How RISQS works in practice:
Product codes, buyers and getting seen

What happens once you are RISQS accredited

Once accredited, your organisation is listed on the RISQS portal.

Buyers, typically principal contractors and larger suppliers, use this system to:

• Search for companies that can deliver specific services
• Filter suppliers based on capability and risk level
• Identify potential partners for upcoming work

This means your visibility is not automatic. It depends on how accurately your business is described within the system.

RICCL codes: how your business is defined

RISQS uses RICCL (Railway Industry Commodity Classification List) codes to define what your organisation does.

These codes are detailed and specific. They do not simply describe broad activities such as “construction” or “maintenance”. Instead, they break work down into individual functions, including:

• Design
• Manufacture
• Installation
• Commissioning
• Maintenance
• Dismantling

Each of these activities is treated separately within RISQS.

For example, installing equipment and maintaining it are different capabilities. Selecting both requires you to demonstrate that your systems, competence and controls cover both activities.

Why RICCL codes matter in practice

The codes selected within RISQS determine three key things:

1. How buyers find you
   Buyers search the RISQS portal using RICCL codes. If your codes do not reflect what you actually do, your business may not appear in relevant searches.
2. What you are assessed against
   Each code is linked to a level of risk. Higher-risk activities require a more detailed audit, while lower-risk activities may only require a questionnaire.
3. How your capability is interpreted
   The codes form part of how your business is understood by buyers. If your selected scope does not match your actual work, it creates confusion and can affect credibility.

In practice, this means that two organisations carrying out similar work can appear very differently in RISQS depending on how their scope is defined.

How buyers use RISQS on real projects

Rail projects are rarely delivered by a single organisation.

A principal contractor, often a company holding a Principal Contractor Licence (PCL) and working directly with Network Rail, will manage the overall project. They then engage multiple suppliers to deliver specific elements.

A typical project may involve:

• Structural works
• Trackside activities
• Electrical or signalling systems
• Station or facilities work

Each element is sourced separately.

Buyers use RISQS to identify suppliers for each part of the project based on RICCL codes and verified capability. This is how subcontractors are identified and invited to tender.

Where most organisations go wrong

Many organisations focus heavily on passing the RISQS audit but give less attention to how their business is presented afterwards.

Common issues include:

• Selecting codes that are too broad or too narrow
• Defining a scope that does not match actual services
• Misunderstanding how buyers search for suppliers
• Assuming that accreditation alone will generate opportunities

These issues do not prevent accreditation, but they can limit how useful it is commercially.

RISQS does not guarantee work

It is important to be clear about what RISQS provides.

Becoming RISQS accredited:

• Confirms that your organisation meets industry requirements
• Makes your business visible within the supply chain
• Allows buyers to consider you for work

It does not:

• Guarantee contracts
• Place you on preferred supplier lists
• Remove the need for further client approval

RISQS is an entry point into the rail supply chain, not a guarantee of work.

Why understanding this matters

RISQS is used daily by buyers across the rail industry to source and assess suppliers.

Passing the audit allows your business to be included.

How your business is defined within the system determines whether it is found.

Organisations that understand how RISQS operates in practice are better placed to:

• Present their capabilities clearly
• Be identified for relevant opportunities
• Avoid being overlooked due to how their scope is defined

RISQS is not just an accreditation process. It is a working system used to match suppliers to opportunities across the rail sector.

Getting through the audit is one step. Making sure your business is accurately represented within the system is what determines its value afterwards.

Making RISQS work in practice

Many organisations achieve RISQS accreditation but don’t fully understand how to position themselves within the system. Working with experienced RISQS consultants can help ensure your business is visible, aligned and ready to engage with buyers.

→ Find out how we support RISQS accreditation.