
Railway Industry
Assurance
Supporting organisations to establish and maintain the systems, competence and assurance required to operate within the rail industry, including RISQS and Principal Contractor Licensing.
Does this apply to your organisation?
Organisations operating, or seeking to operate, within the rail industry may need to demonstrate specific systems, competence and assurance arrangements depending on the activities they undertake and the requirements of their clients.
Harcon supports organisations establishing, developing and maintaining these arrangements across RISQS and Principal Contractor Licensing.
Establishing and maintaining RISQS compliance
RISQS provides a recognised supplier qualification and assurance framework used by buyers across the GB rail industry. It enables suppliers to demonstrate their organisational information, capabilities and assurance arrangements against the products and services they intend to provide.
The requirements that apply to an organisation depend on its activities and selected RICCL codes. These determine the applicable qualification and assurance requirements, which may include verification, audit and additional assessments.
Policies, procedures and registers alone do not demonstrate that an organisation's arrangements are effective. Railway assurance requires those arrangements to be implemented, understood and supported by appropriate evidence in practice.
Harcon supports organisations to establish, develop and maintain the management systems and assurance arrangements required for their RISQS scope. This includes initial readiness and gap analysis, management system development, evidence assurance, audit preparation, corrective action and ongoing compliance support.
How we support your organisation
Our support is tailored to your organisation, existing capability and railway activities. We can provide targeted assurance against a specific requirement or support the development and maintenance of your wider rail industry capability.
- Scope & requirements. Establishing the rail activities, services and assurance requirements applicable to your organisation.
- Gap assessment. Reviewing existing systems, competence and evidence against applicable industry and client requirements.
- Management systems. Developing and strengthening practical arrangements that reflect how your organisation operates.
- Implementation. Supporting the effective implementation and integration of requirements across the business.
- Competence & organisational capability. Establishing roles, responsibilities, competence arrangements and governance appropriate to your rail activities.
- Evidence & readiness assurance. Reviewing records and evidence to establish readiness and identify gaps before formal assessment or audit.
- Audit & assessment support. Supporting preparation, corrective action and close out across RISQS, PCL and other applicable assurance requirements.
- Ongoing assurance. Maintaining systems, evidence and organisational compliance as requirements, activities and responsibilities develop.
Effective railway assurance should reflect the organisation, its activities and the risks it manages. Our focus is on establishing practical arrangements that can be implemented, evidenced and maintained in operation.
From requirement to assurance
Effective assurance starts with understanding the requirements that apply, establishing appropriate arrangements and demonstrating that those arrangements are implemented and working in practice.
Requirement
Understanding what applies to your organisation and activities.
Arrangements
Establishing the policies, procedures, responsibilities and controls needed to meet those requirements.
Implementation
Embedding those arrangements into how the organisation operates.
Evidence
Maintaining clear, traceable records that demonstrate the arrangements are being applied.
Assurance
Providing confidence that requirements are understood, implemented and operating effectively.
Establishing Principal Contractor capability
Organisations intending to undertake Principal Contractor duties on Network Rail Managed Infrastructure must demonstrate that they have the organisational capability, management systems, competence and governance necessary to discharge those duties effectively and meet Network Rail's additional requirements.
Principal Contractor Licensing brings together rail industry supplier assurance, independently certified management systems and Network Rail's own licensing and assurance requirements.
RISQS qualification and audit
The organisation must hold the appropriate RISQS qualification and successfully demonstrate compliance against the following modules applicable to its activities and Principal Contractor responsibilities.
- Core Operational Railway Services
- Sentinel
- Safe Work Planning
- CDM (Construction Design & Management)
- Principal Contractor Licensing
Independent management system certification
Principal Contractor capability is supported by independently certified quality, environmental and occupational health and safety management systems, including:
- ISO 9001 Quality Management
- ISO 14001 Environmental Management
- ISO 45001 Occupational Health & Safety Management
Harcon supports organisations through the development, application and maintenance of Principal Contractor capability, from initial gap analysis and licensing readiness through management system development, competence and resource arrangements, planning and control of work, evidence assurance and ongoing PCL compliance.
