Toolkit 10: auditable standards
Updated 29 July 2026
© Crown copyright 2026
This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.
Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.
This publication is available at /government/publications/communicable-disease-outbreak-management-guidance/toolkit-10-auditable-standards
This toolkit provides suggested auditable standards related to outbreak management. Any audit against the standards should be included as part of the outbreak report.
| Domain | Standard | Data Source | Suggested compliance | |
|---|---|---|---|---|
| Outbreak recognition | Effective | Initial risk assessment to clarify the nature of the outbreak commenced within 24 hours where outbreak detected in-hours [note 1] | UKHSA incident management system | 100% |
| Outbreak declaration | Well led | Decision made and recorded regarding outbreak declaration and convening of incident management team | UKHSA incident management system | 100% |
| Incident management team (IMT) | Effective | IMT held within 3 working days of decision to convene [note 1] | Minutes [note 2] and report | 95% |
| Ìý | Well led | Roles and responsibilities of IMT members, including identification of lead organisation, agreed and recorded | Minutes [note 2] and report | 95% |
| Ìý | Effective | IMT minutes sent out within seven days of IMT meeting being held | Minutes [note 2] | 95% |
| Outbreak investigation and control | Safe | Descriptive epidemiology undertaken and reviewed by the IMT where IMT convened. This should include: number of cases in line with case definition, description of key characteristics, typically including sex, ethnicity (where available), geographic spread, linked inclusion health settings, pertinent risk factors, and an outbreak hypothesis. | Minutes [note 2] and report | 95% |
| Ìý | Well led | Analytical study considered and rationale for decision recorded | Minutes [note 2] and report | 95% |
| Ìý | Safe | Risk assessment reviewed on receipt of new outbreak investigation findings | Minutes [note 2] and report | 95% |
| Ìý | Effective | Outbreak control measure decisions are documented with clear timescales for implementation and responsibility | Minutes [note 2] and report | 100% |
| Ìý | Effective | Case definition agreed and recorded | Minutes [note 2] and report | 95% |
| Communications | Well led | Communications strategy agreed at first IMT meeting and reviewed regularly, where IMT convened, including community engagement needs | Minutes | 100% |
| Ìý | Equitable | Consideration of the needs, preferences and values of the target audience are considered within the communications strategy and communication approach. | Minutes Communications strategy | 100% |
| End of outbreak | Effective | Where decision made to complete an outbreak report, the report should be completed within 12 weeks of the formal closure of the outbreak | Report | 95% |
| Ìý | Ìý | Where a report is produced, report recommendations and lessons identified are reviewed by the organisation responsible for implementation of the lesson, within 12 months of formal closure of the outbreak | Dependent on local arrangements for reviewing recommendations and lessons identified. | 100% |
Note 1: Immediate risk assessment will determine the appropriate urgency according to the severity and potential risks of the illness concerned. Specific infection protocols should be followed. Note: risk assessment and investigation of less urgent outbreaks within a 24-hour period, and the convening of an IMT, where indicated, within three days, may not be always be practical or required when an outbreak is identified out of hours.
Note 2: If a report has not been written (for example for routine incidents) minutes should be used to assess compliance.