A paper which describes the development of Operation System Safety Assurance (OSSA) methodology to strengthen the review of the robustness of risk control measures on MRT railways. The approach adopts a bowtie structure to analyse the risk controls for high consequence risk scenarios.