Preview: this guide is being reviewed by Harcon Solutions and content may change.
Stage 3 of 8: Requirements
What requirements may apply to your organisation?
RISQS requirements are organised into audit modules. Which of them apply depends on the products and services you select and the way you intend to work.
How RISQS requirements are organised
RISQS organises its audit requirements into Audit moduleA defined part of a RISQS audit covering one area, such as Core or CDM. Every supplier subject to audit is audited against one of the Core modules. Whether other modules apply depends on your activities and the RICCL codes you select, and on the requirements of infrastructure managers and buyers.Glossary. RISQS states that some audits are triggered by the RICCL codes you select, and some by buyer requirements.
Not every module applies to every organisation. The areas below are the ones this guide covers in its assessment, together with a reminder that further modules exist.
The RISQS Scheme Rules state that every supplier subject to audit undergoes one of the Core modules, and that the need for additional modules is determined by the supplier's activities, infrastructure manager requirements or buyer requirements.
RISQS publishes two versions of the Core module: one for services on the operational railway and one for services delivered away from it.
Every supplier subject to audit is audited against one of two Core modules: Operational Railway Services, for organisations intending to work within the boundaries of the operational railway, or Non Operational Railway Services, for organisations delivering services outside it. The Core module covers all the auditable RICCL codes you undertake.
An audit module covering how you manage your duties under the CDMConstruction (Design and Management) Regulations 2015The regulations for managing health, safety and welfare on construction projects in Great Britain. They set duties for clients, designers, principal designers, principal contractors and contractors.Glossary. It is for organisations whose activities fall within the definition of construction work in those regulations. RISQS applies it where you select a RICCL code that is auditable for CDM, or select client duties in the RISQS questionnaire.
An audit module for organisations that sponsor people for trackside competencies through SentinelThe rail industry's authority to work system, owned and run by Network Rail. It acts as a passport for people working on the railway infrastructure.Glossary.
An audit module for organisations that plan safe systems of work: how staff are protected when their work interfaces with the operational railway. It applies to organisations that select safe system of work planning as a service.
An audit for suppliers who need a Network Rail Principal Contractor Licence to act as Principal ContractorUnder CDM 2015, the contractor appointed by the client to control the construction phase of a project involving more than one contractor. To act as Principal Contractor on Network Rail Managed Infrastructure, a supplier must hold a Network Rail Principal Contractor Licence.Glossary on Network Rail Managed Infrastructure.
RISQS publishes further audit modules, for example On Track Plant, Plant Operations Scheme, Road, and Cyber Security and Data Protection. Whether one applies to you depends on the RICCL codes you select, or on a buyer's or infrastructure manager's requirements. The current list is on the RISQS audits page.
Any indication in this guide is based only on your answers. It is not a RISQS determination of scope, and it does not confirm which modules or audits apply to you. That is established through RISQS, based on the codes you select and your buyers' requirements.