A Client Has Told Us We Need RISQS.
What Do We Do?
You’ve been approached about a rail contract, perhaps you’re completing a tender, or an existing client wants you to undertake work in the rail industry. Then comes the requirement:
“You’ll need RISQS.”
If your business is new to rail, you may have no idea what that means or what you’re supposed to do next.
The good news is that you don’t need to become a rail compliance expert overnight. Your first step is to establish exactly what your client requires, what products or services you’ll be supplying and which RISQS requirements apply to that work.
From there, you can identify what your business already has in place, what may be missing and the most appropriate route forward.
Here’s where to start.
1. Understand What RISQS Is
RISQS stands for the Railway Industry Supplier Qualification Scheme. It is a supplier assurance scheme used by buyers within the UK rail industry to help assess whether organisations have the appropriate capabilities and systems to supply particular products and services.
If a client has told you that you need RISQS, it generally means that they require your business to meet the appropriate RISQS supplier assurance requirements before you can undertake certain work for them.
However, becoming RISQS compliant isn’t simply a case of completing one application or obtaining a generic certificate.
What your business needs to demonstrate will depend on what you intend to supply and the type of work you will be undertaking.
New to RISQS? Read our guide to RISQS Accreditation: What You Need to Know.
2. Ask Your Client Exactly What They Require
Before rushing into the registration process, speak to the client that has requested RISQS.
Clarify the work they expect you to undertake, the products or services you will provide and, where possible, the specific RISQS requirements associated with the contract.
This information will help determine the appropriate scope for your RISQS registration.
It can be tempting for businesses entering rail to try to cover every possible activity they might undertake in the future. However, unnecessarily broadening your scope can create additional requirements that aren’t relevant to the opportunity in front of you.
Start with what you actually need.
3. Identify the Relevant RICCL Codes
The products and services supplied through RISQS are categorised using the Railway Industry Commodity Classification List (RICCL).
Your business will need to select the RICCL codes that correspond with the products or services you intend to provide.
This is an important part of the process because the codes you select help determine the assurance requirements that apply to your business. Depending on your activities, this could include verification requirements or a RISQS audit.
Choosing the right scope at the outset can therefore prevent unnecessary work and help ensure you’re preparing for the requirements your client actually needs you to meet.
Need more information? Read What Is the RISQS RICCL List?.
4. Understand the RISQS Certification Process
Once you know what your client requires and have established the appropriate scope, you can begin working through the RISQS registration and qualification process.
The exact journey varies according to the products and services your business supplies and the assurance requirements associated with them.
You will need to provide information about your organisation and demonstrate that you have appropriate systems, processes and evidence in place for the activities within your scope.
For businesses entering rail for the first time, this is often the point where the process starts to feel more complicated.
Rather than trying to cover the entire process here, we’ve put together a separate step-by-step guide explaining what to expect.
5. Find Out Whether Your Business Will Need a RISQS Audit
Not every RISQS supplier has exactly the same requirements.
Depending on the RICCL codes and activities relevant to your organisation, you may need to undergo a RISQS audit.
Where an audit is required, you’ll need to demonstrate more than the existence of policies and procedures. Your business needs appropriate management systems and evidence that those systems are understood and implemented in practice.
If you’re new to rail, finding this out early is important. It gives you time to assess your existing arrangements and address gaps before the formal audit process.
Find out what to expect: What’s in a RISQS Audit?.
You can also read our Top Tips for RISQS Audit Preparation if you already know an audit will be required.
6. Assess What You Already Have in Place
Being new to rail doesn’t necessarily mean starting from scratch.
If you’re already an established construction, engineering, recruitment or professional services business, you may have many of the foundations required.
You might already have established health and safety procedures, risk assessments, competence and training records, quality management processes, environmental arrangements or ISO-certified management systems.
The question is whether those existing systems satisfy the requirements relevant to the rail work you intend to undertake — and whether you can provide the evidence required to demonstrate that.
A RISQS readiness or gap assessment can help establish:
- What you already have in place
- What is suitable for your proposed RISQS scope
- Where there are gaps
- What needs to be developed or improved
- What evidence you’ll need to demonstrate compliance
- How much work is likely to be involved before you’re ready
This can be particularly valuable if a potential contract depends on achieving RISQS qualification within a particular timeframe.
7. Decide Whether You Need Specialist RISQS Support
You don’t have to employ a consultant simply because a client has asked you to obtain RISQS.
However, if you’ve never worked within the rail industry before, specialist support can make the process considerably easier to navigate.
An experienced RISQS consultant can help you establish what requirements apply, review your existing systems, identify gaps and prepare your organisation for the relevant verification or audit requirements.
Crucially, the objective shouldn’t simply be to produce enough paperwork to get through an assessment.
Your systems need to be appropriate for your business, and your own people need to understand how they work.
If you’re considering getting professional support, read Reasons to Hire a RISQS Consultant or our guide to What to Look for in RISQS Consultants: A Supplier’s Guide.
We’ve Been Told We Need RISQS – Can Simpson Consultancy Help?
Yes.
Simpson Consultancy specialises in supporting businesses working in — or looking to enter — the UK rail industry.
If a client has told you that you need RISQS and you’re not sure where to begin, we can help you understand what your business actually needs before you start investing time and money in the process.
We can support you with:
- Establishing the scope of your RISQS requirements
- Understanding the requirements relevant to your business
- Reviewing your existing management systems
- Identifying and addressing compliance gaps
- Developing the systems and documentation you need
- Preparing your business and team for the RISQS audit process
- Providing ongoing support once you’ve achieved your initial qualification
For businesses new to rail, our role is to make the process clear, manageable and relevant to the work you’re trying to win.
If you’ve been told you need RISQS, speak to Simpson Consultancy.
We’ll help you understand where you are now, where you need to be and the practical steps required to get there.
Need Support?
Ready to get started? Learn more about RISQS audit support here: https://simpsonconsultancy.co.uk/risqs/
Contact us today for a no-obligation consultation and let us help you achieve RISQS certification with confidence.






