scope:

This Specification provides the necessary direction and guidance on the assurance framework, i.e. the different levels of audit and the self assurance processes, within Network Rail.

It is applicable to all parts of Network Rail's business, and is predicated on each function having:

• An understanding of key risks;
• Clearly defined controls to mitigate key risks embedded within process procedures
• Line management monitoring arrangements defined within these process procedures to provide ongoing verification of compliance with key controls and effectiveness in achieving objectives
• Annual self assessment based on the output of line management monitoring;
• Internal audits to verify integrity of line management monitoring;
• Appropriate feedback loops to review findings and trends, and confirm how to address deficiencies (which should include reference to Professional Heads as appropriate);
• Appropriate assurance information provided at each level of the functional organisation via the normal management review meetings.

Whilst the principles described in this Specification will be similar, it does not cover audits carried out by the HQ Internal Audit department or the audit process used by external bodies.

Purpose

The Network Rail assurance framework aims to provide the Board and management groups with confidence in the levels of compliance with Network Rail's Health & Safety Management System, formal company standards, procedures, legislation, and contractual requirements.

This Specification sets out to clearly and concisely explain the different levels of audit and the self assurance processes within Network Rail, and how to plan, carry out and review these effectively.