A practical annual rhythm for checking whether the systems behind safe, quality services are current, complete and working in practice.
This is different from the regulatory calendar. It is your organisation’s own internal program of file reviews, training checks, HR audits, practice reviews, risk checks and governance assurance.
Monthly
Incidents, complaints, safeguarding, critical workforce expiries, training exceptions, key service records and corrective actions.
Quarterly
HR files, CRM/client files, supervision, risk controls, compliance registers, governance records and selected practice audits.
Six-monthly
Emergency readiness, business continuity, deeper practice reviews and selected system controls.
Annually
Whole-of-system policy cycle, governance effectiveness, financial controls, provider due diligence, strategic risk and assurance-plan reset.
What should be in it?
The exact frequency should be proportionate to risk, service type, regulatory obligations, incidents and organisational size. The purpose is not to create more administration. It is to establish a repeatable assurance cycle so important controls are tested before a regulator, auditor or serious incident exposes the gap.
That creates an evidence trail from review → finding → action → re-test → governance assurance.
A multi-service provider should not use the same assurance schedule as a small single-service organisation. The Hub can help establish a proportionate annual plan.