scope:

The assurance framework described in this business process applies to assurance activities relating to the control of risks for:

a) health and safety; 

b) sustainable development; 

c) engineering and asset management;

d) research, development and technology; 

e) operations principles; and 

f) security

This assurance framework applies to the whole of the business when undertaking any activities named in this document.

This business process should be read in conjunction with these documents:

a) Principles of the Matrix Framework and Devolved Businesses; 

b) Health & Safety Management System; 

c) Core Process Owners assurance framework. 

Together, these documents define Network Rails governance arrangements for the risk areas covered by this document. 

This business process is not limited to current controls as stated in company standards and control documents, any risk can be assured as part of it. 

Purpose 

This business process: 

a) defines the framework that assures the design and implementation of the risk controls defined in company standards and control documents;

b) mandates analysis and review of the outputs from these assurance activities to deliver continuous improvement; identification of emerging risk and reporting of outcomes/ KPIs;

c) improves risk controls and assurance activities through mandating corrective action