RISQS Consultants for Rail Industry Compliance

Why RISQS is often misunderstood

Many organisations assume that their existing certifications, such as ISO standards, will be sufficient to pass RISQS. In practice, this is one of the most common causes of failure.

RISQS is built around rail-specific expectations, particularly those defined by Network Rail standards. These go beyond general quality, environmental or health and safety frameworks because when work takes place close to live rail infrastructure, the consequences of failure are far greater.

For example, organisations may already have policies covering areas such as drugs and alcohol testing or workforce competence, but these rarely meet the requirements expected within the rail industry. During a RISQS audit, these gaps are treated as non-conformities, regardless of existing certifications.

The challenge is not simply having systems in place, but ensuring they reflect the standards and operational realities of working within rail.

Why organisations fail RISQS

Most organisations don’t fail RISQS because they lack capability, but because key requirements are misunderstood or not in place when they are assessed.

Common issues include:

• Assuming existing certifications are sufficient
  ISO standards provide a strong foundation, but don’t cover rail-specific requirements. If you don’t adapt your systems to meet Network Rail expectations, gaps may be identified during a RISQS audit.
• Missing critical requirements early in the process
  Certain elements must be in place before you can progress, such as appropriate health and safety competence or membership of required industry schemes (for example, CIRAS where applicable). If these are not in place, the process could stall or fail.
• Starting the process without understanding how RISQS is assessed
  Organisations often begin with documentation, only to discover later that their systems don’t align with how work is actually carried out or how auditors assess compliance.

These issues are rarely about effort. They are usually the result of starting the process without a clear understanding of what RISQS requires in practice.

Why organisations engage RISQS consultants

Businesses typically engage RISQS consultants at key points in their journey:

• Entering the rail industry for the first time
• Preparing for a forthcoming RISQS audit
• Addressing non-conformities following an unsuccessful audit
• Renewing accreditation and adapting to updated standards
• Expanding into higher-risk activities requiring audit-level approval

In many cases, organisations have already begun the process but find that requirements are more detailed and specific than expected. They may have documentation, but not in a form that aligns with RISQS protocols.

JVR’s RISQS consultancy

Our approach is built around how organisations actually operate, not generic templates.

Our RISQS support typically includes:

Gap analysis and readiness assessment

We review your current systems, policies and processes against RISQS requirements to identify gaps, risks and areas requiring development. This provides a clear, prioritised view of what needs to be addressed.

Management system development

Where required, we build or adapt your management system to meet rail-specific expectations. This can involve enhancing existing ISO-aligned systems or creating new processes tailored to your scope of work.

Product/service (RICCL) code and scope definition

Selecting the correct codes is critical. We support organisations in defining their scope accurately, ensuring alignment between declared activities and supporting evidence.

Pre-audit preparation

We carry out structured pre-audit reviews based on RISQS protocols, helping you understand how your systems will be assessed and where evidence needs to be strengthened.

Audit support and guidance

While we are not auditors, we support organisations through the audit process by ensuring they are prepared, confident and able to present their systems clearly and accurately.

RISQS audit expectations in practice

A RISQS audit is not a theoretical exercise. It is a detailed review of how your organisation manages safety, compliance and operational risk in a rail environment.

Auditors will assess:

• Whether policies reflect actual working practices
• How risks are identified and controlled
• How staff are trained, monitored and supported
• How compliance is maintained over time

This is why preparation is critically important. Many organisations rely on well-written policies, but can’t demonstrate that those policies are followed. A RISQS audit may expose that gap by identifying inconsistent records, unclear responsibilities or processes that differ from what is documented.

Maintaining RISQS accreditation

RISQS accreditation is not a one-off exercise. Organisations must renew their status annually, with audits repeated where applicable. What’s more, Network Rail standards are also updated regularly, meaning systems that passed one year may not meet requirements the next.

Maintaining RISQS accredited status requires:

• Regular updates to policies and procedures
• Ongoing monitoring of compliance
• Awareness of changes in rail standards
• Consistent alignment between documentation and operational practice

A practical, risk-based approach

RISQS is ultimately about demonstrating that your organisation can operate safely and reliably within the high-risk rail environment. It does not guarantee work, but it is often a prerequisite for being considered within the supply chain.

Our approach reflects this reality. We focus on clarity, proportionate control and practical implementation, ensuring your systems are both compliant and usable in day-to-day operations.

How JVR Consultancy can support your RISQS compliance

Whether you’re starting your RISQS journey, preparing for an upcoming audit or reviewing existing arrangements, JVR Consultancy provides experienced, practical support grounded in real industry understanding.

If you would like to assess your readiness for RISQS accreditation or require support preparing for a RISQS audit, our consultants are available to help.