scope:

The framework described in this document applies to assurance activities relating to the control of risks for:

a) health and safety;

b) sustainable development;

c) engineering and asset management;

d) research, development and technology;

e) operations principles;

f) quality;

g) security; and

h) knowledge management.

The assurance framework applies to the whole of the business when undertaking any activities within the purview of the risk areas described.

This document should be read in conjunction with these documents:

a) Principles of the Matrix Framework and Devolved Businesses;

b) Health & Safety Management System;

c) Business Performance Management Framework.

Together, these documents define Network Rail's governance arrangements for the risk areas covered by this document.

Purpose

This document:

a) defines the framework that assures the design and implementation of the risk controls defined in company standards and control documents;

b) mandates analysis and review of the outputs from these assurance activities to deliver continuous improvement; and

c) improves risk controls and assurance activities through mandating corrective action.