The International Railway Industry Standard — the IAQG equivalent for rail — required by every major railway project supply chain in the region, from Etihad Rail to the Riyadh Metro to the Haramain High Speed Railway.
ISO 22163 is the formal ISO standard behind IRIS (International Railway Industry Standard), maintained by UNIFE — the Union of European Railway Industries. Built on ISO 9001 and adding RAMS, project management, configuration management, and supply chain controls, it is the quality management entry requirement for rail supply chains globally. In the UAE and Saudi Arabia, the scale of rail infrastructure investment — Etihad Rail, Dubai Metro extensions, the 176km Riyadh Metro, Haramain HSR, Saudi Landbridge, NEOM transit — has brought IRIS certification requirements to UAE and Saudi supply chain companies at scale.
Regulatory and Legal Context — UAE Rail
| Authority / Framework | ISO 22163 Relevance |
|---|---|
| Roads and Transport Authority (RTA) — Dubai | RTA governs the Dubai Metro, tram, and bus networks. Tier 1 contractors (Alstom, Siemens, Thales) apply IRIS requirements to their UAE supply chains under RTA project quality requirements |
| Etihad Rail — Federal Rail Operator | Etihad Rail operates under federal authority. Its procurement applies international rail quality standards, including IRIS, to equipment and service providers |
| Abu Dhabi Department of Transport (DoT) | Oversees Abu Dhabi transport infrastructure. Rail projects in Abu Dhabi apply IRIS-compliant quality requirements through contract quality clauses |
| UAE Federal Transport Authority | Oversees federal transport policy. Quality management for rail infrastructure suppliers must meet international standards as contract conditions |
Regulatory and Legal Context — Saudi Arabia Rail
| Authority / Framework | ISO 22163 Relevance |
|---|---|
| PIF (Public Investment Fund) — Rail Projects | PIF-funded projects — Riyadh Metro, Haramain, Saudi Landbridge — require internationally recognised quality management. IRIS is the applicable standard for all rail supply chain participants |
| SAR (Saudi Railway Organization) | SAR operates the freight rail network. Supply chain and rolling stock suppliers must meet SAR quality requirements recognised through IRIS certification |
| Ministry of Transport — Saudi Arabia | Major rail projects let by the Ministry require Tier 1 contractors to enforce IRIS requirements on their supply chains through contract flow-down requirements |
| NEOM Transit and Diriyah Gate (DGDA) | Mega-project transit systems apply international rail project quality requirements to supply chain and operator organisations |
Where ISO 22163 Is Most In Demand
| Location | Rail Project / Activity |
|---|---|
| Dubai — Metro network and future extensions | RTA's ongoing metro expansion creates supply chain demand for IRIS-certified suppliers in systems, rolling stock maintenance, and civil works |
| Abu Dhabi — Etihad Rail depot and terminal infrastructure | Etihad Rail's Abu Dhabi operations hub creates demand for IRIS-certified supply chain across equipment, systems, and maintenance |
| Saudi Arabia — Riyadh (Metro and SAR HQ) | The Riyadh Metro — one of the world's largest metro projects — and its Tier 1 contractors (Alstom, Siemens Mobility, Thales) require IRIS certification from supply chain |
| Saudi Arabia — Makkah and Madinah (Haramain HSR) | Ongoing supply chain for Haramain maintenance, spare parts, and systems |
| Saudi Arabia — Eastern Province (SAR freight rail) | SAR freight network creates ongoing supply chain requirements for rolling stock maintenance, track, and systems suppliers |
What ISO 22163 Adds Beyond ISO 9001
| Requirement | Why It Matters in Rail |
|---|---|
| RAMS (Reliability, Availability, Maintainability, Safety) | Rail operators set RAMS targets. Suppliers must demonstrate their products are designed and delivered to meet them — not just manufactured to specification |
| Project management requirements | ISO 22163 includes explicit PM requirements reflecting the long-duration, multi-stakeholder nature of railway projects — absent from ISO 9001 |
| Configuration management | 30-year asset lives require formal configuration management. Changes to products in service must be tracked and approved throughout the asset lifecycle |
| Supply chain management | High technical risk in rail supply chains requires structured supplier approval and ongoing performance management |
| BMS model assessment | UNIFE assesses maturity against the Business Management System model with scoring — not a pass/fail audit. BMS scores are published in OASIS-Rail |
The UNIFE Business Management System (BMS) Model
ISO 22163 is assessed against the UNIFE Business Management System model — a structured maturity scoring framework. Unlike a standard pass/fail management system audit, the BMS model scores each requirement element on a maturity scale. Higher scores reflect more systematic, measurable, and continuously improving processes. BMS scores are published in OASIS-Rail and can be compared by customers over successive certification cycles.