What makes evidence useful
Effective assurance requires more than documented arrangements. Organisations need to be able to demonstrate that those arrangements are implemented and operating in practice. The evidence required will depend on the organisation's activities and applicable requirements, but effective evidence should have four key qualities.
Specialist railway assurance, integrated with your organisation
Harcon combines practical rail industry experience with management system, compliance and assurance expertise. We work alongside client teams to establish arrangements that reflect how the organisation operates, support effective implementation and provide independent assurance that requirements are being met in practice.
Eight stages from first question to ongoing assurance
Understand the route to RISQS supplier assurance, the requirements that may apply to your organisation and what effective readiness looks like. Start at the beginning or go directly to the stage relevant to you.
Principal Contractor Licensing and RISQS, in our clients’ words
We identified a need develop our business to generate additional organic growth. This included the need for organisational development in our team, management systems and processes to attain a Network Rail Principal Contractor Licence. We approached Harcon Solutions to support our development journey.
Harcon led the assurance process from inception to completion, this included management systems development and the subsequent approvals with Network Rails principal contractor licensing team. Furthermore, Peter project managed our first Network Rail contract at Toton in October 2024. The successful delivery and on site assurance audit of this project led to us attaining a Network Rail Full Trackside Principal Contractor Licence.
Peters’ expert knowledge was demonstrable in the successful delivery of the above mentioned project and his ability to translate the processes to our well established and experienced teams was excellent. If you were embarking on a similar journey we would have no hesitation in recommending Harcon Solutions
We have retained Harcon for the remainder of the year and the likelihood is this will continue long into the future as we continue our journey to grow organically and affirm our position as a first class all encompassing support to the Rail Sector.
For over three years, Harcon Solutions have been a key part of Eleusis Structural Engineering’s growth, helping us to develop our management systems and processes to meet RISQS and Network Rail standards. Peter, is our go to for all things CDM, safety and railway assurance, and has worked closely with us to strengthen our safety culture, infrastructure, and management systems, giving us real confidence when working in high risk environments.
Harcon’s expertise has been key in helping us win and deliver major contracts with clients like Amey PLC, Balfour Beatty Vinci, HS2, AMCOGIFFEN, and the Ardmore Group across rail, highways, and complex construction. From CDM compliance and work package planning to long term safety strategy, Harcon’s advice keeps us compliant, competitive, and future ready, including our progress towards ISO 45001, 9001 and 14001 accreditations.
In short, Harcon Solutions have given us peace of mind, resilience, and credibility to perform. They’re more than just consultants, they’re a strategic partner, helping us set the standards and lay the foundations for our continued success.
Frequently asked questions
Practical answers to common questions about RISQS and railway industry assurance.
Do I need RISQS?
Harcon can help establish your intended rail scope, identify the applicable assurance requirements and determine the arrangements your organisation may need to put in place.
When is a RISQS audit required?
What are RICCL codes and why do they matter?
These codes help define the organisation's RISQS scope and can determine the level of assurance required, including verification, audit or other assessment. Selecting the appropriate codes is therefore an important part of establishing the correct assurance requirements.
We already hold ISO certification. How does this support railway assurance?
Harcon can build on existing certified systems rather than unnecessarily creating parallel management arrangements.
Can Harcon support us beyond initial audit and certification?
This can include periodic assurance reviews, management system updates, corrective action support, changes in scope and ongoing readiness for audit, assessment or certification requirements.
Related professional services
Operating within the rail industry frequently requires expertise across management systems, CDM, operational planning and ongoing assurance. Explore the Harcon services that can support your wider organisational and project requirements.
HSQE & Management Systems
Health, safety, quality and environmental assurance with ISO aligned governance.
Explore service
CDM & Principal Contractor Assurance
Effective governance, duties and proportionate assurance throughout construction delivery.
Explore service
Railway Planning & Assurance
Access, possessions, Safe Systems of Work and ALO arrangements.
Explore service
Retained Professional Services
Ongoing access to Harcon's consultancy and assurance disciplines.
Explore service
Want to work in the UK rail industry?
Whether you are considering RISQS for the first time, preparing for audit, responding to findings or working towards Principal Contractor Licensing, speak directly with Harcon about where you are now and what you need in place.