This is true, although CIRAS is part of the RSSB. The ORR are responsible for the Interoperability of the railway, authorisation and safety legislation, they ultimately supervise the RSSB.
I wouldn't discount either of the public bodies, concerns will end up in the same place eventually.