The industry should develop in conjunction with the Regulator a process for addressing the need to maintain the risk profile of a facility moving into extended life operation at the same risk profile as when it was within design life.

The ITSRR should conduct its own risk assessment in relation to the risk of any such high consequence, low probability accident and, if necessary, direct RailCorp to conduct a further risk assessment to reduce the level of residual risk to a level ITSRR regards as acceptable.

RailCorp should undertake risk assessments of each of its activities as follows:
(a) identify the features of the system, subsystem or activities that are to be risk assessed and managed, to determine what makes the system work in terms of equipment, infrastructure and human factors;
(b) identify all hazards that may exist within the particular system, subsystem or activity, whether it is a driver safety system, passenger safety system, engineering design system, train maintenance system or involves human factors or performance;
(c) identify what controls are in place to eliminate or minimise the risks associated with any identified hazard;
(d) test the validity of the controls to ensure that the risk is eliminated or reduced to an acceptable level and, if not, institute additional or further control measures;
(e) specify, in safety documentation, the level of any residual risk;
(f) in the case of low probability, high consequence risks retain the services of an independent verifier of the risk assessments and controls to certify that all risks of such potentially catastrophic accidents have either been eliminated, or controlled to the extent identified by the independent expert;
(g) the Board of RailCorp certify that it regards any residual risk of a high consequence, low probability accident as acceptable, notwithstanding the severity of the consequences, by reason of the cost of further measures to control the risk; and
(h) provide to ITSRR records of the processes of hazard identification, risk assessment, risk control, independent verification and certification, and any Board certification relating to any high consequence, low probability accident.

The ITSRR should have permanent access to the RailCorp intranet.

Maintenance plans on all trains should be revised annually.