IRIS, which stands for International Railway Industry Standard, is the quality management system standard developed specifically for the global railway industry. It is published by UNIFE, the Association of the European Rail Industry, and is now incorporated into ISO as ISO/TS 22163. The standard defines the requirements for a Business Management System (BMS) covering the complete railway product lifecycle from design and development through production, installation, commissioning, maintenance, and end of life.
Unlike general quality management standards, IRIS was purpose-built for the railway sector and reflects the industry's specific demands around safety, reliability, and long service life. Railway products must often function reliably for decades under demanding operating conditions, and the consequences of quality failures in a rail environment can be severe. IRIS addresses this by requiring suppliers to demonstrate not just a documented quality system, but genuine process capability and a systematic approach to risk and reliability management.
For Canadian businesses, IRIS is relevant across a wide range of rail-adjacent industries. Canada has a substantial and growing rail sector driven by freight operators such as CN and CP, urban transit systems in Toronto, Montreal, Vancouver, Calgary, and Ottawa, and the ongoing investment in commuter rail expansion across Ontario and Quebec. Suppliers to rolling stock manufacturers, signalling systems integrators, track and infrastructure providers, and transit authority procurement programmes all encounter IRIS requirements at various points in the supply chain.
IRIS is built on the foundation of ISO 9001. Every requirement of ISO 9001:2015 is incorporated within ISO/TS 22163, and holding ISO 9001 certification is effectively a prerequisite for pursuing IRIS. The railway standard then adds a significant layer of sector-specific requirements on top of the ISO 9001 base.
The most significant additions that IRIS makes beyond ISO 9001 are in four areas. First, RAMS: Reliability, Availability, Maintainability, and Safety. ISO/TS 22163 requires suppliers to have systematic processes for identifying and managing reliability and safety risks throughout the product lifecycle, aligned with the EN 50126 series of railway RAMS standards. Second, project management: IRIS requires a documented project management approach covering scope, schedule, cost, and risk management for railway projects, reflecting the complexity and duration of typical rail procurement programmes.
Third, configuration management: railway products often undergo revision and modification over long service lives, and IRIS requires rigorous tracking of configuration changes to ensure that maintained products remain consistent with their original design intent. Fourth, maintenance: unlike ISO 9001 which focuses on production, IRIS explicitly addresses the supplier's responsibilities for supporting product maintenance throughout the service life, which can extend to 30 or 40 years for major rail assets.
For Canadian manufacturers who also supply the automotive sector, it is worth noting the structural parallel with IATF 16949, which similarly builds on ISO 9001 with automotive-specific requirements. The approach to implementation and internal auditing is broadly similar, and organizations experienced with IATF 16949 often find the transition to IRIS more manageable than those starting from ISO 9001 alone.
IRIS registration is primarily driven by customer requirements. If your organization supplies directly to a railway operator, rolling stock manufacturer, or systems integrator that is itself IRIS registered, you will very likely be required to demonstrate IRIS compliance either immediately or within a defined transition period. The IRIS Online database allows buyers to verify supplier registration status instantly, making it straightforward to enforce supplier qualification requirements across a global supply chain.
In Ontario, manufacturers supplying to Metrolinx, the GO Transit network, the TTC, or the suppliers building rolling stock for these networks frequently encounter IRIS requirements. In Quebec, suppliers to the Caisse de depot's CDPQ Infra projects and to Montreal's STM transit authority face similar expectations. In British Columbia, the ongoing expansion of SkyTrain infrastructure in Vancouver drives IRIS demand among local and national suppliers to the rolling stock and systems integration programmes.
The starting point is a structured gap analysis comparing your current Business Management System against all requirements of ISO/TS 22163. For organizations already holding ISO 9001 certification, the gap analysis focuses specifically on the railway-specific additions: RAMS processes, project management framework, configuration management, and maintenance planning. The output is a prioritized remediation plan that forms the basis of your implementation project. CertCanada conducts these gap analyses on-site at facilities across Ontario, Alberta, British Columbia, and Quebec.
IRIS uses the term Business Management System rather than Quality Management System, reflecting the broader scope of the standard. Building the BMS involves developing or enhancing processes for railway-specific requirements while maintaining full alignment with ISO 9001. Key areas of development typically include the RAMS management process, the project management procedure, configuration control, the product validation and verification approach, and the maintenance support process. Documentation must be practical and genuinely used, not produced as a compliance exercise.
Reliability, Availability, Maintainability, and Safety requirements are the most technically demanding aspect of IRIS for most Canadian suppliers. RAMS requires a systematic approach to identifying reliability targets, allocating them through the design, tracking achievement during development, and demonstrating compliance through analysis and testing. For suppliers new to RAMS, this typically requires engagement with a specialist who understands both the IRIS requirements and the relevant EN 50126 series standards. The depth of RAMS required scales with the safety criticality of the product.
The internal audit for IRIS must cover all processes within scope of the BMS and must be conducted by personnel trained in ISO/TS 22163 auditing. This is more demanding than a standard ISO 9001 internal audit because auditors must be able to assess railway-specific processes including RAMS, project management, and configuration management. CertCanada provides internal auditor training and can support organizations in building a competent internal audit capability as part of the IRIS implementation programme.
Before the external audit can be scheduled, your organization must complete a mandatory self-assessment on the IRIS Online platform, which is the global database maintained by UNIFE for IRIS certification management. The self-assessment scores your organization against the IRIS requirements across all process areas. The score must reach a defined threshold before an external audit can be booked. This self-assessment also becomes the basis for the external auditor's assessment, so it must be completed honestly and accurately.
The external audit is conducted by an IRIS-approved certification body and typically spans two to three days depending on organization size and scope. Unlike many other certification audits, the IRIS audit uses the IRIS Online platform as the primary audit tool, with auditors scoring each requirement directly in the system during the audit. Upon successful completion, the IRIS registration is issued and appears on the IRIS Online database, where it can be verified by any buyer worldwide. Registration is valid for three years with annual surveillance.
IRIS uses a numerical scoring system rather than a simple pass or fail outcome. Each requirement within ISO/TS 22163 is assessed and scored, with the total score determining the organization's IRIS maturity level. Scores range from Level 1 through to the highest levels of process maturity, and buyers can set minimum score thresholds as a condition of supplier qualification.
This scoring approach means that IRIS is genuinely a continuous improvement tool as well as a certification programme. Organizations that achieve registration at a lower maturity level are not disqualified from the industry but are expected to demonstrate improvement at each subsequent audit. Many Canadian rail suppliers begin their IRIS journey in response to a specific customer requirement and then use the scoring feedback to drive systematic improvement across their operations over subsequent audit cycles.
For organizations that already hold ISO 9001 and are performing well against it, an initial IRIS score in the good range is realistic within the first certification cycle. The gap between ISO 9001 performance and IRIS registration is primarily filled by the railway-specific process areas, which is why a well-planned implementation with experienced support produces significantly better first-audit outcomes than an unguided approach.
IRIS is not a documentation standard. It is a process maturity assessment that scores your organization against requirements that railway buyers have agreed reflect genuine operational capability. The IRIS Online self-assessment is not a formality, it is the gate that determines whether your external audit can proceed, and the score your buyers will see. Canadian rail suppliers who approach IRIS with the same depth of preparation they would bring to a safety-critical manufacturing audit consistently achieve better first-cycle scores and stronger buyer relationships than those who treat it as a paperwork exercise.
Book a free consultation with Sarita Rana and get a clear gap analysis and implementation roadmap tailored to your railway supply chain requirements.