What Is the Certificate?
ISO 22163 is the quality management system standard for the rail sector and is the technical basis for the IRIS certification scheme. It builds on ISO 9001 and adds rail-specific requirements: project management, configuration management, RAMS/LCC (reliability, availability, maintainability, safety and life-cycle cost), first-article approval and obsolescence management.
Who Needs It?
- Rolling-stock manufacturers and system integrators
- Suppliers of components such as bogies, traction systems, brakes, doors and seats
- Signalling and communication system providers
- Organisations providing maintenance, repair and overhaul (MRO) services
Is It Mandatory?
Not legally mandatory; contractually mandatory. Major rail OEMs and operators require an IRIS/ISO 22163 certificate from their suppliers, and the certificate is written into the specification as a precondition for bidding on tenders.
Scope of the Standard
- The entire ISO 9001 structure (clauses 4-10) forms the basis
- Project management: the project plan, milestones, review gates
- Bid management and contract review
- Configuration management and change control
- Reflecting RAMS and LCC requirements in the design
- First article inspection (FAI) and production-process approval
- Obsolescence management
- Supplier development, special processes and traceability
- KPIs and maturity-level assessment
Certification Process
- 1ApplicationThe organisation's field of activity, headcount, number of sites and scope boundaries are determined. The number of audit days is calculated from this information.
- 2Document Review (Stage 1)The management system documentation, scope definition, risk assessment and internal-audit/management-review records are examined; readiness for the on-site audit is assessed.
- 3Certification Audit (Stage 2)It is verified on site that the system is implemented and effective. Findings are classified as major/minor nonconformity or observation.
- 4Closing NonconformitiesThe organisation submits a root-cause analysis and corrective action plan. The certificate is not issued until major nonconformities are closed.
- 5Issuing the CertificateThe certificate is issued after review by an independent decision-maker. The audit team cannot make the certification decision.
- 6Surveillance AuditsA surveillance audit is carried out at least once a year during the certificate's validity. The first surveillance cannot exceed 12 months from the last day of Stage 2.
- 7RecertificationAt the end of three years, the entire system is re-audited; it must be completed before the certificate expires.
Period of Validity
Management system certificates are valid for three years. At least one surveillance audit is carried out per year during this period; the certificate is suspended if surveillance is not carried out. A recertification audit is completed at the end of the third year.
Required Documents
- Trade registry record and operating licence
- The organisation's organisation chart and headcount
- The list of sites/branches within scope
- The management system manual or process documentation
- Internal audit and management review records
- Legal permits, licences and operating documents, if any
Certification Cost
There is no fixed list price; the cost is calculated based on the following variables and provided in writing in the quote.
- The headcount within scope (directly determines the number of audit days)
- The number of sites and branches; whether multi-site sampling applies
- The activity's risk level and process complexity
- The number of standards to be certified — an integrated audit reduces the number of days
- The three-year cycle: certification + two surveillance audits
Accreditation
Management system certification is carried out within the scope of ISO/IEC 17021-1. The certification body is accredited by an accreditation body party to the IAF multilateral recognition agreement (IAF MLA); This agreement establishes a chain of international recognition that ensures that a document issued in one country is accepted in other countries. EUROLAB has internationally recognized accreditation from IAF member accreditation bodies within the scope of ISO/IEC 17021-1.
The scope under which this scheme can be offered varies according to your product and activity; it is confirmed in writing at the quote stage.
Scope and authorisationsRelated Certifications
ISO 9001Quality Management System
ISO 10002Customer Satisfaction and Complaint Management
ISO 10004Customer Satisfaction Monitoring and Measurement
ISO 10012Measurement Management System
ISO 13485Medical Device Quality Management
ISO 15378Pharmaceutical Primary Packaging Quality Management
ISO 17034Reference Material Producers
ISO/IEC 17025Testing and Calibration Laboratories
Frequently Asked Questions
What is the difference between IRIS and ISO 22163?
ISO 22163 is the standard itself; IRIS is the scheme, managed by UNIFE, that sets how certification against this standard is carried out (auditor competence, scoring, database registration). The certificate is registered through the IRIS portal.
