SAR ERM Shuttrstk 1947061657

Saudi Arabia Railways Enterprise Risk Management


Ricardo was appointed to design and implement an Enterprise Risk Management (ERM) Framework for Saudi Arabia Railways (SAR). 

The requirement was to develop an approach aligned with ISO 31000:2018, the recognised standard for risk management, that could be implemented on networks operated by SAR, including the North-South Railway, the Haramain High Speed Railway and the Mecca Metro. 


Between February and June 2021, more than 190 consultation workshops were held with 57 functional departments. For each department, a risk register was updated setting out risks across ten core categories – including safety, reputational, legal – with each risk scored for impact/likelihood and for its current mitigation measures.

By cross-analysing the risk registers, the Ricardo experts could map the connections and compile a full list of priority risks as determined by SAR's own teams.


ERM is about developing an internal capability to identify hazards across an entire organisation and ensure coherent, joined up responses can be prepared. For the first time, SAR gained the ability to link maintenance and infrastructure concerns alongside those of recruitment and revenue collection. 

In doing so, SAR could move from a typical 'silo' approach to assessments - where individual departments run their own risk exercises in isolation - to a model able to identify risks that transcend functions.


Saudi Arabia Railways

Key Services

Enterprise Risk Management

Start and end dates

02/2021 - 10/2023


Saudi Arabia, Riyadh

Related case studies

View all case studies

Dubai Metro and Tram

Read case study

Elizabeth line - Crossrail

Read case study

Bangkok Metro Blue Line

Read case study

Have a question about this project?

Click below to get in touch with our expert team