The evolution of railway safety is described from the perspective of the European Union Agency for Railways (ERA). The increasing importance of risk management is emphasized, as well as recent initiatives concerning Common Occurrence Reporting in Europe and a big data approach. The emphasis of the Agency is on developing a positive safety culture, leading to integrating Safety Management Systems with human and organisational factors. New threats drive our thinking towards the management of both safety and security risks in a consistent manner.