This is why consultants unfamiliar with the UNIFE approach often produce systems that satisfy the standard text but score poorly in BMS assessment. Nathan ISO Consulting builds specifically to the BMS model from the outset.
Why Nathan ISO Consulting — What We Do Differently
IRIS certification is technically distinct from standard ISO management system work. The UNIFE BMS model, RAMS documentation, and OASIS-Rail registration requirements are not covered in standard ISO consultant training.
| What We Do Differently | How It Benefits Your Project |
|---|---|
| We build to the UNIFE BMS model, not just the standard text | IRIS assessors evaluate maturity against the BMS model with scoring. A system built only to the standard text misses this dimension entirely — and scores accordingly |
| We understand RAMS documentation | RAMS is a railway-specific technical discipline. We integrate RAMS evidence into the QMS rather than treating it as a separate document that lives outside the system |
| We conduct a BMS self-assessment before certification | We score your system against the BMS model before the registered assessor arrives so there are no score surprises on the day |
| We link to your specific Tier 1 customer requirements | We review your contract quality clauses from Alstom, Siemens, Thales, or Bombardier and build the system to satisfy their flow-down requirements specifically |
| We know which certification bodies are UNIFE-registered | Not all IAF-accredited bodies can certify to ISO 22163. We identify appropriate UNIFE-registered bodies with GCC auditing capability |
Frequently asked questions
IRIS (International Railway Industry Standard) is the certification scheme. ISO 22163 is the ISO standard on which the scheme is based. The industry uses both terms. Certification is to ISO 22163, administered under the UNIFE IRIS scheme with OASIS-Rail registration.
Rolling stock manufacturers, component and systems suppliers, rail infrastructure contractors, signalling and communications suppliers, and maintenance organisations supplying to Etihad Rail, RTA, Riyadh Metro, Haramain HSR, and SAR projects.
The IAQG/UNIFE database of IRIS-certified organisations. Rail customers check OASIS-Rail to verify certification status, scope, and BMS scores. Registration is mandatory — a certificate not visible there will not satisfy customer requirements.
RAMS — Reliability, Availability, Maintainability, Safety — requires that your organisation can demonstrate its products and services are designed and delivered to meet the RAMS targets set by the railway operator. This requires documented RAMS management processes integrated into the QMS.
ISO 9001 is a useful foundation. The RAMS, project management, configuration management, and BMS model requirements are genuine additions requiring proper implementation. The gap is real but workable for an organisation with a strong existing QMS.
Four to eight months, depending on scope and current QMS maturity. The BMS model assessment approach takes longer than a standard ISO audit because of the maturity scoring methodology.
UNIFE sets minimum BMS scores. We build your system to exceed the minimum from the outset — not to scrape past it.
Yes. Some organisations in dual rail and aerospace supply positions maintain both. The High Level Structure is common to both and integration is practical.
Several major certification bodies with UAE presence are UNIFE-registered. We identify appropriate bodies with relevant sector scope and UAE/Saudi auditing capability.
Configuration management formally tracks and controls the physical and functional characteristics of products throughout their lifecycle — essential for rail assets with 30+ year operational lives. First article inspection is not explicitly required in ISO 22163 as it is in AS9100, but design verification and product realisation controls serve a similar purpose.
Civil works contractors on major rail projects are often required by the rail systems integrator to demonstrate quality management aligned to IRIS principles, even where full ISO 22163 certification is not contractually specified.
We support clients through surveillance audits, BMS score improvement programmes, and scope extensions. OASIS-Rail status must be maintained for the certificate to remain valid in customer supply chain systems.
Tell Us About Your Rail Project Requirements
Send us your contract quality requirements, the projects you are supplying to, and your current QMS status. We scope the IRIS certification project from there with a fixed-fee proposal.
0
Projects
0
Services
0
Clients Serving
0
Countries Serving