Risk Management Maturity Model (RM3)


This document sets out the criteria we use to assess an organisation's ability to achieve excellence when controlling health and safety risks.

RM3 2019 (amended 2020)

After working very closely with stakeholders from across Britain's rail industry, we launched RM3 2019, our latest version of the Risk Management Maturity Model.

Since its launch in April 2019 and subsequent successful use across the rail industry, we have noticed some spelling mistakes, text overruns and formatting errors in the RM3 2019 document. We have done a review of the document and made amendments to correct these mistakes. The latest version is annotated 'Amended 2020', otherwise it is the same document as launched in April 2019. 

Key changes Collapse accordion Open accordion

The new edition of RM3 2019 is designed to be more accessible to people just starting to use the model, and pushing the boundaries for experienced users.

We have:

  • filled in the gaps in evidence and made sure that it builds up through the maturity levels
  • identified evidence of collaboration, continuous improvement and use of technology, to support improved risk control at higher levels of maturity
  • provided evidence of organisational culture throughout all criteria and maturity levels, rather than just in criteria OC6
  • changed the maturity level certain evidence sits in to support greater stretch and improvement in health and safety risk control.

Topic Set 1 Heritage Railways Collapse accordion Open accordion

We recognise that smaller organisations or those just starting out on the RM3 journey may find some elements of RM3 2019 inaccessible or not obviously relevant to them. To help minor and heritage railways we developed Topic Set 1 Heritage Railways.

Topic Set 1 provides focused descriptors over a much smaller and more readily applicable set of criteria that reflect the sector’s operating characteristics and risk profile. Users should find the additional examples of heritage-centred evidence make it easier to determine maturity levels of their organisation.

We believe this approach makes RM3 more accessible and meaningful as a tool to help organisations identify what they can do to improve the maturity of their safety management system.

Future work Collapse accordion Open accordion

  • Through the RM3 Governance Board we will publish a core training syllabus.
  • We'll be creating an interactive PDF that includes navigation and links to referenced material.

For more information, please contact RM3@orr.gov.uk.

The ORR RM3 Assessment Toolkit Spreadsheet Collapse accordion Open accordion

This is an Excel spreadsheet that assists the assessor to determine their level of maturity against each of the 26 RM3 criteria. The spreadsheet has an easy to use evidence matrix to determine the 25 RM3 criteria maturity levels and a separate organisational culture (OC6) assessment matrix. The data from these assessments is automatically populated and represented in radar graph and bar charts for ease of presentation.