Incidents are captured and learned from. Staff are helped to recognise and report them and sit on the reviews; consumers and requesters have a way to raise concerns and report incidents; named people investigate within deadlines scaled to the patient safety risk; serious incidents go up to the designated person; the incident, the investigation, the fix and the follow-up (including whether the fix lowered the risk) are all written down; the designated person, staff and the governing body get timely reports covering risks found, actions taken and any shift in risk; patterns in incidents feed improvement; and the incident system's own effectiveness is reviewed and improved.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.