RISQS accreditation explained:
What it is, how it works and how to get approved

What RISQS accreditation is

The Railway Industry Supplier Qualification Scheme (RISQS) is the rail industry’s supplier assurance scheme, operated on behalf of the sector by the Rail Safety and Standards Board (RSSB).

It exists to provide buyers, including Network Rail and its supply chain, with a consistent way to assess suppliers before engaging them.

RISQS accreditation confirms that your organisation:

• Has appropriate management systems in place
• Understands how to manage safety and operational risk in a rail environment
• Can demonstrate control over how work is delivered

It is not a mark of quality in isolation, but a structured way of evidencing that your business meets the baseline expectations required to work within the rail sector.

Why RISQS accreditation matters

For many types of work, RISQS accreditation is a prerequisite for being considered by buyers.

Without it:

• Your organisation may not be visible to key contractors
• You may not be invited to tender
• You may be excluded from supply chain opportunities entirely

However, RISQS accreditation does not guarantee work. It enables access, and that’s all.

The RISQS accreditation process

RISQS accreditation is based on a structured process that reflects the type of work your organisation intends to carry out. This typically involves three stages:

1. Defining your scope

Your organisation must define the services it provides using RICCL (Railway Industry Commodity Classification List) codes.

These codes determine:

• How your business is categorised
• What activities you are assessed against
• Whether your work is considered low or high risk

2. Completing the questionnaire

All organisations must complete an online questionnaire covering areas such as:

• Governance and management systems
• Health and safety controls
• Operational processes
• Competence and training

For lower-risk activities, this stage may be sufficient for approval.

3. Undergoing a RISQS audit (where required)

Higher-risk activities, particularly those involving trackside work or interaction with live rail operations, require a formal RISQS audit. This is a detailed review of how your organisation operates in practice, including:

• How work is planned and controlled
• How risks are managed
• How staff are trained and supported
• How systems are applied day to day

The level of scrutiny increases with the level of risk associated with your activities.

What RISQS accreditation actually assesses

RISQS is not simply checking whether policies exist.

It assesses whether your organisation can demonstrate:

• Consistent application of its systems
• Clear ownership of responsibilities
• Effective control of operational risk
• Alignment with rail-specific expectations

For example, having a policy in place is not enough. You must be able to show that it is understood, followed and supported by evidence.

Common misconceptions about RISQS accreditation

Several misunderstandings cause problems for organisations early in the process.

“We already have ISO certification, so we’re covered”

ISO standards provide a useful foundation, but they do not meet rail-specific requirements on their own. RISQS expects alignment with Network Rail standards, which go further in key areas.

“RISQS is just a paperwork exercise”

Where an audit is required, RISQS is a detailed review of how your organisation actually operates. Documentation must match reality.

“Once we’re accredited, work will follow”

RISQS makes your organisation visible, but it does not guarantee contracts. You still need to compete commercially.

What organisations need to get right

Successful RISQS accreditation depends on preparation, not last-minute documentation.

In practice, this means:

• Understanding requirements before starting
• Ensuring systems reflect real working practices
• Addressing rail-specific expectations, not generic ones
• Preparing for audit as an operational review, not a document check

Organisations that take this approach are far more likely to achieve approval without delays or rework.

Maintaining RISQS accredited status

RISQS accreditation is not a one-off exercise.

Organisations must:

• Renew annually
• Maintain and update their systems
• Respond to evolving Network Rail standards
• Demonstrate continued compliance

Changes in how your organisation operates, or in industry requirements, can affect your status if they are not addressed.

RISQS accreditation is best understood as an entry point into the rail supply chain. It demonstrates that your organisation meets the baseline requirements to operate safely and compliantly within a complex, high-risk environment.

Getting accredited is one step, but maintaining that position and making it commercially valuable depends on how well your systems reflect how you work.

Organisations approaching RISQS for the first time, or preparing for audit, often benefit from structured support to ensure their systems meet rail-specific requirements from the outset.

Understanding RISQS is the first step — achieving it is another.

While the process can look straightforward on paper, aligning your systems, evidence and day-to-day operations to meet audit expectations is where many organisations struggle. Our RISQS consultants provide hands-on support to guide you through to successful accreditation.

→ Explore our RISQS consultancy services