s quality assurance lead role category groups compliance officers, quality assurance officers and quality managers together, which is why a post advertised as “governance and assurance officer” looks much like the others. See the governance and assurance officer role and the quality and compliance manager role.
Assurance Map Template: Copy This for Your Service
An assurance map lists each major risk, who is accountable (governance) and how you check it (assurance). Start with six rows and add more.
| Risk area | Governance owner | Assurance activity | How often | Reported to | Evidence |
|---|---|---|---|---|---|
| Medicines | Registered manager | Medication audit; error log review | [set by risk] | Governance meeting | Audit record, error trends |
| Safeguarding | Safeguarding lead | Safeguarding audit; referral and notification check | [set by risk] | Governance meeting | Log, referral outcomes |
| Staffing and competence | Registered manager | Training and supervision audit; competency checks | [set by risk] | Governance meeting | Matrix, supervision records |
| Complaints | Registered manager | Complaints audit; response time check | [set by risk] | Governance meeting | Log, outcomes |
| Care records | Registered manager | Care plan and daily record audit | [set by risk] | Governance meeting | Audit record |
| Premises and equipment | Registered manager or provider | Environment audit; servicing checks | [set by risk] | Governance meeting | Checks, certificates |
For home care, replace the last row with visit-record and spot-check assurance; see quality and compliance for home care agencies.
How Can CQC Logic Help?
CQC Logic supports both halves. For governance, the governance meeting manager records agenda items, decisions and actions. For assurance, the audit schedule tracker records audits, ratings, findings and re-audit dates, and the compliance dashboard shows a red, amber or green view across the compliance tools. Actions can be assigned and dated on the Compliance Tracker plan. It does not replace your care systems and it does not make decisions for you. See plans.
Sources: CQC: Regulation 17 · APM: From evidence to action · CIPFA: Governance, risk management, control and assurance
Keep governance and assurance in one place
CQC Logic links the governance meeting, the audit schedule and the action list, so decisions and the evidence that they worked sit side by side. See a sample improvement plan, view pricing or get started free.
Frequently Asked Questions
What is the difference between governance and assurance?
Governance is how an organisation directs and controls itself: rules, accountability and decisions. Assurance is the evidence that those arrangements are working. In a care provider, governance decides what should happen; assurance checks that it does.
Is assurance part of governance?
They are closely linked but distinct. Assurance feeds governance by giving decision makers reliable evidence. In CQC terms, Regulation 17 expects you to have systems to assess, monitor and improve quality and safety, which is governance supported by assurance activity.
What is a governance and assurance officer?
A post that runs the assurance cycle for a care provider: scheduling audits, recording findings and actions, tracking incidents, complaints and notifications and preparing governance meeting packs. See our governance and assurance officer guide for duties and a job description.
Who is responsible for governance in a care home?
The provider is responsible for governance, usually through the nominated individual and registered manager. CQC’s Regulation 17 guidance expects scrutiny and overall responsibility at board level or the equivalent for your organisation.
What is an example of assurance in a care home?
A monthly medication audit that samples administration records, an error log analysed for patterns, a re-audit after retraining, spot checks of care workers, and a report to the governance meeting.
How do you make assurance independent?
Have someone other than the person responsible for an area carry out or review the check, for example another home’s manager, a quality lead or an external reviewer for higher-risk areas.