We do this by reducing supply chain risk, ensuring that businesses have the systems they claim and the processes to apply their capabilities safely.

We’re here to ensure that everyone knows what they’re meant to do and how to do it. This is the driving force behind our expanding portfolio of supplier assurance.

Railway buyers need to find the right suppliers, with the right capabilities, at the right time. RISQS helps buyers achieve this.

RISQS has more than 4,000 supplier members. We help them demonstrate their capabilities and give them visibility. We’re designed for the rail industry and overseen by independent industry figures. We’re always evolving to become more efficient and cost-effective, including launching a smarter, simpler platform and enhancing our audit services and benchmarking. We’re here to provide the industry with supplier assurance that’s fit for the future.

As you may be aware, RISQS has developed a new portal to coincide with the new Procurement Act, the effective date of which has been moved from 28 October 2024 to 24 February 2025. A statement from the Cabinet Office regarding this delay of 4 months can be found here.

At RISQS, we’ve chosen to continue with our current implementation timeline of additional functionality for new small and medium enterprise (SME) or voluntary, community, and social enterprise (VCSE) suppliers wishing to join RISQS, supporting them in becoming visible to railway buyers as interested in working with the railway industry and helping buyers drive social value into rail. This functionality will be available from Thursday 21 November

I am interested. What do I need to do?

From Thursday 21 November, new suppliers meeting the criteria must register to join RISQS via our website.

Further information about RISQS can be found at www.risqs.org or by going directly to the suppliers’ resource page here. There is also a section that explains the verification process for suppliers to the railway here.

What kind of information does my organisation need to provide?

Your organisation will need to provide a range of information about your company, such as:

  • information about your management team
  • insurance policies
  • management systems arrangements
  • competence management
  • financial information. 

Most importantly, you will be asked to select the products and services you wish to provide to buyers in the industry.

What are RICCL codes?

RICCL stands for Railway Industry Commodity Classification List. It is a flexible list that contains all the commodities (products and services) that are purchased for the railway. Each supplier on the portal will have selected the RICCL codes relevant to the products and services they wish to supply. RISQS uses RICCL codes, as this is based on an ISO that details how a rail system should be broken down into its constituent parts.

Each RICCL code has a predetermined risk level. For a full list, please visit the RSSB website. There are various ways of navigating the RICCL. The easiest is by typing in the product or service(s) and once selected, the risk level ‘auditable or verification’ can be seen.

  • Auditable: Selecting a code with the auditable risk level will require your organisation to undergo and pass a RISQS audit before being qualified to provide product or service(s) to railway industry buyers under the RISQS scheme.
  • Verification: Verification codes do not require a RISQS audit, and on passing the verification process, your registration is complete.

Who can join the RISQS prospects area?

The prospects area will only be open to new suppliers that meet the requirement(s) of being and an SME or an VCSE. 

What is the definition of an SME?

Under the Procurement Act 2023, an SME is defined as a supplier that meets the following criteria:

  • fewer than 250 employees
  • annual turnover of £44 million or less, or a balance sheet total of £38 million or less.

What is the definition of an VCSE?

Under the Procurement Act 2023, an VCSE is defined as an organisation that operates primarily for social or community benefit, rather than for profit. These organisations include:

  • charities
  • community groups
  • social enterprises
  • public service mutuals.

Is there a fee?

The membership fee structure can be found here.

Why do I have to pay?

Current members of RISQS were required to join and pay a membership fee in compliance with the Act. RISQS is required to ensure that all members are treated equally when joining.

How do I know if I need an audit?

An audit is required if you have selected an auditable RICCL code. Higher-risk codes require auditing, and you can check the RICCL to see whether the codes you wish to supply are subject to an audit. You may also require an audit due to the location of your work. Organisations that work in specific areas of the railway infrastructure must be assessed to ensure that they meet the rules. If you require an audit, the system will add it to the audit scheduling system, and you will be contacted by Scheduling to arrange a date for your audit. The system will also generate an audit invoice. Where the RICCL code has a lower risk level of V (verification), this code will be given once all compliance information is completed and verified. Where it is A (auditable), this requires you to undertake an audit. You will only be searchable against this RICCL code once you have successfully undergone the relevant audit.

Stage 4 - Preparing for the new Procurement Act is from Thursday 7 November to Friday 31 January 2025. 

We will send regular updates and develop documentation to support each stage. The FAQ page has been set up on the website and will be updated on a regular basis with answers to your queries.