Risk Management Maturity Model (RM3)


This document sets out the criteria we use to assess an organisation's ability to achieve excellence when controlling health and safety risks.

RM3 2019 (amended 2020)

After working very closely with stakeholders from across Britain's rail industry, we launched RM3 2019, our latest version of the Risk Management Maturity Model.

Since its launch in April 2019 and subsequent successful use across the rail industry, we have noticed some spelling mistakes, text overruns and formatting errors in the RM3 2019 document. We have done a review of the document and made amendments to correct these mistakes. The latest version is annotated 'Amended 2020', otherwise it is the same document as launched in April 2019. 

Key changes

The new edition of RM3 2019 is designed to be more accessible to people just starting to use the model, and pushing the boundaries for experienced users.

We have:

  • filled in the gaps in evidence and made sure that it builds up through the maturity levels
  • identified evidence of collaboration, continuous improvement and use of technology, to support improved risk control at higher levels of maturity
  • provided evidence of organisational culture throughout all criteria and maturity levels, rather than just in criteria OC6
  • changed the maturity level certain evidence sits in to support greater stretch and improvement in health and safety risk control.

Future work

  • Through the RM3 Governance Board we will publish a core training syllabus.
  • We'll be creating an interactive PDF that includes navigation and links to referenced material.

For more information, please contact RM3@orr.gov.uk.

The ORR RM3 Assessment Toolkit Spreadsheet

This is an Excel spreadsheet that assists the assessor to determine their level of maturity against each of the 26 RM3 criteria. The spreadsheet has an easy to use evidence matrix to determine the 25 RM3 criteria maturity levels and a separate organisational culture (OC6) assessment matrix. The data from these assessments is automatically populated and represented in radar graph and bar charts for ease of presentation.