Who owns the way back?Irish Rail's failed control system now waits on a legal calendar

RIrish Rail wrote down €50 million in May 2026 on its investment in a new national train control centre, built around a traffic management system that the Spanish company Indra was developing. Indra won the contract in 2020, and the original estimate of about €20 million later rose above €30 million.⁶⁷

VThe National Transport Authority (NTA), which funds the programme, told the Public Accounts Committee on 16 July that Irish Rail's board had informed it of a decision on Indra's role on 29 June, that the evidence indicated the supplier was unlikely to deliver the required system to full specification, and that its own board accepted Irish Rail's decision, communicated on 13 July. It has commissioned an independent review, due to report in September.¹

RIrish Rail ended the contract within days under its termination for convenience provisions, citing Indra's “failure to deliver a product fit and safe for deployment on our rail network”. Indra says a number of requirements “could not be fully defined or validated during the initial project phases”. Irish Rail is reported to be preparing a damages claim, which Indra says it will defend.²³⁵

RThe replacement path also runs through the law. Irish Rail has asked to award Siemens Mobility a direct contract for its Westcad system by publishing a voluntary ex-ante transparency notice, which opens a 30-day window for challenge. The NTA rejected the request in July and sought more information in August. Irish Rail believed any breach-of-contract case against Indra had to be issued by 15 October, and wanted the procurement question settled first. The reports do not say whether a default notice has been served.⁴

AThe visible problem is a failed software project. The system problem is that the speed of recovery now depends on the order in which a contract dispute, a state approval and a procurement challenge are settled, and engineering waits on that order.

RA purchase that became a development project. Committee members put it to Irish Rail's chief executive that the company thought it was buying a largely off-the-shelf system and ended with a software development project and nothing to show for it. She agreed with that summary.⁶

ATwo accounts of one gap. Irish Rail describes a product that was unfit for its network. Indra describes requirements that could not be defined and network knowledge that was not shared. Each account places the failure at the interface between supplier and operator.²⁵

RSupport spend that rivalled the product. A Fine Gael committee member said almost as much had gone on project support as on Indra, and called it a serious red flag.⁶

RAn old system carrying the load. The existing control systems are considered virtually obsolete, and a serious failure on 29 May caused significant passenger delays. About €20 million over three years has been earmarked to shore them up.²⁴

RCosts that land on other projects. The NTA's chief executive said some planned rail expansion will be rephased or reprioritised to absorb the cost.⁴⁶

AA train control system depends on its software, the people who run it, the rules that govern how it is bought, the public body that funds it, and the old system that keeps trains running meanwhile. Each sets the pace of recovery. Three disciplines ask distinct questions.

AThe requirements question (systems engineering): who wrote down what the railway needed, and what evidence shows that supplier and operator held the same picture of the network? The time question (system dynamics): how long does each step in the recovery chain take, and which steps cannot start until another ends? The condition question (asset management): what is the remaining life of the system that must carry traffic meanwhile, and who funds keeping it safe?

RThe time question carries hard numbers. The first phase of a new system, covering Dublin to Rosslare, was reported in September as possibly a year away, and the full system may not be operational until well into the 2030s.²⁴

IIf the replacement waits behind a procurement challenge and a damages claim, the old system's remaining life is set by legal timing, and the interim spend becomes the real cost of that timing.

AKPL calls this recovery path dependence: the degree to which the route from a failed system back to service is set by contract, legal and procurement sequence rather than by engineering progress.

AWrite the interface down. Record what the operator knows about its own network, and have the supplier confirm it in writing before the build starts.

ATest in the operator's conditions early. Put the supplier's software in front of the people who will run it, on real data, in the first year of the contract.

APlan the exit as carefully as the entry. Settle in advance how a contract ends, what the operator keeps, and what carries the service in the meantime.²

AMap the legal calendar beside the engineering one. List every notice, challenge window and limitation date that gates recovery, each with a named owner.⁴

AFund the old system's life. Treat the system in service as an asset with a remaining life and a budget until its replacement is running.⁴

OUR PERSPECTIVE

The route back to service is set by the calendar that comes next, so draw it first.

AThe same pattern applies to signalling and control centre renewals, air traffic systems, grid control, port terminal systems and hospital record systems: wherever a replacement waits on a procurement or legal decision.

1. Who holds the written record of what our network requires, and has the supplier confirmed it?
2. When did our own operators first see the new system running on real data?
3. If this contract ended tomorrow, what would we keep, and what would carry the service meanwhile?
4. Which notices, challenge windows and limitation dates gate our recovery, and who owns each?
5. What is the remaining life of the system we depend on today, and is its upkeep funded to the replacement date?
6. Which other projects will absorb the cost if this one fails?

AKPL will return to this story when the default notice and the NTA's decision on the Siemens award are public, and check whether either changes how long the existing system must carry traffic.