The question your board should be asking
Most boards ask the wrong question about governance.
They ask "do we have a policy for this?" The better question — the one CQC inspectors are now trained to listen for — is much shorter, and much harder to fake:
"What have we changed because of what we found?"
That single sentence separates two very different kinds of governance. One produces paperwork. The other produces evidence of a working mind — an organisation that notices something, thinks about it, and does something differently as a result.
Why this question, and why now
Under the current CQC framework, Well-led is consistently the most heavily scrutinised of the five key questions, and the one most likely to pull a service's overall rating down even when everything else looks strong. What inspectors are checking for isn't the existence of a governance structure — a leadership meeting that happens regularly and is minuted is table stakes. What they're checking for is whether that structure actually does anything: whether risks are noticed early, whether the board or senior leadership can point to a specific decision it made in response, and whether anyone can say what changed as a result.
The gap between "we have a risk register" and "our risk register shows we spotted a problem in March, understood why it happened, and closed it by June" is the whole ballgame. The first is a document. The second is governance.
This isn't just an inspection-readiness point. It's arriving at a moment when the wider system is having a related, larger argument about where accountability sits at all. The Health Bill currently moving through Parliament pulls significant national accountability back toward the Secretary of State and DHSC — a marked shift away from the arm's-length model that has shaped NHS governance for over a decade. Whatever you make of that shift, it puts local, board-level accountability under a brighter light, not a dimmer one. If national oversight is consolidating, local leadership needs to be able to show, unambiguously, that it knows what's happening in its own service and is acting on it. Nobody further up the chain is going to do that noticing for you.
What "good" actually looks like
It's rarely dramatic. In practice, the boards that pass this test tend to share a few habits:
A standing agenda item, not an occasional one — governance oversight reviewed every time the board or leadership team meets, not only when something has already gone wrong.
Minutes that show reasoning, not just attendance — "we reviewed X, found Y, and are changing Z" rather than a list of topics covered.
A risk register that moves — reviewed and updated on a fixed monthly cycle, with entries that show when a risk was identified, what was done, and when it closed. An annual review that never changes is functionally the same as no register at all.
Genuine challenge in the room — evidence that a non-executive, trustee, or equivalent asked a hard question and got a real answer, not a reassurance.
None of this requires more infrastructure. It requires one habit: closing the loop, visibly, every time.
The question to take into your next meeting
You don't need a new framework to start. You need one sentence, asked consistently: what have we changed because of what we found? Ask it of your last incident. Ask it of your last complaint theme. Ask it of your last risk register review. If the honest answer is "nothing yet," you've just found your board's most useful agenda item for next month.
