Railway buyers pre-qualify on records, long before price

Quality and safety almost always, environment frequently, and asset management where the contract covers maintenance or renewal of infrastructure. Anti-bribery certification appears on internationally financed programmes. The tender states whether accreditation is required, and unaccredited certificates are commonly rejected at the document stage, so check that the certifying body’s accreditation actually covers the relevant scope.

It shifts where the audit spends its time. For a component supplier the focus is process control, traceability of safety-critical parts, calibration, welding and NDT qualification, and how you handle a nonconformity found after delivery. Operators and maintainers get a different audit built around possessions, isolation, competence and asset records. The scope wording on the certificate reflects which one you are.

Yes, under a single management system with common procedures and central oversight. The audit programme samples locations across the three-year cycle, weighted by risk and size, so not every depot is visited every year. Sites carrying distinctly different activities, such as heavy overhaul against a stabling point, are treated separately in the sampling plan.

It replaces a backlog list with a decision framework. The standard requires asset information, criticality and condition assessment, and a traceable link from organisational objectives to maintenance and capital plans. That gives a funder the whole-life cost argument for renewing a fleet or a signalling system now rather than continuing to patch it, which is the case boards and finance ministries actually ask to see.

Their work sits inside your scope, and the auditor will test it. Expect sampling of contractor competence records, safety inductions, permit issue and close-out, and how you monitor their performance on site. The contractor’s own certificate helps but does not remove your duty. Most findings in rail audits land at this interface rather than with the operator’s own staff.

Three years, with a surveillance audit each year and a recertification audit before expiry. Surveillance visits check that findings were closed, that safety and asset data is still accurate, and that any new depot or contract has been brought into the system. Administrations verify validity at bid time, so a lapsed certificate can cost a tender outright.