Regulatory assurance

Regulatory assurance evidence, organised before it is requested

Regulatory scrutiny increasingly focuses on governance, oversight, evidence quality, control effectiveness and board understanding. GRC Assured helps providers maintain a live assurance record across key compliance risks so regulatory preparation is continuous, not a last-minute document exercise.

01 · What it helps evidence

The record behind the reported position

A live assurance record across key compliance risks — so when oversight questions arrive, the evidence base is already maintained, current and traceable.

  • Independent audit programme scope and methodology.
  • Control testing across statutory compliance modules.
  • Board and committee oversight of health and safety compliance.
  • Findings, severity, action ownership and remediation progress.
  • Assurance rating movement and direction of travel.
  • Overdue actions, escalation history and closure evidence.
  • Data quality checks and drill-down from report to source record.
The regulatory shift

Active consumer regulation changed the bar

Since active consumer regulation began in April 2024, social housing providers are inspected against the consumer standards. Boards, councillors and senior leaders are now expected to evidence oversight of tenant safety, service quality, performance and improvement — not just assert it.

Evidenced oversight
Board and committee visibility of compliance risk.
Tenant safety & quality
Statutory safety and service standards.
Direction of travel
Demonstrable, tracked improvement.

The question is no longer “did the check happen?”

Regulatory scrutiny increasingly focuses on whether an organisation can evidence control effectiveness, action ownership, escalation and board visibility — the difference between a logged certificate and demonstrable assurance.

Common sector weaknesses

Recurring weaknesses regulators surface

Public regulatory judgements and inspection material repeatedly highlight the same gaps. GRC Assured is built to address each one.

Stock condition data
Coverage and currency you can evidence.
Overdue statutory checks
Programme delivery tracked against target.
Fire remedial actions
Owned, tracked and closed with evidence.
Electrical safety evidence
EICR evidence and remedial follow-up.
Asbestos checks & records
Reinspection status and record access.
Action closure
Closure evidenced, not just marked done.
Contractor oversight
Assurance over delivery, not self-report.
Board assurance
A defensible, drillable reporting trail.
Consumer grades

Why the grade matters

The Regulator assigns consumer (C) grades from C1 to C4. Weaker grades can lead to greater scrutiny, improvement plans, intensive engagement and — in serious cases — enforcement consideration.

C1

Meeting the standards

Strong assurance; no significant concerns.

C2

Improvement needed

Some weaknesses; improvement required.

C3

Serious failings

Significant improvement required.

C4

Serious failings

Substantial improvement; enforcement may be considered.

GRC Assured supports preparation and evidence governance. It does not determine, predict or influence any regulatory grade or judgement.

From obligation to evidence

One traceable line, requirement to report

GRC Assured connects each regulatory expectation to the control being tested and the evidence held — so scrutiny can be answered with records, not reassurance.

Requirement / control → Audit / review → Evidence → Finding → Action → Board report
02 · Regulatory preparation stages

Continuous preparation — before,
during and after review

Before

Before review

Use dashboards and regulator packs to understand current assurance, gaps, open risks and evidence completeness before formal requests arrive.

During

During review

Respond to questions with drillable records. Show the audit behind the rating, the finding behind the action and the evidence behind the reported position.

After

After review

Track improvement plans, monitor action closure, evidence remediation and show progress through updated packs and trend reporting.

Important caveat: GRC Assured supports regulatory assurance preparation and evidence governance. It does not guarantee compliance or any regulatory judgement.
Inside the product

Programme delivery, tracked against target

Audit Targets shows planned versus delivered second-line coverage, with traceable rows back to every counted audit — the programme-delivery evidence regulators ask to see.

  • Planned versus delivered coverage, per discipline
  • Every row traces back to a counted audit
  • Exceptions flagged where delivery is behind target

Audit Targets

Monitor scheduled-audit delivery against configured targets, with traceable rows back to counted audits

Export Summary
PERFORMANCE PERIOD FY 2026/27
● LiveBy MonthBy QuarterYear to DateLast 12 MonthsCustom
📅 Data covers 1 Apr 2026 — 6 Jul 2026 Financial Year Year to Date (4 of 12 months)
Portfolio summary
Totals for the selected period across all disciplines
Overall target completion
108%
97 of 90 audits
Audits completed
97
FY 2026/27 Year to Date
Gap to target
0
90 target audits
Exceptions
4
4 behind target
Fire Safety
Audit-type targets and counted audits
Behind (aggregate)
Target 45 Actual 17 Gap 28 Coverage 38%
Audit typeBasisTargetActualGapCoverageStatus
FRA (Statutory)Fixed158753%Behind
Fire ServicingFixed3092130%Behind
Discipline total45172838%
108% complete
97 of 90 target audits · YTD
03 · The board question

When a board asks “how do we know?”, the answer is already in the record.

GRC Assured helps provide an answer based on tested controls, approved audits, evidenced actions and traceable reporting.

04 · From expectation to evidence

A clearer line of sight, from regulatory concern to board report

Where regulatory expectations, consumer standards or internal policies create assurance requirements, GRC Assured helps teams connect those expectations to the controls being tested and the evidence being held — assurance mapping from regulatory concern, to audit work, to finding, to action, to board report.

Regulatory expectation → Audit work → Finding → Action → Board report
FAQs

Frequently asked questions

What are the RSH consumer standards?

Since active consumer regulation began in April 2024, the Regulator of Social Housing inspects registered providers against its consumer standards, covering areas such as the safety and quality of homes, transparency, and tenant engagement. Providers are increasingly expected to evidence oversight, not simply assert compliance.

What do the C1 to C4 consumer grades mean?

The Regulator assigns a consumer grade from C1 (meeting the standards) to C4 (serious failings requiring substantial improvement). C2, C3 and C4 can lead to greater scrutiny, improvement plans, intensive engagement and, in serious cases, enforcement consideration. GRC Assured supports preparation and evidence governance; it does not determine, predict or influence any grade.

How can compliance software help us prepare for regulatory inspection?

By maintaining a live, drillable assurance record — from requirement and control, to audit, evidence, finding, action and board report — so oversight questions can be answered with records rather than a last-minute document search.

What is housing association compliance software?

It is software that helps housing associations evidence and oversee compliance across statutory safety and consumer-standards obligations. GRC Assured provides this as an independent second-line assurance platform.

Does GRC Assured guarantee compliance?

No. It supports regulatory assurance preparation and evidence governance. It does not guarantee compliance, remove the need for professional judgement, or determine the outcome of any regulatory inspection, audit or legal process.

Sources & further reading
Book a demo

Walk into your next regulatory review with the evidence already organised.

A focused walkthrough of the assurance workflow — configured around your current regulatory, audit and governance priorities.